Image Added

📙 You will learn

How to generate a Checkmarx report and upload it to ThreadFix.

Prerequisites

Audience: IT Professional
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A

Generate Results

After logging into the Checkmarx instance, there are two options for obtaining a report:

• Download a report from existing results

• Queue a scan to create results for a report:

1. Select

1. the Project & Scans

1.  tab and

1. select Create New Project

1. from the options list.
   

   Image Added

    

2. Enter

1. a Project Name and

1. click the Next button.
   

   Image Added

    

2. Zip up the source code to be scanned, select it and

1. select Upload

1. .
   

   Image Added

1. Select Now

1.  for Choose the scan execution time

1.  and click the Finish button.
   

   Image Added

    

2. After the scan has finished, select the Project & Scans

1.  tab and select All Scans

1. from the drop-down options.
   

   Image Added

    

2. Select

1. the Create Report

1.  icon for the completed scan

1. .
   

   Image Added

1. Select XML

1.  for the Report Format

1.  and click the the Generate Report

1. button.
   

Image Added

Upload Results

1. After generating

1. a report, log in to ThreadFix and navigate to the 

1. Portfolio page, found on the Navigation sidebar under the Application sub-menu.
   

   Image Added

    

2. Expand the Team

1. the report will be uploaded to

1. .
   

   Image Added

1.  

2. After picking one of the Team's

1. applications, select Upload Scan and drag the report into the Pane

1. .

   Image Added

1.  

2. Once ThreadFix

1. finishes processing the report, the results can be viewed on the

1. individual application's page

1. .
   

   Image Added