Checkmarx CxSAST Vulnerability Integration uses data imported from CxSAST Service to help determine the impact and priority of vulnerabilities in the code as well as its dependencies.
Vulnerability Response Integration with Checkmarx's CxSAST and CxSCA Server
Closure of Findings for Deleted Projects
When the “Close findings on deleted projects of SAST” or “Close findings on deleted projects of SCA” setting is enabled, AVITs will be automatically marked as Closed for any projects deleted in CxSAST or CxSCA, regardless of the integration start time.
Accurate Closed Vulnerability Counts
The Checkmarx SAST AVIT Closure Integration will now display the updated count of closed vulnerabilities in the Integration Run section.
Precise Import Metrics for AVIT Integration
The Checkmarx SAST Application Vulnerability Item Integration will report only the number of findings that were inserted or updated in the AVIT table.
Expanded Logging
Additional diagnostic and configuration logs have been introduced to improve troubleshooting and enhance visibility.
Updated ServiceNow Configuration Fields
The single “Triaging in SNOW” configuration field has been replaced with two separate fields:
-
Manage exceptions in ServiceNow
-
Manage false positives in ServiceNow
-
-
Install the pre-requisite plugins in the following order (mentioned is minimum supported version for X,Y,Z release)
- security integration framework (13.10.6)
- security support common (13.18.1)
- Security Support Orchestration (12.13.2)
- Vulnerability Response Dependencies
- Vulnerability Response (26.0.13)
-