Skip to main content

Plugins Settings

The following IDE plugin features need to be activated on a tenant wide level in order for individual developers to be able to use them in their IDEs. Activation can be done by a Checkmarx One admin user via the Account Settings > Settings > Plugins tab.

Configuring Plugin Settings

To change the Plugin settings:

  1. Log in to Checkmarx One as an admin user.

  2. Click on the Settings Settings.png > Global Settings

  3. Click on Plugins.

  4. Enable/disable IDE features as needed.

    The setting is applied to all IDEs using this tenant account.

  5. Click Save at the bottom of the page.

    Plugins_Settings.png

IDE Scans

When this feature is activated Checkmarx IDE plugins enable users to run a new Checkmarx One scan on the project that is open in their workspace.

In order to run IDE scans, you must first create a Checkmarx project and run the initial scan using some other method, e.g., web portal, API, CLI etc. and load the scan results in the Visual Studio console. Then, you are able to run subsequent scans on that project from the IDE.

Warning

Before enabling this feature, you should consider the ramifications; since there is a limitation to the number of concurrent scans that you can run based on your license, enabling IDE scans may cause scans triggered by CI/CD pipelines and SCM integrations to be added to the scan queue, causing major delays for those scans.

AI Guided Remediation

When this feature is activated, developers can access AI Guided Remediation in their IDE editor (currently supported for VS Code).

AI Guided Remediation harnesses the power of AI to help you to understand the vulnerabilities in your code, and resolve them quickly and easily. When you initiate an AI chat, we automatically provide the context to GPT so that you can start a conversation about the precise vulnerability instance that you are assessing.

Notice

When sending your IaC files to GPT, we protect your sensitive data by anonymizing all passwords and secrets before the content is sent. The query used for identifying sensitive data can be seen here.

In this section: