checkmarx / ast-eclipse-plugin Goto Github PK

Hello!

I hope you are doing well!

We are a security research team. Our tool automatically detected a vulnerability in this repository. We want to disclose it responsibly. GitHub has a feature called Private vulnerability reporting, which enables security research to privately disclose a vulnerability. Unfortunately, it is not enabled for this repository.

Can you enable it, so that we can report it?

Thanks in advance!

PS: you can read about how to enable private vulnerability reporting here: https://docs.github.com/en/code-security/security-advisories/repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository

There's a connectivity issue I am experiencing when attempting to run a scan using the Checkmarx Eclipse plugin.

I have successfully tested the connection to the Checkmarx server URL using the "Test Connection" feature within the Checkmarx Eclipse plugin, and the result was positive – the connection was successful.

However, when I attempt to run a scan using the same configured settings, I encounter a connection error. The specific error message I receive is: "Connection Error: The cx version is either older than 9.0 or the server can't be reached."

I have version 9.5.5 installed.

I have already gone through a series of troubleshooting steps, including verifying URL configuration and reviewing network connectivity. Despite these efforts, I am unable to resolve the connection error.