description:Whether duplicate scans of the same project state shall be avoided or not
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:false
- name:filterPattern
type:string
description:The filter pattern used to zip the files relevant for scanning, patterns can be negated by setting an exclamation mark in front i.e. `!test/*.js` would avoid adding any javascript files located in the test directory
description:Indicates how often a full scan should happen between the incremental scans when activated
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:5
- name:fullScansScheduled
type:bool
description:Whether full scans are to be scheduled or not. Should be used in relation with `incremental` and `fullScanCycle`
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:true
- name:generatePdfReport
type:bool
description:Whether to generate a PDF report of the analysis results or not
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:true
- name:incremental
type:bool
description:Whether incremental scans are to be applied which optimizes the scan time but might reduce detection capabilities. Therefore full scans are still required from time to time and should be scheduled via `fullScansScheduled` and `fullScanCycle`
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:true
- name:password
type:string
description:The password to authenticate
mandatory:true
scope:
- PARAMETERS
- STAGES
- STEPS
secret:true
resourceRef:
- name:checkmarxCredentialsId
type:secret
param:password
- name:preset
type:string
description:The preset to use for scanning, if not set explicitly the step will attempt to look up the project's setting based on the availability of `checkmarxCredentialsId`
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:null
- name:projectName
aliases:
- name:checkmarxProject
- name:checkMarxProjectName
deprecated:true
type:string
description:The name of the Checkmarx project to scan into
mandatory:true
scope:
- PARAMETERS
- STAGES
- STEPS
- name:pullRequestName
type:string
description:Used to supply the name for the newly created PR project branch when being used in pull request scenarios
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
- name:serverUrl
aliases:
- name:checkmarxServerUrl
type:string
description:The URL pointing to the root of the Checkmarx server to be used
mandatory:true
scope:
- GENERAL
- PARAMETERS
- STAGES
- STEPS
- name:sourceEncoding
type:string
description:The source encoding to be used, if not set explicitly the project's default will be used
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:"1"
- name:teamId
aliases:
- name:checkmarxGroupId
- name:groupId
deprecated:true
type:string
description:The group ID related to your team which can be obtained via the Pipeline Syntax plugin as described in the `Details` section
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
- name:teamName
type:string
description:The full name of the team to assign newly created projects to which is preferred to teamId
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
- name:username
type:string
description:The username to authenticate
mandatory:true
scope:
- PARAMETERS
- STAGES
- STEPS
secret:true
resourceRef:
- name:checkmarxCredentialsId
type:secret
param:username
- name:vulnerabilityThresholdEnabled
type:bool
description:Whether the thresholds are enabled or not. If enabled the build will be set to `vulnerabilityThresholdResult` in case a specific threshold value is exceeded
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:true
- name:vulnerabilityThresholdHigh
type:int
description:The specific threshold for high severity findings
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:100
- name:vulnerabilityThresholdLow
type:int
description:The specific threshold for low severity findings
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:10
- name:vulnerabilityThresholdMedium
type:int
description:The specific threshold for medium severity findings
mandatory:false
scope:
- PARAMETERS
- STAGES
- STEPS
default:100
- name:vulnerabilityThresholdResult
type:string
description:The result of the build in case thresholds are enabled and exceeded