How to generate a Checkmarx report and upload it to ThreadFix.
Audience: IT Professional
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A
After logging into the Checkmarx instance, there are two options for obtaining a report:
Download a report from existing results
Queue a scan to create results for a report:
Select the Project & Scans tab and select Create New Project from the options list.
Enter a Project Name and click the Next button.
Zip up the source code to be scanned, select it and select Upload.
Select Now for Choose the scan execution time and click the Finish button.
After the scan has finished, select the Project & Scans tab and select All Scans from the drop-down options.
Select the Create Report icon for the completed scan.
Select XML for the Report Format and click the the Generate Report button.
After generating a report, log in to ThreadFix and navigate to the Portfolio page, found on the Navigation sidebar under the Application sub-menu.
Expand the Team the report will be uploaded to.
After picking one of the Team's applications, select Upload Scan and drag the report into the Pane.
Once ThreadFix finishes processing the report, the results can be viewed on the individual application's page.