콘텐츠로 이동

Checkmarx

체크마크스

명령어설명
checkmarx --versionCheckmarx 버전 표시
checkmarx --help도움말 정보 표시
checkmarx init현재 디렉토리에서 checkmarx 초기화
checkmarx status현재 상태 확인
checkmarx list사용 가능한 옵션 나열
checkmarx info시스템 정보 표시
checkmarx config구성 설정 표시
checkmarx update최신 버전으로 업데이트
checkmarx startCheckmarx 서비스 시작
checkmarx stopCheckmarx 서비스 중지
checkmarx restartCheckmarx 서비스 재시작
checkmarx reload구성 다시 로드
# Package manager installation
sudo apt update
sudo apt install checkmarx

# Alternative installation
wget https://github.com/example/checkmarx/releases/latest/download/checkmarx-linux
chmod +x checkmarx-linux
sudo mv checkmarx-linux /usr/local/bin/checkmarx

# Build from source
git clone https://github.com/example/checkmarx.git
cd checkmarx
make && sudo make install
```## 기본 명령어
```bash
# Homebrew installation
brew install checkmarx

# MacPorts installation
sudo port install checkmarx

# Manual installation
curl -L -o checkmarx https://github.com/example/checkmarx/releases/latest/download/checkmarx-macos
chmod +x checkmarx
sudo mv checkmarx /usr/local/bin/
```## 설치
```powershell
# Chocolatey installation
choco install checkmarx

# Scoop installation
scoop install checkmarx

# Winget installation
winget install checkmarx

# Manual installation
# Download from https://github.com/example/checkmarx/releases
# Extract and add to PATH
```### Linux/Ubuntu

| 명령어 | 설명 |
|---------|-------------|
| `checkmarx config show` | 현재 구성 표시 |
| `checkmarx config list` | 모든 구성 옵션 나열하기 |
| `checkmarx config set <key> <value>` | 구성 값 설정 |
| `checkmarx config get <key>` | 구성 값 가져오기 |
| `checkmarx config unset <key>` | 구성 값 제거 |
| `checkmarx config reset` | 기본 구성으로 초기화 |
| `checkmarx config validate` | 구성 파일 검증 |
| `checkmarx config export` | 구성 내보내기 파일로 |### macOS
```bash
# Create new file/resource
checkmarx create <name>

# Read file/resource
checkmarx read <name>

# Update existing file/resource
checkmarx update <name>

# Delete file/resource
checkmarx delete <name>

# Copy file/resource
checkmarx copy <source> <destination>

# Move file/resource
checkmarx move <source> <destination>

# List all files/resources
checkmarx list --all

# Search for files/resources
checkmarx search <pattern>
```### Windows
```bash
# Connect to remote host
checkmarx connect <host>:<port>

# Listen on specific port
checkmarx listen --port <port>

# Send data to target
checkmarx send --target <host> --data "<data>"

# Receive data from source
checkmarx receive --source <host>

# Test connectivity
checkmarx ping <host>

# Scan network range
checkmarx scan <network>

# Monitor network traffic
checkmarx monitor --interface <interface>

# Proxy connections
checkmarx proxy --listen <port> --target <host>:<port>
```## 구성
```bash
# Start background process
checkmarx start --daemon

# Stop running process
checkmarx stop --force

# Restart with new configuration
checkmarx restart --config <file>

# Check process status
checkmarx status --verbose

# Monitor process performance
checkmarx monitor --metrics

# Kill all processes
checkmarx killall

# Show running processes
checkmarx ps

# Manage process priority
checkmarx priority --pid <pid> --level <level>
```## 고급 작업
```bash
# Login with username/password
checkmarx login --user <username>

# Login with API key
checkmarx login --api-key <key>

# Login with certificate
checkmarx login --cert <cert_file>

# Logout current session
checkmarx logout

# Change password
checkmarx passwd

# Generate new API key
checkmarx generate-key --name <key_name>

# List active sessions
checkmarx sessions

# Revoke session
checkmarx revoke --session <session_id>
```### 파일 작업
```bash
# Encrypt file
checkmarx encrypt --input <file> --output <encrypted_file>

