Repositories list

• ast-visual-studio-extension

  Public
  The CxAST Visual Studio plugin enables you to import results from a CxAST scan directly into your IDE

  securityvisual-studio-extensioncheckmarx+ 2

  securityvisual-studio-extensioncheckmarxvisual-studio-2022checkmarx-ast

  C#

  •

  Apache License 2.0

  •6•2•3•16•Updated Mar 31, 2026Mar 31, 2026

• kics

  Public

  Checkmarx/kics’s past year of commit activity
  Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS b…

  golangsecurityiac+ 9

  golangsecurityiacinfrastructure-as-codecloudnativeappsecvulnerability-detectionhacktoberfestvulnerability-scannerssecurity-tools+ 2

  Open Policy Agent

  •

  Apache License 2.0

  •359•2.6k•143•149•Updated Mar 31, 2026Mar 31, 2026

• ast-cli-javascript-wrapper

  Public

  Checkmarx/ast-cli-javascript-wrapper’s past year of commit activity
  cli

  cli

  TypeScript

  •0•1•0•4•Updated Mar 31, 2026Mar 31, 2026

• ast-vscode-extension

  Public

  Checkmarx/ast-vscode-extension’s past year of commit activity
  The Checkmarx One Visual Studio Code plugin (extension) enables you to import results from a Checkmarx One scan directly into your VS Code console. You can view…

  securityvscode-extensioncheckmarx+ 1

  securityvscode-extensioncheckmarxcheckmarx-ast

  TypeScript

  •

  Apache License 2.0

  •10•19•10•22•Updated Mar 31, 2026Mar 31, 2026

• ast-cli

  Public

  Checkmarx/ast-cli’s past year of commit activity
  A CLI project wrapping application security testing (AST) APIs

  cliastcheckmarx+ 1

  cliastcheckmarxcheckmarx-ast

  Go

  •

  Apache License 2.0

  •29•59•3•21•Updated Mar 30, 2026Mar 30, 2026

• 2ms

  Public
  Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

  securitysecret-managementsecrets+ 3

  securitysecret-managementsecretsappsecsecret-keysapi-keys

  Go

  •

  Apache License 2.0

  •31•147•10•5•Updated Mar 30, 2026Mar 30, 2026

• ast-jetbrains-plugin

  Public

  Checkmarx/ast-jetbrains-plugin’s past year of commit activity
  The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

  securityjetbrains-plugincheckmarx+ 1

  securityjetbrains-plugincheckmarxcheckmarx-ast

  Java

  •

  Apache License 2.0

  •3•2•0•8•Updated Mar 30, 2026Mar 30, 2026

• ast-cli-javascript-wrapper-runtime-cli

  Public

  Checkmarx/ast-cli-javascript-wrapper-runtime-cli’s past year of commit activity
  Java Script Wrapper that uses the CLI by runtime Download

  cli

  cli

  TypeScript

  •9•1•1•18•Updated Mar 27, 2026Mar 27, 2026

• ast-cli-java-wrapper

  Public

  Checkmarx/ast-cli-java-wrapper’s past year of commit activity
  Java SDK to access AST

  cli

  cli

  Java

  •

  Apache License 2.0

  •1•1•1•15•Updated Mar 26, 2026Mar 26, 2026

• kics-github-action

  Public
  GitHub actions of KICS scan - Keeping Infrastructure as Code Secure

  JavaScript

  •

  GNU General Public License v3.0

  •2•5•15•6•Updated Mar 25, 2026Mar 25, 2026

• secret-detection

  Public
  Go

  •0•1•0•4•Updated Mar 24, 2026Mar 24, 2026

• ast-github-action

  Public
  GitHub actions of ast scan - Keeping Infrastructure as Code Secure

  securitygithub-actionscheckmarx+ 1

  securitygithub-actionscheckmarxcheckmarx-ast

  Shell

  •

  Apache License 2.0

  •1•3•8•1•Updated Mar 23, 2026Mar 23, 2026

• gen-ai-wrapper

  Public
  Go

  •

  Apache License 2.0

  •0•0•1•6•Updated Mar 21, 2026Mar 21, 2026

• ast-teamcity-plugin

  Public
  The CxAST TeamCity plugin enables you to trigger SAST, SCA, and KICS scans directly from a TeamCity project.

