Skip to content
@Checkmarx

Checkmarx

Pinned Loading

  1. kics kics Public

    Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

    Open Policy Agent 2.2k 316

  2. 2ms 2ms Public

    Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

    Go 85 17

  3. capital capital Public

    A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

    CSS 282 72

  4. ci-cd-integrations ci-cd-integrations Public

    If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.

    Groovy 9 17

Repositories

Showing 10 of 51 repositories
  • ast-azure-plugin Public

    The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.

    Checkmarx/ast-azure-plugin’s past year of commit activity
    TypeScript 4 Apache-2.0 5 5 15 Updated Jan 30, 2025
  • ast-cli Public

    A CLI project wrapping application security testing (AST) APIs

    Checkmarx/ast-cli’s past year of commit activity
    Go 45 Apache-2.0 24 6 14 Updated Jan 30, 2025
  • 2ms Public

    Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

    Checkmarx/2ms’s past year of commit activity
    Go 85 Apache-2.0 17 32 (2 issues need help) 1 Updated Jan 30, 2025
  • ast-eclipse-plugin Public

    The CxAST Eclipse plugin enables you to import results from a CxAST scan directly into your IDE. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

    Checkmarx/ast-eclipse-plugin’s past year of commit activity
    Java 4 Apache-2.0 11 0 1 Updated Jan 30, 2025
  • ast-teamcity-plugin Public

    The CxAST TeamCity plugin enables you to trigger SAST, SCA, and KICS scans directly from a TeamCity project.

    Checkmarx/ast-teamcity-plugin’s past year of commit activity
    Java 3 Apache-2.0 2 1 8 Updated Jan 29, 2025
  • sast-to-ast-export Public

    CLI tool to export data from CxSAST and import into Checkmarx Application Security Testing Platform

    Checkmarx/sast-to-ast-export’s past year of commit activity
    Go 3 Apache-2.0 5 4 0 Updated Jan 29, 2025
  • ast-visual-studio-extension Public

    The CxAST Visual Studio plugin enables you to import results from a CxAST scan directly into your IDE

    Checkmarx/ast-visual-studio-extension’s past year of commit activity
    C# 2 Apache-2.0 6 3 9 Updated Jan 29, 2025
  • ast-jetbrains-plugin Public

    The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

    Checkmarx/ast-jetbrains-plugin’s past year of commit activity
    Java 3 Apache-2.0 3 0 11 Updated Jan 29, 2025
  • containers-resolver Public
    Checkmarx/containers-resolver’s past year of commit activity
    Go 0 0 0 0 Updated Jan 29, 2025
  • containers-syft-packages-extractor Public
    Checkmarx/containers-syft-packages-extractor’s past year of commit activity
    Go 0 0 0 0 Updated Jan 28, 2025
View all repositories