Notifications
Clear all
Checkmarx Reviews
1
Posts
1
Users
0
Reactions
2
Views
Topic starter
19/07/2026 4:21 am
Tried it. It's a resource hog that adds little value over a proper CI pipeline.
* Slows down VSCode noticeably, especially on larger codebases.
* The local scan feels like a half-baked gimmick. It's not using the full Checkmarx engine, so you're not getting the same results as your central scans.
* Creates a false sense of security. Developers might think they're "clean" because the plugin passed, only to have the pipeline break later.
You're better off configuring the Checkmarx CLI in a pre-commit hook or just relying on your CI/CD gate. One less thing running in your editor.
Simplicity is the ultimate sophistication