Making the Scripts for the Course Generation Available
Prepare as follows:
Click to download the zip archive sast_scipt.zip that hosts the three required files listed below to a folder of your choice on your local host.
Extract the zip archive and place the three files under C:\Program Files\Checkmarx\Executables. The three files in the zip archive are listed below:
VulnerabilitiesCustomCourse.bat
handle_scan_output.py
requirements.txt
Verify that the NETWORK SERVICE user has full execute and write permissions for this folder.
To do so, right-click this folder in Windows Explorer, got to Properties, open the Security tab and verify that all options are allowed for the NETWORK SERVICE user
Once the environment variables are created and the script files are in place, you are ready to define the Codebashing course generator as a postscan task in SAST to complete the integration.