Tracked topic
… The Checkmarx AST plugin on the Jenkins Marketplace integrates security scanning into automated pipelines. “We are aware that a modified version of the Checkmarx Jenkins AST plugin was published to the Jenkins Marketplace. …
… In a recent supply-chain attack that hit Checkmarx, the security firm failed to fully drive out the party responsible. Checkmarx was then hit two more times. The Checkmarx credentials used in the first attack came from a supply chain attack on the Trivy software developer. …
… Checkmarx und Bitwarden: Die Paketkette bleibt ein lohnendes Ziel Checkmarx bestätigte am 27. …
… Checkmarx closes the investigation, the lessons remain On 6 July, Checkmarx declared its investigation into the supply chain incident that began in March to be complete. The attack had originally reached Checkmarx through the compromised supply chain of the security scanner Trivy. …