The instructions below refer to local installation of the CxSAST Eclipse Plugin. It is also possible to make the Eclipse plugin centrally available to organizational IDE users, so they can link to it. Upon plugin updates, the organizational IDE users will be automatically prompted to update. For details, see Eclipse Project Update Sites.
The user performing the installation must have administrative permissions.
The CxSAST Eclipse plugin within the plugins repository is only compatible with the latest CxSAST version, therefore a prior version of the CxSAST Eclipse plugin must be updated in order to work with CxSAST v9.0.0 (and up).
Connecting to Proxy
In order to set up the CxSAST Eclipse plugin using a proxy, you can now use the built-in proxy settings.
After configuring the proxy, restart the Eclipse environment.
To set up and configure the CxSAST Eclipse plugin:
Download the CxSAST Eclipse plugin zip archive.
In Eclipse, go to the Help menu and select Install New Software.
Add a name in the Name field (for example, CxViewerPlugin).
To make the plugin centrally available to all organizational Eclipse users, and also enable automatic prompts for plugin updates:
- Place the downloaded plugin zip archive on the CxSAST Server (in a distributed deployment: on CxManager).
- On that Server, create a folder named Eclipse in the web server's home directory (for example: C:\inetpub\wwwroot\Eclipse)
- Extract the plugin archive to the Eclipse folder
- In Eclipse, go to Location and type: http://<CxSAST>/Eclipse/, where <CxSAST> is the IP address or resolvable hostname of the CxSAST server.
Click Archive, browse to the CxEclipsePlugin zip file and click Open.
Select the CxViewer plugin and complete the wizard.
Restart the Eclipse environment.
In Eclipse, go to the Window menu and select Preferences.
From CxViewer Preferences, select Authentication.
Type the path to the CxSAST server in the Server URL field (e.g. http://<server_name>). It is recommended that you use the hostname.
In case of server connection issues, enter the hostname instead of the IP address in the server URL field. Both the IP address and the hostname are listed in the etc/hosts file (for example, 10.32.5.117 sdlc-sast-89.cxquality.com).
Click the Test button to validate the connection.
The Logout button can be used in case you want to login using a different user or to a different server.
The ‘Trust All SSL Certificates’ checkbox can be used to add certified security to the connection in the following:
- When enabled, all certificates are trusted.
- When disabled (by default), only certificates signed by a trusted certificate authority can be accepted.
The checkbox is only enabled when the URL starts with ‘https’ (SSL).
Click Apply and Close.
If you subsequently need to remove the plugin, unbind all projects and then use Windows' programs removal feature to uninstall the Checkmarx plugin
If you want to improve your viewing experience, it is recommended to avoid using a laptop or small screen.