A python client to import all Stash, BitBucket or GitHub projects to Checkmarx SAST and then begin immediately scanning those projects. You might ask yourself why would you need something like this? Have you ever had to configure 100's of projects in Checkmarx? If you have you'll know that while the first one might be interesting after that it's all repetitive work. Enter ScanItAll which will pull in all your repos and do all that mundane work for you.
virtualenv venv
source venv/bin/activate
pip install -r requirements.txt
Edit config/config.json.sample and save as config.json in the config folder. Enter your Checkmarx server, credentials and then configure your repos. For the repo configuration there are two options to specify which projects will be scanned. If you enter a "*" for the include option then all projects will be scanned. You can additionally specify a project or projects to excluded by defining the project that you wish to exclude. For example: exclude="test,lab". Each include or exclude is a comma delimited list.
Once you have configured config.json then run the script in test mode.
python scanit.py --test=true
If you are satisfied with the results then run it again as follows:
python ScanItAll.py
The results will look something like this:
################################################################
Running in Test Mode. Projects won't be created in Checkmarx.
################################################################
Configuration Path: config/
Checkmarx Service URL: http://cxweb/cxwebinterface/SDK/CxSDKWebService.asmx
####################################
Stash Project: Android
####################################
CX Project Name: Android App1
Successful: True
Project ID: 77, Scan ID: 346
URL: http://cxweb/CxWebClient/projectscans.aspx?id=77
CX Project Name: Android App2
Successful: True
Project ID: 78, Scan ID: 347
URL: http://cxweb/CxWebClient/projectscans.aspx?id=78