You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: README.md
+15-1Lines changed: 15 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -81,6 +81,15 @@ This plugin provides easy integration with JetBrains and is compatible with all
81
81
82
82
- AI Secure Coding Assistant (ASCA) - A lightweight scan engine that runs in the background while you work, enabling developers to identify and remediate secure coding best practice violations **as they code**.
83
83
84
+
## Checkmarx One Developer Assist – AI guided remediation
85
+
- An advanced security agent that delivers real-time context-aware prevention, remediation, and guidance to developers from the IDE.
86
+
- OSS Realtime scanner identifies risks in open source packages used in your project.
87
+
- MCP-based agentic AI remediation.
88
+
- AI powered explanation of risk details
89
+
90
+
**COMING SOON** - additional realtime scanners for identifying risks in container images, as well as exposed secrets and IaC risks.
91
+
92
+
84
93
## Prerequisites
85
94
86
95
- You are running IntelliJ version 2022.2+ or another JetBrains IDE that is based on a supported version of IntelliJ.
@@ -93,20 +102,25 @@ This plugin provides easy integration with JetBrains and is compatible with all
93
102
> - CxOne role `view-policy-management`
94
103
> - IAM role `default-roles`
95
104
105
+
To use **Dev Assist**, you need the following additional prerequisites:
106
+
- A Checkmarx One account with a Checkmarx One Assist license
107
+
- The Checkmarx MCP must be activated for your tenant account in the Checkmarx One UI under Settings → Plugins. This must be done by an account admin.
108
+
- You must have GitHub Copilot Chat (AI Agent) installed
109
+
96
110
## Initial Setup
97
111
98
112
- Verify that all prerequisites are in place.
99
113
100
114
- Install the **Checkmarx One** plugin and configure the settings as
101
115
described [here](https://docs.checkmarx.com/en/34965-68734-installing-and-setting-up-the-checkmarx-one-jetbrains-pluging-68734.html#UUID-8d3bdd51-782c-2816-65e2-38d7529651c8_section-idm449017032697283334758018635).
102
116
117
+
**Note:** To use Dev Assist, you need to Start the Checkmarx MCP server.
103
118
104
119
## Usage
105
120
106
121
To see how you can use our tool, please refer to the [Documentation](https://docs.checkmarx.com/en/34965-68734-installing-and-setting-up-the-checkmarx-one-jetbrains-pluging.html)
107
122
108
123
109
-
110
124
## Feedback
111
125
We’d love to hear your feedback! If you come across a bug or have a feature request, please let us know by submitting an issue in [GitHub Issues](https://github.com/Checkmarx/ast-jetbrains-plugin/issues).
Copy file name to clipboardExpand all lines: src/main/resources/META-INF/plugin.xml
+6-4Lines changed: 6 additions & 4 deletions
Original file line number
Diff line number
Diff line change
@@ -9,12 +9,14 @@
9
9
]]></description>
10
10
11
11
<change-notes><![CDATA[
12
-
<b>Added OAuth2 login support for seamless authentication.</b>
12
+
<b>Checkmarx One Developer Assist – AI guided remediation.</b>
13
13
<ul>
14
-
<li>Users can now log in via OAuth2 using their Checkmarx One account credential. This provides a smoother and more secure user experience.</li>
15
-
<li>Users can exclude development and test dependencies from SCA vulnerability scan results by applying the 'Hide Dev & Test Dependencies' filter.</li>
14
+
<li>An advanced security agent that delivers real-time context-aware prevention, remediation, and guidance to developers from the IDE.</li>
15
+
<li><b>OSS<b> Realtime scanner identifies risks in open source packages used in your project.</li>
16
+
<li>MCP-based agentic AI remediation.</li>
17
+
<li>AI-powered explanation of risk details.</li>
16
18
</ul>
17
-
<b>Note:</b> Starting from plugin version 2.2.4, authentication can be done either via API key or OAuth2 login.
19
+
<b>Note:</b> COMING SOON - additional realtime scanners for identifying risks in container images, as well as exposed secrets and IaC risks..
18
20
]]></change-notes>
19
21
20
22
<!-- please see https://plugins.jetbrains.com/docs/intellij/plugin-compatibility.html
0 commit comments