checkmarx Goto Github PK

2ms

Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

api-security-top-10

appsecvillage-samples

A public repo to hold some code review challenges for RSA Conference 2022

artifactory-security-plugin

ast-azure-plugin

The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.

ast-cli

A CLI project wrapping application security testing (AST) APIs

ast-eclipse-plugin

The CxAST Eclipse plugin enables you to import results from a CxAST scan directly into your IDE. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

ast-github-action

Checkmarx application security testing (AST) GitHub action

ast-jetbrains-plugin

The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

ast-teamcity-plugin

The CxAST TeamCity plugin enables you to trigger SAST, SCA, and KICS scans directly from a TeamCity project.

ast-visual-studio-extension

The CxAST Visual Studio plugin enables you to import results from a CxAST scan directly into your IDE

ast-vscode-extension

The Checkmarx One Visual Studio Code plugin (extension) enables you to import results from a Checkmarx One scan directly into your VS Code console. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

capital

A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

chainalert-github-action

scans popular packages and alerts in cases there is suspicion of an account takeover

chainjacking

Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks

ci-cd-integrations

If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.

cuteboi

This open-source project tracks CuteBoi's activity over time as there are evidence the actor is still active. All information provided here is intended for research purposes.

dast-github-action

dustilock

DustiLock is a tool to find which of your dependencies is susceptible to a Dependency Confusion attack.

gen-ai-wrapper

gitleaks

Protect and discover secrets using Gitleaks 🔑

goatlin

(aka Kotlin Goat) - an intentionally vulnerable Kotlin application

homebrew-ast-cli

homebrew-tap

Homebrew Formulae to binaries

jobdecrypter

A decryption tool for the JobCrypter ransomware

js-scp

JavaScript Secure Coding Practices guide

kics

Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

kics-cdk-validator-plugin

A KICS plugin for AWS CDK

kics-codefresh-step

kics-github-action

GitHub actions of KICS scan - Keeping Infrastructure as Code Secure