✔️

Checkmarx Learning Roadmap

Enterprise SAST scanning — policy gates and remediation workflows.

Estimated time:2–3 weeks

1🌱

Phase 1 — Fundamentals

SAST scan basics & supported languages

Vulnerability severity classification

Scan results dashboard

Presets & query customization

2🚦

Policy management (fail-build thresholds)

Best-fix location analysis

Triage & false-positive marking

3🔄

Pipeline plugin integration

Incremental scans for faster feedback

Pull request scan gating

4📈

important

Custom query language (CxQL)

Reducing false-positive fatigue across teams

Reporting for compliance audits

Begin with interview questions to assess your current level.