Microsoft Teams
Microsoft Teams Service integration enables Checkmarx One users to notify other team members about discovered vulnerabilities by sending a scan summary report to the corresponding Teams channel.
The report includes a results summary which presents the number of detected vulnerabilities in the scanned code.
Limitations
Limitation | Notes |
---|---|
Container vulnerabilities are not currently supported for Feedback Apps. This may cause a discrepancy between the summary counters shown in Checkmarx One and the ones sent via Feedback App. | Update planned as part of development of the new Container Security scanner |
Creating a New Feedback App
To create a new Jira Feedback App, click on Integrations > Teams
Settings & Trigger Conditions panel is opened in the right screen side.
Alternatively you can create a new Teams Feedback App by performing the following steps:
Click on Integrations > Inventory > Create App.
In the right side panel, select Teams and click Next.
Settings & Trigger Conditions
Teams Settings & Trigger Conditions panel contains basic details for the new Feedback App in addition to its trigger conditions
Configure the following:
General Settings:
Feedback App Name
Description
Associate Tags - Assign tags to a Feedback App. Tags are very useful for filtering purposes.
Trigger Conditions:
Severity - The severity level of a vulnerability that triggers the Feedback App.
Status - To decrease the number of issues created in Jira, specify also the status of a vulnerability that triggers the Feedback App.
In conjunction with the severity, this makes the setting more precise.
Credentials
Teams Credentials panel contains the Teams incoming webhook URL.
In case that an incoming webhook wasn’t created for the Teams integration, please use the below link to create it:
Creating Incoming Webhooks - Teams
Configure the following:
URL - Teams incoming webhook URL.
Click Test Connection
Click Save