Skip to content

Commit 32d5da2

Browse files
Updated the readme doc (AST-99380) (#247)
* Updated the readme doc * Updated oAuth Link * Updated the logo of checkmarx * Updated with url of logo * Updated the svg logi * updated the contribution * Added new svg image
1 parent 88c6014 commit 32d5da2

1 file changed

Lines changed: 54 additions & 28 deletions

File tree

README.md

Lines changed: 54 additions & 28 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
<img src="https://raw.githubusercontent.com/Checkmarx/ci-cd-integrations/main/.images/banner.png">
1+
<img src="https://raw.githubusercontent.com/Checkmarx/ci-cd-integrations/main/.images/PluginBanner.jpg">
22
<br />
33
<div align="center">
44

@@ -14,7 +14,7 @@
1414
<br />
1515
<p align="center">
1616
<a href="https://github.com/Checkmarx/ast-github-action">
17-
<img src="https://raw.githubusercontent.com/Checkmarx/ci-cd-integrations/main/.images/logo.png" alt="Logo" width="80" height="80" />
17+
<img src="https://raw.githubusercontent.com/Checkmarx/ci-cd-integrations/main/.images/cx_logo.svg" alt="Logo" width="80" height="80" />
1818
</a>
1919

2020
<h3 align="center">AST-GITHUB-ACTIONS</h3>
@@ -37,53 +37,79 @@
3737
<summary>Table of Contents</summary>
3838
<ol>
3939
<li>
40-
<a href="#about-the-project">About The Project</a>
40+
<a href="#overview">Overview</a>
4141
</li>
4242
<li>
43-
<a href="#getting-started">Getting Started</a>
44-
<ul>
45-
<li><a href="#prerequisites">Prerequisites</a></li>
46-
<li><a href="#setting-up">Setting Up</a></li>
47-
</ul>
43+
<a href="#main-features">Main Features</a>
4844
</li>
45+
<li><a href="#prerequisites">Prerequisites</a></li>
46+
<li><a href="#getting-started">Getting Started</a></li>
4947
<li><a href="#usage">Usage</a></li>
50-
<li><a href="#contributing">Contributing</a></li>
48+
<li><a href="#contribution">Contribution</a></li>
5149
<li><a href="#license">License</a></li>
5250
<li><a href="#contact">Contact</a></li>
5351
</ol>
5452
</details>
5553

5654

5755

58-
<!-- ABOUT THE PROJECT -->
59-
## About The Project
56+
<!-- Overview -->
57+
# Overview
6058

61-
This is a Wrapper to trigger scans to the latest version of AST through Docker to launch Checkmarx scans.
59+
The **Checkmarx One** **GitHub Action** enables you to trigger Checkmarx One scans directly from the GitHub workflow. It provides a wrapper around the [Checkmarx One CLI Tool](https://checkmarx.com/resource/documents/en/34965-68620-checkmarx-one-cli-tool.html) which creates a zip archive from your source code repository and uploads it to Checkmarx One for scanning. The Github Action provides easy integration with GitHub while enabling scan customization using the full functionality and flexibility of the CLI tool.
6260

6361

64-
<!-- GETTING STARTED -->
65-
## Getting Started
62+
The GitHub Action can be customized to trigger scans when particular actions (e.g., push, or pull request) occur on specific branches of your repo. You can also add pre and post scan steps to your workflow. For example, you can add a step to screen commits to verify if the changes
63+
made warrant running a new scan.
64+
65+
The plugin code can be found [here](https://github.com/CheckmarxDev/ast-github-action).
66+
67+
68+
> There is an alternative method for integrating GitHub with Checkmarx One which is done directly from Checkmarx One, see [GitHub
69+
Cloud](https---checkmarx-com-resource-documents-en-34965-68678-github-cloud.html). That method is easier to implement but doesn’t enable full customization of the process.
70+
71+
## Main Features
72+
- Automatically trigger scans from the GitHub workflow, running all Checkmarx One scanners: CxSAST, CxSCA, IaC Security, Container Security, API Security, Secret Detection and Repository Health (OSSF Scorecard).
73+
74+
75+
- Supports use of CLI arguments to customize scan configuration, enabling you to:
76+
77+
- Customize filters to specify which folders and files are scanned
78+
79+
- Apply preset query configurations
80+
81+
- Customize SCA scans using [SCA Resolver](https://checkmarx.com/resource/documents/en/34965-19196-checkmarx-sca-resolver.html)
6682

83+
- Set thresholds to break build
6784

68-
### Prerequisites
85+
- Shows scan results summary in the GitHub build logs
86+
87+
- Break build upon policy violation
88+
89+
- Supports generating reports that are integrated into the GitHub
90+
Security alerts
91+
92+
- Decorates pull requests with info about new vulnerabilities that were identified as well as vulnerabilities that were fixed by the code changes
93+
94+
95+
## Prerequisites
96+
97+
- The source code for your project is hosted on a GitHub repo (public or private)
98+
99+
- You have a Checkmarx One account and you have an OAuth **Client ID** and **Client Secret** for that account. To create an OAuth client, see [Creating an OAuth Client for Checkmarx One Integrations](https://checkmarx.com/resource/documents/en/34965-118315-authentication-for-checkmarx-one-cli.html#UUID-a4e31a96-1f36-6293-e95a-97b4b9189060_UUID-4123a2ff-32d0-2287-8dd2-3c36947f675e).
100+
101+
102+
## Getting Started
69103

70-
There are no prerequisites, however we advise you to understand how Github Actions work
104+
1. Verify that all prerequisites are in place.
71105

72-
### Setting Up
106+
2. Configure GitHub secrets for Checkmarx One authentication, as described [here](https://checkmarx.com/resource/documents/en/34965-68703-checkmarx-one-github-actions-initial-setup.html).
73107

108+
3. Configure a GitHub Action with a Checkmarx One workflow, as described [here](https://checkmarx.com/resource/documents/en/34965-68704-configuring-a-github-action-with-a-checkmarx-one-workflow.html).
74109

75-
Copy and paste the following snippet into your .yml file:
76-
```
77-
- name: Checkmarx AST CLI Action
78-
uses: checkmarx/ast-github-action@main #Github Action version
79-
with:
80-
base_uri: https://ast.checkmarx.net/
81-
cx_tenant: your_tenant
82-
cx_client_id: ${{ secrets.CX_CLIENT_ID }}
83-
cx_client_secret: ${{ secrets.CX_CLIENT_SECRET }}
84-
source_dir: "path-to-scan" (dafault is ".")
85-
```
86110

111+
## Feedback
112+
We’d love to hear your feedback! If you come across a bug or have a feature request, please let us know by submitting an issue in [GitHub Issues](https://github.com/Checkmarx/ast-github-action/issues).
87113

88114

89115
## Usage

0 commit comments

Comments
 (0)