diff --git a/cmd/checkmarxExecuteScan_generated.go b/cmd/checkmarxExecuteScan_generated.go index bbce97d22..2066d0ba3 100644 --- a/cmd/checkmarxExecuteScan_generated.go +++ b/cmd/checkmarxExecuteScan_generated.go @@ -176,6 +176,7 @@ func CheckmarxExecuteScanCommand() *cobra.Command { and many other programming languages for security flaws based on a set of provided rules/queries that can be customized and extended. This step by default enforces a specific audit baseline for findings and therefore ensures that: + * No 'To Verify' High and Medium issues exist in your project * Total number of High and Medium 'Confirmed' or 'Urgent' issues is zero * 10% of all Low issues are 'Confirmed' or 'Not Exploitable' diff --git a/resources/metadata/checkmarx.yaml b/resources/metadata/checkmarx.yaml index ca11020fe..d84b7c5f0 100644 --- a/resources/metadata/checkmarx.yaml +++ b/resources/metadata/checkmarx.yaml @@ -6,6 +6,7 @@ metadata: and many other programming languages for security flaws based on a set of provided rules/queries that can be customized and extended. This step by default enforces a specific audit baseline for findings and therefore ensures that: + * No 'To Verify' High and Medium issues exist in your project * Total number of High and Medium 'Confirmed' or 'Urgent' issues is zero * 10% of all Low issues are 'Confirmed' or 'Not Exploitable'