# Decrypt file
checkmarx decrypt --input <encrypted_file> --output <file>

# Generate encryption key
checkmarx keygen --type <type> --size <size>

# Sign file
checkmarx sign --input <file> --key <private_key>

# Verify signature
checkmarx verify --input <file> --signature <sig_file>

# Hash file
checkmarx hash --algorithm <algo> --input <file>

# Generate certificate
checkmarx cert generate --name <name> --days <days>

# Verify certificate
checkmarx cert verify --cert <cert_file>
```### 네트워크 작업
```bash
# Monitor system resources
checkmarx monitor --system

# Monitor specific process
checkmarx monitor --pid <pid>

# Monitor network activity
checkmarx monitor --network

# Monitor file changes
checkmarx monitor --files <directory>

# Real-time monitoring
checkmarx monitor --real-time --interval 1

# Generate monitoring report
checkmarx report --type monitoring --output <file>

# Set monitoring alerts
checkmarx alert --threshold <value> --action <action>

# View monitoring history
checkmarx history --type monitoring
```### 프로세스 관리
```bash
# View logs
checkmarx logs

# View logs with filter
checkmarx logs --filter <pattern>

# Follow logs in real-time
checkmarx logs --follow

# Set log level
checkmarx logs --level <level>

# Rotate logs
checkmarx logs --rotate

# Export logs
checkmarx logs --export <file>

# Clear logs
checkmarx logs --clear

# Archive logs
checkmarx logs --archive <archive_file>
```## 보안 기능
```bash
# Check if checkmarx is installed
which checkmarx
checkmarx --version

# Check PATH variable
echo $PATH

# Reinstall if necessary
sudo apt reinstall checkmarx
# or
brew reinstall checkmarx
```### 인증
```bash
# Run with elevated privileges
sudo checkmarx <command>

# Check file permissions
ls -la $(which checkmarx)

# Fix permissions
chmod +x /usr/local/bin/checkmarx

# Check ownership
sudo chown $USER:$USER /usr/local/bin/checkmarx
```### 암호화
```bash
# Validate configuration
checkmarx config validate

# Reset to default configuration
checkmarx config reset

# Check configuration file location
checkmarx config show --file

# Backup current configuration
checkmarx config export > backup.conf

# Restore from backup
checkmarx config import backup.conf
```## 모니터링 및 로깅
```bash
# Check service status
checkmarx status --detailed

# Check system logs
journalctl -u checkmarx

# Start in debug mode
checkmarx start --debug

# Check port availability
netstat -tulpn|grep <port>

# Kill conflicting processes
checkmarx killall --force
```### 시스템 모니터링

| 명령어 | 설명 |
|---------|-------------|
| `checkmarx --debug` | 디버그 출력 활성화 |
| `checkmarx --verbose` | 자세한 로깅 활성화 |
| `checkmarx --trace` | 추적 로깅 활성화 |
| `checkmarx test` | 내장 테스트 실행 |
| `checkmarx doctor` | 시스템 상태 점검 실행 |
| `checkmarx diagnose` | 진단 보고서 생성 |
| `checkmarx benchmark` | 성능 벤치마크 실행 |
| `checkmarx validate` | 설치 및 구성 검증 |### 로깅
```bash
# Set memory limit
checkmarx --max-memory 1G <command>

# Set CPU limit
checkmarx --max-cpu 2 <command>

# Enable caching
checkmarx --cache-enabled <command>

# Set cache size
checkmarx --cache-size 100M <command>

# Clear cache
checkmarx cache clear

# Show cache statistics
checkmarx cache stats

# Optimize performance
checkmarx optimize --profile <profile>

# Show performance metrics
checkmarx metrics
```## 문제 해결
```bash
# Enable parallel processing
checkmarx --parallel <command>

# Set number of workers
checkmarx --workers 4 <command>

# Process in batches
checkmarx --batch-size 100 <command>

# Queue management
checkmarx queue add <item>
checkmarx queue process
checkmarx queue status
checkmarx queue clear
```### API 통합
```bash
#!/bin/bash
# Example script using checkmarx

set -euo pipefail

# Configuration
CONFIG_FILE="config.yaml"
LOG_FILE="checkmarx.log"

# Check if checkmarx is available
if ! command -v checkmarx &> /dev/null; then
    echo "Error: checkmarx is not installed" >&2
    exit 1
fi

