Verified Answers


If an answer to your question is correct, click on "Verify Answer" under the "More" button. The answer will now appear with a checkmark. Please be sure to always mark answers that resolve your issue as verified. Your fellow Community members will appreciate it!  Learn more

  • State Suggested Answer
  • Replies replies
    2
  • Answers answer
    1
  • Subscribers subscribers
    5
  • Views views
    482
  • Users 0 members are here
  • Locked Locked
Related
Options
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Does Pulse support Checkmarx CxSAST source code analysis tool such as WhiteSource bundled plugin?

adelinesu

.

Tags:

  • Suggested Answer

    0

    Currently PulseUno does not have a specific plugin for Checkmarx SAST.

    It is possible to run command-line tools using the built-in Script plugin (I'm assuming that the scanner for Checkmarx SAST is a command-line tool you can run), so you will be able to incorporate Checkmarx SAST into your CI builds, and see any results in PulseUno's output console and probably in the Checkmarx web interface.

    However, closer integration (such as seeing the SAST findings annotated in PulseUno's pull requests or code reviews) wouldn't happen this way. If there were sufficient customer demand, we'd consider writing the plugin ourselves as part of the PulseUno product.

    Without this demand, it is possible for advanced customers to write their own plugins using a Java API, but this would need a Java programmer. We are also looking at ways of allowing users to do closer integration themselves using shell-scripting rather than Java code in future (e.g. for tools we can't support).

  • 0 in reply to 

    Thanks for your reply.
    We are trying to use the built-in Script plugin to execute Windows PowerShell and call Checkmarx SAST REST.
    The challenge we are currently facing is how to put the result report file or link back into the chain.

    Is there a way to put the result report file back into the chain so that users can download it?

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.