Checkmarx CxFlow SAST

CxFlow is a Spring Boot application written by Checkmarx that enables initiations of scans and result orchestration. CxFlow support interactive with various Checkmarx product. This parser support JSON format export by bug tracker.

#YAML
cx-flow:
  bug-tracker:Json
  
#CLI
--cx-flow.bug-tracker=json  

• Checkmarx CxFlow SAST: JSON report from Checkmarx Cxflow.

Sample Scan Data#

Sample Checkmarx CxFlow SAST scans can be found here.

Default Deduplication Hashcode Fields#

By default, DefectDojo identifies duplicate Findings using these hashcode fields:

• vuln id from tool
• file path
• line