# Function to log messages
log() \\\\{
    echo "$(date '+%Y-%m-%d %H:%M:%S') - $1"|tee -a "$LOG_FILE"
\\\\}

# Main operation
main() \\\\{
    log "Starting checkmarx operation"

    if checkmarx --config "$CONFIG_FILE" run; then
        log "Operation completed successfully"
        exit 0
    else
        log "Operation failed with exit code $?"
        exit 1
    fi
\\\\}

# Cleanup function
cleanup() \\\\{
    log "Cleaning up"
    checkmarx cleanup
\\\\}

# Set trap for cleanup
trap cleanup EXIT

# Run main function
main "$@"
```(No text provided)
```python
#!/usr/bin/env python3
"""
Python wrapper for the tool
"""

import subprocess
import json
import logging
from pathlib import Path
from typing import Dict, List, Optional

class ToolWrapper:
    def __init__(self, config_file: Optional[str] = None):
        self.config_file = config_file
        self.logger = logging.getLogger(__name__)

    def run_command(self, args: List[str]) -> Dict:
        """Run command and return parsed output"""
        cmd = ['tool_name']

        if self.config_file:
            cmd.extend(['--config', self.config_file])

        cmd.extend(args)

        try:
            result = subprocess.run(
                cmd,
                capture_output=True,
                text=True,
                check=True
            )
            return \\\\{'stdout': result.stdout, 'stderr': result.stderr\\\\}
        except subprocess.CalledProcessError as e:
            self.logger.error(f"Command failed: \\\\{e\\\\}")
            raise

    def status(self) -> Dict:
        """Get current status"""
        return self.run_command(['status'])

    def start(self) -> Dict:
        """Start service"""
        return self.run_command(['start'])

    def stop(self) -> Dict:
        """Stop service"""
        return self.run_command(['stop'])

# Example usage
if __name__ == "__main__":
    wrapper = ToolWrapper()
    status = wrapper.status()
    print(json.dumps(status, indent=2))
```## 환경 변수

| 변수 | 설명 | 기본값 |
|----------|-------------|---------|
| `CHECKMARX_CONFIG` | 구성 파일 경로 | `~/.checkmarx/config.yaml` |
| `CHECKMARX_HOME` | 디렉토리 | `~/.checkmarx` |
| `CHECKMARX_LOG_LEVEL` | 로깅 레벨 | `INFO` |
| `CHECKMARX_LOG_FILE` | 로그 파일 경로 | `~/.checkmarx/logs/checkmarx.log` |
| `CHECKMARX_CACHE_DIR` | 캐시 디렉토리 | `~/.checkmarx/cache` |
| `CHECKMARX_DATA_DIR` | 데이터 디렉토리 | `~/.checkmarx/data` |
| `CHECKMARX_TIMEOUT` | 기본 타임아웃 | `30s` |
| `CHECKMARX_MAX_WORKERS` | 최대 근로자 | `4` |(No text provided)
```yaml
# ~/.checkmarx/config.yaml
version: "1.0"

# General settings
settings:
  debug: false
  verbose: false
  log_level: "INFO"
  log_file: "~/.checkmarx/logs/checkmarx.log"
  timeout: 30
  max_workers: 4

# Network configuration
network:
  host: "localhost"
  port: 8080
  ssl: true
  timeout: 30
  retries: 3

# Security settings
security:
  auth_required: true
  api_key: ""
  encryption: "AES256"
  verify_ssl: true

# Performance settings
performance:
  cache_enabled: true
  cache_size: "100M"
  cache_dir: "~/.checkmarx/cache"
  max_memory: "1G"

# Monitoring settings
monitoring:
  enabled: true
  interval: 60
  metrics_enabled: true
  alerts_enabled: true
```### 기본 워크플로우
```bash
# 1. Initialize checkmarx
checkmarx init

