Checkmarx SCA REST API

REST discovered

Details

Docs: https://docs.checkmarx.com/en/34965-19221-checkmarx-sca--rest--api-documentation.html

Authentication

Checkmarx One API key / refresh token api_key discovered Get key ↗

In the Checkmarx One web portal, go to Creating an API Key for Checkmarx One Integrations. Sign in, open Settings → API Keys (or Identity and Access Management in older docs), click Create Key, and copy the generated key. The CLI docs describe this API key as a refresh-token style credential that can be used for CLI and plugin authentication.

Checkmarx One OAuth client oauth2 discovered Set up OAuth ↗

Create an OAuth client in Checkmarx One using Creating OAuth Clients. Sign in to Checkmarx One, open Settings → Identity and Access Management, create a client, and save the client credentials. Authentication for Checkmarx One CLI and Plugins says OAuth clients can be used instead of API keys and let you scope permissions more precisely.