Standalone User Experience Overview (AST-112336)

[cx-rahul-pidde]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

User experience varies based on authentication and licensing: logged-out users have limited access with only SCA/KICS scans available, while One Assist, AI Protection, or Developer Assist licenses progressively unlock Results View actions, Assist features, and realtime scanning capabilities. Users without any assist-related license retain basic scanning but lose Assist functionality and SAST realtime scanning, with Ignore Vulnerability visibility adjusted accordingly.

References

JIRA link - https://checkmarx.atlassian.net/browse/AST-112336

Testing

User Logged Out – Expected Behavior Across Features

1. Checkmarx One – Results View
	Disabled Components
	- Run Scan button
	- Severity filters
	- Other filters
	- Group By options
	Enabled Components
	- Settings button
	- Open Settings (on click)
	Documentation Links
	- Read our docs → Redirect to:
	https://docs.checkmarx.com/en/34965-123549-installing-and-setting-up-the-checkmarx-vs-code-extension.html

2. Checkmarx One Assist
	Disabled
	- View Ignored Vulnerability
	Enabled
	- Settings
	Documentation link
	- Read our docs → Redirect to:
		Both the Documentation link and Read our docs redirect to:
		https://docs.checkmarx.com/en/34965-405960-checkmarx-one-developer-assist.html

3. Checkmarx SCA Realtime Scanner View
	Enabled
	- Run SCA Realtime Scanner
	- Clear SCA results tree
	- Bottom Checkmarx SCA icon
	Special Rule
	- User does NOT need to be logged in to run SCA Realtime Scan.

4. Checkmarx ASPM Results View
- Authentication is required to display this view.

5. Checkmarx Realtime Scanner (SAST)
- Should NOT run when the user is logged out.

6. Checkmarx KICS Realtime Scanner
- Authentication not required
- User can run KICS realtime scans.
- Bottom Checkmarx Kics icon visible

7. Ignore Vulnerability Icon
- Should be hidden when user is logged out.

User has Checkmarx Developer Assist Licencse

1. Checkmarx One – Results View
	Hidden
	- Run Scan button
	- Severity filters
	- Other filters
	- Group By options
	Enabled Components
	- Settings button
	- Promotional Card View
	Documentation Links
	- On Click of learn more → Redirect to:	https://docs.checkmarx.com/en/34965-68743-using-the-checkmarx-vs-code-extension---checkmarx-one-results.html#UUID-f6ae9b23-44c8-fcf3-bef2-7b136b9001a1

2. Checkmarx One Assist
	hidden
	- View Ignored Vulnerability link hidden if ignored count is zero		
	Enabled
	- Settings
	- View Ignored Vulnerability (Kebab menu)
	Documentation link
	- Documentation → Redirect to:
		https://docs.checkmarx.com/en/34965-405960-checkmarx-one-developer-assist.html

3. Checkmarx SCA Realtime Scanner View
	Enable 
	- Promotional Card view
	Documentation Links
	- On Click of learn more → Redirect to:	https://docs.checkmarx.com/en/34965-152266-using-the-vs-code-checkmarx-extension---sca-realtime-scanning.html#UUID-1d224150-6409-1d67-6d30-14de69d40ab9
	Hidden
	- Run SCA Realtime Scanner
	- Clear SCA results tree
	- Bottom Checkmarx SCA icon
	Special Rule
	- Cannt run SCA realtime scan

4. Checkmarx ASPM Results View
Enable 
	- Promotional Card view
Documentation Links
	- On Click of learn more → Redirect to:	https://docs.checkmarx.com/en/34965-68743-using-the-checkmarx-vs-code-extension---checkmarx-one-results.html#UUID-f6ae9b23-44c8-fcf3-bef2-7b136b9001a1_section-idm234938984608896
Hidden
- Cannt see the ASPM results.

5. Checkmarx Realtime Scanner (SAST)
- we can run scan and see the results in problem window 

6. Checkmarx KICS Realtime Scanner
- Bottom Checkmarx Kics icon hidden
- Cannt run KICS realtime scan

7. Ignore Vulnerability Icon
- Should be visible at bottom.

User has Checkmarx One assist || Checkmarx AI Protection license

1. Checkmarx One – Results View
	Enabled
	- Run Scan button(based on project selection)
	- Severity filters
	- Other filters
	- Group By options
	- Settings button

2. Checkmarx One Assist
	hidden
	- View Ignored Vulnerability link hidden if ignored count is zero		
	Enabled
	- Settings
	- View Ignored Vulnerability (Kebab menu)
	Documentation link
	- Documentation → Redirect to:
		https://docs.checkmarx.com/en/34965-405960-checkmarx-one-developer-assist.html

3. Checkmarx SCA Realtime Scanner View
	Enabled
	- Run SCA Realtime Scanner
	- Clear SCA results tree
	- Bottom Checkmarx SCA icon
	Special Rule
	- User does NOT need to be logged in to run SCA Realtime Scan.

4. Checkmarx ASPM Results View
- ASPM results display based on existing condition

5. Checkmarx Realtime Scanner (SAST)
- we can run scan and see the results in problem window 

6. Checkmarx KICS Realtime Scanner
- Authentication not required
- User can run KICS realtime scans.
- Bottom Checkmarx Kics icon visible

7. Ignore Vulnerability Icon
- Should be visible at bottom.

User dont have Checkmarx One Assist || AI Protection || Checkmarx Developer Assist license

1. Checkmarx One – Results View
	Enabled
	- Run Scan button(based on project selection)
	- Severity filters
	- Other filters
	- Group By options
	- Settings button
2. Checkmarx One Assist
	Disabled\hidden
	- View Ignored Vulnerability in kebab menu it is disabled	
	Enabled
	- Contact to Administration view will be display
	- Settings
	- View Ignored Vulnerability (Kebab menu)
	Documentation link
	- Documentation → Redirect to:
		https://docs.checkmarx.com/en/34965-405960-checkmarx-one-developer-assist.html
3. Checkmarx SCA Realtime Scanner View
	Enabled
	- Run SCA Realtime Scanner
	- Clear SCA results tree
	- Bottom Checkmarx SCA icon visible
	Special Rule
	- User does NOT need to be logged in to run SCA Realtime Scan.
4. Checkmarx ASPM Results View
- Based on latest scan the ASPM results will display 
5. Checkmarx Realtime Scanner 
- Should NOT run when the cxone assist license is disabled
6. Checkmarx KICS Realtime Scanner
- Authentication not required
- User can run KICS realtime scans.
- Bottom Checkmarx Kics icon visible
7. Ignore Vulnerability Icon
- Should be hidden when user the cxone assist license is disabled

Checklist

• I have added documentation for new/changed functionality in this PR (if applicable).
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

[github-actions]

Checkmarx One – Scan Summary & Details – bb3e01b6-f701-4168-8e71-f53ed2ea5879

Great job! No new security vulnerabilities introduced in this pull request