# 2. Configure basic settings
checkmarx config set host example.com
checkmarx config set port 8080

# 3. Start service
checkmarx start

# 4. Check status
checkmarx status

# 5. Perform operations
checkmarx run --target example.com

# 6. View results
checkmarx results

# 7. Stop service
checkmarx stop
```### 고급 워크플로우
```bash
# Comprehensive operation with monitoring
checkmarx run \
  --config production.yaml \
  --parallel \
  --workers 8 \
  --verbose \
  --timeout 300 \
  --output json \
  --log-file operation.log

# Monitor in real-time
checkmarx monitor --real-time --interval 5

# Generate report
checkmarx report --type comprehensive --output report.html
```### 자동화 예시

## 모범 사례

### 보안
- 바이너리 다운로드 시 항상 체크섬 확인
- 강력한 인증 방법 사용 (API 키, 인증서)
- 최신 버전으로 정기적으로 업데이트
- 최소 권한 원칙 준수
- 규정 준수를 위한 감사 로깅 활성화
- 가능한 경우 암호화된 연결 사용
- 모든 입력 및 구성 검증
- 적절한 접근 제어 구현

### 성능
- 환경에 적합한 리소스 제한 사용
- 시스템 성능 정기적으로 모니터링
- 사용 사례에 맞는 구성 최적화
- 유익한 경우 병렬 처리 사용
- 적절한 캐싱 전략 구현
- 정기적인 유지 관리 및 정리
- 성능 병목 현상 프로파일링
- 효율적인 알고리즘 및 데이터 구조 사용

### 운영
- 포괄적인 문서 유지
- 적절한 백업 전략 구현
- 구성에 대한 버전 관리 사용
- 중요 지표 모니터링 및 알림
- 적절한 오류 처리 구현
- 반복적인 작업에 자동화 사용
- 정기적인 보안 감사 및 업데이트
- 재해 복구 계획 수립

### 개발
- 코딩 표준 및 규칙 준수
- 포괄적인 테스트 작성
- 지속적 통합/배포 사용
- 적절한 로깅 및 모니터링 구현
- API 및 인터페이스 문서화
- 버전 관리 효과적으로 사용
- 코드 정기적으로 검토
- 하위 호환성 유지

Would you like me to continue with the remaining sections or placeholders?```bash
#!/bin/bash
# Automated checkmarx workflow

# Configuration
TARGETS_FILE="targets.txt"
RESULTS_DIR="results/$(date +%Y-%m-%d)"
CONFIG_FILE="automation.yaml"

# Create results directory
mkdir -p "$RESULTS_DIR"

# Process each target
while IFS= read -r target; do
    echo "Processing $target..."

    checkmarx \
        --config "$CONFIG_FILE" \
        --output json \
        --output-file "$RESULTS_DIR/$\\\\{target\\\\}.json" \
        run "$target"

done < "$TARGETS_FILE"

# Generate summary report
checkmarx report summary \
    --input "$RESULTS_DIR/*.json" \
    --output "$RESULTS_DIR/summary.html"

Best Practices

Security

  • Always verify checksums when downloading binaries
  • Use strong authentication methods (API keys, certificates)
  • Regularly update to the latest version
  • Follow principle of least privilege
  • Enable audit logging for compliance
  • Use encrypted connections when possible
  • Validate all inputs and configurations
  • Implement proper access controls

Performance

  • Use appropriate resource limits for your environment
  • Monitor system performance regularly
  • Optimize configuration for your use case
  • Use parallel processing when beneficial
  • Implement proper caching strategies
  • Regular maintenance and cleanup
  • Profile performance bottlenecks
  • Use efficient algorithms and data structures

Operational

  • Maintain comprehensive documentation
  • Implement proper backup strategies
  • Use version control for configurations
  • Monitor and alert on critical metrics
  • Implement proper error handling
  • Use automation for repetitive tasks
  • Regular security audits and updates
  • Plan for disaster recovery

Development

  • Follow coding standards and conventions
  • Write comprehensive tests
  • Use continuous integration/deployment
  • Implement proper logging and monitoring
  • Document APIs and interfaces
  • Use version control effectively
  • Review code regularly
  • Maintain backward compatibility

Resources

Official Documentation

Community Resources

Learning Resources


*마지막 업데이트: 2025-07-06|GitHub에서 수정https://github.com/perplext/1337skills/edit/main/docs/cheatsheets/checkmarx.md)