From e0e873d76a96f5a2b127d77378740fc1176406b1 Mon Sep 17 00:00:00 2001 From: AlvoBen Date: Wed, 20 Nov 2024 10:53:58 +0200 Subject: [PATCH 1/2] update overview.md with attention massage of the runtime download of the cli --- overview.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/overview.md b/overview.md index 2fa1969e..20b5bd29 100644 --- a/overview.md +++ b/overview.md @@ -1,3 +1,7 @@ +⚠️ **Important notice for version 3.0.0 and above**: +To make the Checkmarx One plugin for ADO more lightweight, the CLI tool has been removed and now needs to be downloaded separately during use. This change may affect customers who restrict access to whitelisted domains, requiring them to add **download.checkmarx.com** to their whitelist. + + ### Overview The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline. It provides a wrapper around the CxAST CLI Tool which creates a zip archive from your source code repository and uploads it to CxAST for scanning. This plugin provides easy integration with Azure while enabling scan customization using the full functionality and flexibility of the CLI tool. From 7f0352765649afdb9808c55931c4c64287d73fd8 Mon Sep 17 00:00:00 2001 From: AlvoBen Date: Wed, 20 Nov 2024 13:45:53 +0200 Subject: [PATCH 2/2] Change description --- overview.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/overview.md b/overview.md index 20b5bd29..e28fbad9 100644 --- a/overview.md +++ b/overview.md @@ -1,6 +1,6 @@ ⚠️ **Important notice for version 3.0.0 and above**: -To make the Checkmarx One plugin for ADO more lightweight, the CLI tool has been removed and now needs to be downloaded separately during use. This change may affect customers who restrict access to whitelisted domains, requiring them to add **download.checkmarx.com** to their whitelist. - +To make the Checkmarx One plugin for ADO more lightweight, the CLI tool has been removed and now needs to be downloaded separately during use. This change may affect customers who restrict access to whitelisted domains, requiring them to add download.checkmarx.com to their whitelist. +Customers who are unable to whitelist this domain, can use an older version of the plugin, which is available for download [here](https://github.com/Checkmarx/ast-azure-plugin/releases). ### Overview