Checkmarx CheckAI

Checkmarx CheckAI is a plugin that provides security code scanning for generated source code. It ensures a secure development environment by validating all packages/libraries referenced in the code through directives like 'include', 'import', 'using', 'require', and other package inclusion statements. It also validates packages/libraries found in installation commands such as 'npm install', 'pip install', 'gem install', 'go get', 'cargo install', 'composer require', and related installation commands. The plugin validates all packages/libraries except standard language libraries and packages that do not require installation. For Java packages, the package name is derived from the groupId and artifactId of Maven in the format 'groupId:artifactId'.