# Checkmarx

PlexTrac supports importing XML files from **Checkmarx**. Checkmarx provides software security solutions for detecting and preventing security application vulnerabilities. The primary focus is static application security testing (SAST), which involves analyzing an application's source code to identify security vulnerabilities and coding errors before deployment.

Below are the mappings of fields and any reference notes to provide context. If a field is not listed, PlexTrac does not currently import it. 

<div align="left"><figure><img src="https://4252973360-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F-LXA6EayCcg12qfDcfXd%2Fuploads%2F6B0KWuejsakEOGRDn8hM%2Fcheckmarx.jpg?alt=media&#x26;token=865bd792-7cf9-49e3-90b0-a8bdd7ebea80" alt=""><figcaption></figcaption></figure></div>

## Finding Field Mappings

<table><thead><tr><th width="249">PlexTrac Field</th><th>Checkmarx Path</th><th>Notes</th></tr></thead><tbody><tr><td>title</td><td>&#x3C;Query Name=(attribute value for title)></td><td>If the <code>name</code> attribute within the <code>query</code> element contains an underscore, PlexTrac replaces the underscore with a space</td></tr><tr><td>severity</td><td>&#x3C;Query Severity=(attribute value for severity)></td><td></td></tr><tr><td>references</td><td>&#x3C;Query cweId=(attribute value for references)></td><td></td></tr><tr><td>recommendations</td><td>&#x3C;Result DeepLink=(attribute value for recommendations)></td><td>PlexTrac joins all items in the DeepLink element in the Result element</td></tr><tr><td>description</td><td>Hard Coded w/ "This was identified via Checkmarx scanner, please view affected assets for more details."</td><td></td></tr><tr><td>tags</td><td>&#x3C;Query categories=(attribute value for tags)> and &#x3C;Query group=(attribute value for tags)></td><td><p>To convert categories into a list using ";" as a delimiter, and to append the group attribute to categories to create comprehensive tags, follow these steps:</p><ul><li>Separate each category with a semicolon (;).</li><li>If a category has an associated group attribute, append this attribute to the category.</li><li>Ensure all tags are accurately represented.</li></ul></td></tr><tr><td>source</td><td>Hard Coded "Checkmarx"</td><td></td></tr></tbody></table>

## Asset Field Mappings

| PlexTrac Field | Checkmarx Path                                                | Notes                                                                                   |
| -------------- | ------------------------------------------------------------- | --------------------------------------------------------------------------------------- |
| asset          | \<Result name=(attribute to be used in asset name)> and Path> | Ensure that both the attribute name and the element filename are present and identical. |