Checkmarx Integration

Panoptica's Checkmarx integration enables you to connect your code findings in Checkmarx with Panoptica's cloud data to enhance the security of your CI/CD pipeline.

Feeding the security data of your container images from Panoptica into Checkmarx One provides a number of benefits:

1. Automate security scans during the build and deployment phases.
2. Leverage Checkmarx One's capabilities for comprehensive security analysis and reporting.
3. Proactively identify and mitigate vulnerabilities in container images before deployment.

To configure the integration, you first need to retrieve a few parameters from your Checkmarx account, then load them into Panoptica's console UI. Once connected, data from your Panoptica scans will appear in your Checkmarx Cloud Insights dashboard.

Retrieve Checkmarx Details

Log into your Checkmarx account to generate an API Key, which you'll need to configure the integration with Panoptica.

1. Log in to the Checkmarx One web portal and select Settings, then Identity and Access Management.
2. In the IAM portal, click API Keys, then click on the Create Key button.
3. Adjust the API Key configuration, if you so desire.
4. Click Create. The API Key is created and a window opens showing the key.
5. Copy the key and save it in a safe place.

   🚧

   Don't forget to copy the key

   Be sure to copy the API Key before you close the window.
   Afterwards, you will not be able to retrieve the key.

See Creating API Keys in Checkmarx's documentation for details.

Integration with Panoptica

Once you have the requisite details, you're ready to configure the Checkmarx integration via Panoptica's Settings page:

1. Click Settings in Panoptica's main navigation pane, then select Integrations.

   

2. Select Checkmarx in the Security section to open the configuration screen.

   

3. Enter the Base URL of your Checkmarx account.

4. Enter the API Token you generated in the Checkmarx web portal (above).

5. Enter the Tenant Name of your Checkmarx project.

6. Click Test Connection to make sure everything is in order.

7. Don't forget to click Save.

Once the integration is defined in Panoptica, it will appear under Cloud Insights in your Cloudmarx One dashboard. The status will display as "Pending" initially, until the results begin to appear.

After a minute or two, Checkmarx will generate a list of clusters and containers discovered by Panoptica, and display it in the Cloud Insights inventory. Expand an image name to view its repositories, with snapshot views of risk level, vulnerabilities, and exposure.

Click on a project name to view a graphical dashboard with more insights into the security status of that repository.

Panoptica data is refreshed once a day in Checkmarx.