actions-marketplace-validations/Checkmarx DAST Github Action
Integrate Checkmarx DAST into your GitHub Actions CI/CD pipelines.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stalelast commit Sep 23, 2024
- License
- GPL 3.0
Pinned Snippet
uses: actions-marketplace-validations/checkmarx_dast-github-action@950df92f6e10176062726fb5b806723a7ad5d602 # no releases — HEAD as of 2026-07-10tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| command | The type of scan to preform (web, api) | yes | — |
| config | The path to the ZAP configuration file | yes | — |
| base_url | The baseURL for the Checkmarx One Servers | yes | — |
| environment_id | The environment ID previously created in the Frontend | yes | — |
| openapi | Relevant only for api scans. Path to the openapi file (cannot be provided with postman flag) | no | — |
| postman | Relevant only for api scans. Path to the postman collection file (cannot be provided with openapi flag) | no | — |
| output | The path to generate the output | no | — |
| timeout | The zap engine timeout | no | 10000 |
| update_interval | The interval in which to update on the progress of the scan | no | 10 |
| jvm_properties | The jvm properties used in the ZAP engine | no | -Xmx3G |
| log_level | The log level for the logs | no | info |
| verbose | Set to true in order to print the logs to the stdout | no | false |
| fail_on | The Severity in which the action should fail | no | — |
| retry | Retry requests to AST on connection failure | no | 3 |
| retry_delay | Time between retries in seconds, use with retry | no | 20 |
| proxy_url | Override the proxy used by the ZAP Engine (port number is set in proxy_port) | no | — |
| proxy_port | The port number for the proxy | no | — |
| poll_timeout | Poll timeout in seconds, for uploading results | no | — |
| poll_ticker | Time interval between sending poll requests | no | — |
Outputs
no outputs