"Ideally, security issues should be identified during the coding process. That is the goal of Checkmarx Developer Assist within AWS's Kiro IDE. The tool automatically analyzes source code and dependencies within the developers' working environment. When coding, developers often lose sight of security if they have to leave the IDE to check it. This is despite the fact that, in shift-left initiatives, they are responsible for delivering secure code. Checkmarx solves this problem with its tooling, in this case with an integration with Kiro, AWS's IDE."
"The integration places Checkmarx Developer Assist directly in Kiro. The company claims that developers can eliminate up to 90 percent of the extra work for security before code is committed. After activation and authentication, Developer Assist analyzes the source code and dependencies in the active workspace. The system automatically displays its findings in the IDE, accompanied by contextual data that helps developers resolve issues early in the development cycle."
Checkmarx Developer Assist integrates directly into AWS Kiro IDE to provide real-time security analysis of source code and dependencies within the developer workspace. After activation and authentication, the tool scans active code and dependency trees and displays findings and contextual remediation data inside the IDE. The integration aims to reduce up to 90 percent of extra security work prior to code commits by surfacing issues during development. Security results also appear in the Checkmarx One platform to contextualize project risks across an organization's application portfolio. The IDE-native agent supports developers in writing secure code alongside AI code-generation features.
Read at Techzine Global
Unable to calculate read time
Collection
[
|
...
]