Pinned Repositories
2ms
Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
ast-cli
A CLI project wrapping application security testing (AST) APIs
capital
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
chainalert-github-action
scans popular packages and alerts in cases there is suspicion of an account takeover
chainjacking
Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
ci-cd-integrations
If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.
dustilock
DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.
JS-SCP
JavaScript Secure Coding Practices guide
kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
kics-github-action
GitHub actions of KICS scan - Keeping Infrastructure as Code Secure
Checkmarx's Repositories
Checkmarx/kics
Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.
Checkmarx/capital
A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.
Checkmarx/2ms
Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git
Checkmarx/ast-cli
A CLI project wrapping application security testing (AST) APIs
Checkmarx/kics-github-action
GitHub actions of KICS scan - Keeping Infrastructure as Code Secure
Checkmarx/ast-github-action
Checkmarx application security testing (AST) GitHub action
Checkmarx/ast-vscode-extension
The Checkmarx One Visual Studio Code plugin (extension) enables you to import results from a Checkmarx One scan directly into your VS Code console. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.
Checkmarx/ci-cd-integrations
If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.
Checkmarx/gen-ai-prompts
Remediate SAST results using AI
Checkmarx/kics-cdk-validator-plugin
A KICS plugin for AWS CDK
Checkmarx/ast-azure-plugin
The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.
Checkmarx/vorpal-reviewdog-github-action
Run Vorpal with reviewdog 🐶
Checkmarx/ast-eclipse-plugin
The CxAST Eclipse plugin enables you to import results from a CxAST scan directly into your IDE. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.
Checkmarx/sast-to-ast-export
CLI tool to export data from CxSAST and import into AST CxOne
Checkmarx/ast-jetbrains-plugin
The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.
Checkmarx/ast-teamcity-plugin
The CxAST TeamCity plugin enables you to trigger SAST, SCA, and KICS scans directly from a TeamCity project.
Checkmarx/ast-visual-studio-extension
The CxAST Visual Studio plugin enables you to import results from a CxAST scan directly into your IDE
Checkmarx/homebrew-ast-cli
Checkmarx/containers-resolver
Checkmarx/secret-detection
Checkmarx/ast-cli-maven-plugin
A Maven plugin for using the AST CLI in Maven lifecycle phases
Checkmarx/containers-images-extractor
Checkmarx/containers-syft-packages-extractor
Checkmarx/containers-types
Checkmarx/daniel-mcp-test
Checkmarx/gen-ai-wrapper
Checkmarx/manifest-parser
Checkmarx/Phoenix-WebGoat
Project with vulnerabilities for plugins team tests
Checkmarx/plugins-release-workflow
Automates the release workflow across all components, starting with the CLI, followed by the Wrappers, and concluding with the Plugins. This streamlined process ensures consistent and efficient deployment across the entire ecosystem.
Checkmarx/Vulnerabilities-Proofs-of-Concept