Creating and Configuring Projects

A Project is a logical entity within Checkmarx SCA that represents a source code repository (such as a component, microservice, etc.) that you intend to scan for vulnerable dependencies. Each time that you run a scan on the source code repository you do so under the same Project, enabling you to track risks and vulnerabilities throughout your SDLC. When you create a Project, you configure the Project settings, including specifying Teams for access control.

You can create Projects and perform CRUD actions either from the Checkmarx SCA web application (as described in the following articles) or using REST APIs.

Once a Project has been created, you can run scans of the Project directly from the web application, using Checkmarx Integration and Plugins, or using Checkmarx SCA REST APIs.