Skip to content
@Checkmarx

Checkmarx

Pinned Loading

  1. kics Public

    Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

    Open Policy Agent 2.4k 335

  2. 2ms Public

    Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

    Go 96 25

  3. capital Public

    A built-to-be-vulnerable API application based on the OWASP top 10 API vulnerabilities. Use c{api}tal to learn, train and exploit API Security vulnerabilities within your own API Security CTF.

    CSS 298 80

  4. ci-cd-integrations Public

    If you are using a CI/CD platform that doesn’t yet have a dedicated Checkmarx plugin, please check this repository.

    Groovy 11 19

Repositories

Showing 10 of 56 repositories
  • kics Public

    Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastructure-as-code with KICS by Checkmarx.

    Open Policy Agent 2,433 Apache-2.0 335 140 142 Updated Aug 6, 2025
  • plugins-release-workflow Public

    Automates the release workflow across all components, starting with the CLI, followed by the Wrappers, and concluding with the Plugins. This streamlined process ensures consistent and efficient deployment across the entire ecosystem.

    0 0 25 0 Updated Aug 6, 2025
  • ast-cli Public

    A CLI project wrapping application security testing (AST) APIs

    Go 54 Apache-2.0 26 5 32 Updated Aug 6, 2025
  • 2ms Public

    Too many secrets (2MS) helps people protect their secrets on any file or on systems like CMS, chats and git

    Go 96 Apache-2.0 25 9 (2 issues need help) 6 Updated Aug 6, 2025
  • containers-resolver Public
    Go 0 1 0 0 Updated Aug 6, 2025
  • containers-syft-packages-extractor Public
    Go 0 1 0 2 Updated Aug 6, 2025
  • ast-vscode-extension Public

    The Checkmarx One Visual Studio Code plugin (extension) enables you to import results from a Checkmarx One scan directly into your VS Code console. You can view the vulnerabilities that were identified in your source code and navigate directly to the vulnerable code in the editor.

    TypeScript 15 Apache-2.0 8 5 36 Updated Aug 6, 2025
  • containers-images-extractor Public
    Go 0 0 0 2 Updated Aug 6, 2025
  • secret-detection Public
    Go 1 0 0 4 Updated Aug 5, 2025
  • ast-jetbrains-plugin Public

    The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

    Java 3 Apache-2.0 3 0 18 Updated Aug 5, 2025
View all repositories