Checkmarx (ThreadFix 3.X)
You will learn
How to generate a Checkmarx report and upload it to ThreadFix.
Prerequisites
Audience: IT Professional
Difficulty: Basic
Time needed: Approximately 10 minutes
Tools required: N/A
Generate Results
After logging into the Checkmarx instance, there are two options for obtaining a report:
Download a report from existing results
Queue a scan to create results for a report:
Select the Project & Scans tab and select Create New Project from the options list.
Â
Enter a Project Name and click the Next button.
Â
Zip up the source code to be scanned, select it and select Upload.
Â
Select Now for Choose the scan execution time and click the Finish button.
Â
After the scan has finished, select the Project & Scans tab and select All Scans from the drop-down options.
Â
Select the Create Report icon for the completed scan.
Â
Select XML for the Report Format and click the the Generate Report button.
Upload Results
After generating a report, log in to ThreadFix and navigate to the Portfolio page, found on the Navigation sidebar under the Application sub-menu.
Â
Expand the Team the report will be uploaded to.
Â
After picking one of the Team's applications, select Upload Scan and drag the report into the Pane.
Â
Once ThreadFix finishes processing the report, the results can be viewed on the individual application's page.
Table of Contents
www.threadfix.it | www.coalfire.com
Copyright © 2024 Coalfire. All rights reserved.
This Information Security Policy is CoalFire - Public: Distribution of this material is not limited.