  securityteamcity-plugincheckmarx+ 1

  securityteamcity-plugincheckmarxcheckmarx-ast

  Java

  •

  Apache License 2.0

  •2•3•1•12•Updated Mar 20, 2026Mar 20, 2026

• ast-eclipse-plugin

  Public
  The CxAST Eclipse plugin enables you to import results from a CxAST scan directly into your IDE. You can view the vulnerabilities that were identified in your s…

  securityeclipse-plugincheckmarx+ 1

  securityeclipse-plugincheckmarxcheckmarx-ast

  Java

  •

  Apache License 2.0

  •12•4•2•4•Updated Mar 19, 2026Mar 19, 2026

• ast-cli-maven-plugin

  Public
  A Maven plugin for using the AST CLI in Maven lifecycle phases

  Java

  •

  Apache License 2.0

  •0•0•0•10•Updated Mar 19, 2026Mar 19, 2026

• sast-to-ast-export

  Public
  CLI tool to export data from CxSAST and import into AST CxOne

  securityapplicationast+ 1

  securityapplicationastsast

  Go

  •

  Apache License 2.0

  •6•5•3•1•Updated Mar 18, 2026Mar 18, 2026

• homebrew-ast-cli

  Public
  Ruby

  •0•2•1•0•Updated Mar 17, 2026Mar 17, 2026

• manifest-parser

  Public
  Go

  •0•0•0•0•Updated Mar 16, 2026Mar 16, 2026

• checkmarx-kiro-powers

  Public
  Apache License 2.0

  •0•0•0•0•Updated Mar 12, 2026Mar 12, 2026

• .github

  Public
  Organization-wide templates and configurations

  0•0•0•0•Updated Mar 11, 2026Mar 11, 2026

• ast-azure-plugin

  Public
  The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.

  securitysecurity-toolsazure-devops-extension+ 2

  securitysecurity-toolsazure-devops-extensioncheckmarxcheckmarx-ast

  TypeScript

  •

  Apache License 2.0

  •5•7•8•19•Updated Mar 10, 2026Mar 10, 2026

• containers-resolver

  Public
  Go

  •1•1•0•2•Updated Mar 9, 2026Mar 9, 2026

• kics-cdk-validator-plugin

  Public
  A KICS plugin for AWS CDK

  TypeScript

  •

  Apache License 2.0

  •3•8•1•5•Updated Mar 5, 2026Mar 5, 2026

• plugins-release-workflow

  Public
  Automates the release workflow across all components, starting with the CLI, followed by the Wrappers, and concluding with the Plugins. This streamlined process…

  0•0•25•0•Updated Mar 3, 2026Mar 3, 2026

• containers-syft-packages-extractor

  Public
  Go

  •1•0•0•4•Updated Mar 2, 2026Mar 2, 2026

• ci-cd-integrations

  Public
  If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.

  circlecimavenbitbucket+ 6

  circlecimavenbitbucketci-cdsonarbamboo-plugincheckmarxsecurtiycheckmarx-ast

  Groovy

  •

  Apache License 2.0

  •22•14•0•2•Updated Mar 2, 2026Mar 2, 2026

• containers-types

  Public
  Go

  •0•0•0•1•Updated Feb 16, 2026Feb 16, 2026

• containers-images-extractor

  Public
  Go

  •0•0•0•3•Updated Feb 16, 2026Feb 16, 2026

• sspi

  Public
  Go

  •

  BSD 3-Clause "New" or "Revised" License

  •0•0•0•0•Updated Dec 29, 2025Dec 29, 2025