Skip to content

cx-israel-ogunsakin/cx-findings-to-fix

v1.6.0

Findings-to-Fix builds on Checkmarx One Triage Assist and Remediation Assist. Triage Assist has already evaluated the findings on the platform using Attackability-based context (reachability, exploitability, code context, policy) and confirmed the ones that require action. The plugin takes only those confirmed findings, asks Remediation Assist to generate the review-ready fix, and brings it into the developer's editor. The agent proposes; the developer approves. Pulls only the findings Triage Assist has confirmed on the current branch, requests fixes from Remediation Assist, and proposes them in VS Code as edits with Keep and Undo. A skill, a custom agent, and a zero-dependency tool (Python or Node) against the Checkmarx One API.

What this package declares

The file a client reads when it loads this plugin, exactly as this revision carries it.

plugin.json
{
  "$schema": "https://agent-plugins.org/schemas/1.0.0/plugin.schema.json",
  "name": "cx-findings-to-fix",
  "version": "1.6.0",
  "description": "Findings-to-Fix builds on Checkmarx One Triage Assist and Remediation Assist. Triage Assist has already evaluated the findings on the platform using Attackability-based context (reachability, exploitability, code context, policy) and confirmed the ones that require action. The plugin takes only those confirmed findings, asks Remediation Assist to generate the review-ready fix, and brings it into the developer's editor. The agent proposes; the developer approves. Pulls only the findings Triage Assist has confirmed on the current branch, requests fixes from Remediation Assist, and proposes them in VS Code as edits with Keep and Undo. A skill, a custom agent, and a zero-dependency tool (Python or Node) against the Checkmarx One API.",
  "keywords": [
    "checkmarx",
    "security",
    "sast",
    "sca",
    "remediation",
    "triage"
  ],
  "extensions": {
    "com.github.copilot": {}
  }
}

What else this package ships

These files come with the package and this site does not publish them. They are listed so you know what is there before you install it.

  • ftf.js
  • ftf.py
  • check-auth.sh
  • hooks.json
View on GitHub

Client extensions

Data this package carries for particular clients. The directory lists the clients named and never reads what is addressed to them.

  • com.github.copilotships a directory of files