diff --git a/.checkmarx/config.yaml b/.checkmarx/config.yaml deleted file mode 100644 index 4c45b32..0000000 --- a/.checkmarx/config.yaml +++ /dev/null @@ -1,16 +0,0 @@ -version: 1 - -checkmarx: - scan: - #optional - tags: - "fromConfig": "true" - - project: - tags: - "fromConfig": "true" - - configs: - sast: - presetName: 'Checkmarx Default' - incremental: 'true' diff --git a/.checkmarx/config.yml b/.checkmarx/config.yml new file mode 100644 index 0000000..e966988 --- /dev/null +++ b/.checkmarx/config.yml @@ -0,0 +1,24 @@ +version: 1 + +# checkmarx-specific related configuration +# every value in this section is optional +checkmarx: + # configure the checkmarx scan parameters for scanning this specific project + scan: + # configure the checkmarx scan configurations for scanning this specific project + configs: + # configure the SAST related configurations this specific project + sast: + # configure the SAST preset name used for this specific project + presetName: 'All' + # configure if this specific project will be run incrementally or will it run a full scan + incremental: 'false' + languageMode: 'multi' + filter: '!*.java,!*.cpp' + engineVerbose: 'true' + lightQueries: 'true' + sca: + filter: '!*.cpp' + kics: + filter: '*.java' + platforms: 'Ansible,CloudFormation,Dockerfile'