> For the complete documentation index, see [llms.txt](https://docs.opsmx.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.opsmx.com/integrations/integrating-security-scanning-tools/opsmx-code-scan.md).

# OpsMx Code Scan

OpsMx Code Scan is an open-source static analysis tool used for identifying and fixing security issues in source code. It is designed to be fast, developer-friendly, and can be integrated into the development workflow. OpsMx Code Scan uses a pattern-based approach to detect and fix security vulnerabilities, coding errors, and other issues in codebases.

## Usage of OpsMx Code Scan in Delivery Shield

* Delivery Shield integrates with OpsMx Code Scan to perform static analysis on source code, identifying security vulnerabilities, code quality issues, and policy violations early in the development cycle.
* Findings from OpsMx Code Scan scans are ingested and factored into the application's overall security score, alongside results from other SAST tools.

## To Integrate OpsMx Code Scan:

1. Navigate to **Setup** > **Integrations**.
2. In the **Source** panel, click **OpsMx Code Scan**.
3. The OpsMx Code Scan integration page is displayed. Click **+New Account**.

<figure><img src="https://591284771-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxDmLTMQiowMHZ4CQPCvT%2Fuploads%2F4cSQzCpc3TfBz680UIDB%2Fopsmx%20code%20scan%20.png?alt=media&amp;token=c685acc3-ed0b-4cab-a488-61ed9e9f60fd" alt=""><figcaption></figcaption></figure>

4. In the popup that appears, enter the details for the following fields:

<figure><img src="https://591284771-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxDmLTMQiowMHZ4CQPCvT%2Fuploads%2F0Sb5uDN8yzgr3gPUoUcJ%2Fopsmx%20codescan%202.png?alt=media&amp;token=9722bbb6-1dd3-4d0b-8987-4b8ec67d3565" alt=""><figcaption></figcaption></figure>

5. Enter the Account Name.
6. Enable SAST Scan.
7. Select the **Teams** and the corresponding **Environments** from the dropdown for which you want the integration to be available. The integration will be available for the selected teams and environment only. You can select up to 5 teams for the integration to be displayed.

* An example is given below for reference:![](https://lh7-rt.googleusercontent.com/docsz/AD_4nXeuMZQzZsZQuulVdW9B9OuffNPoEXqbcpcAkYtKVyb7YiTQxbVIt1L4Gh-zshqX2J9MFKIat8x4oWFIGxdg3j1XVagyUNhUAlD_52soyMyd1cy53p6XiYi0LsTjIBfHcybRWl61?key=D9EXoOdGF7oYOBvYaW2GnRWJ)
* In the example above,
* If **Team 1**, **Team 2**, and **Team 3** are selected, only applications associated with these teams can access the integration. Any applications belonging to other teams, such as **Team 4**, will not have access to this account.
* Even if the user who created this account is also an admin for **Team 4**, the integration account remains restricted and is not available for **Team 4**.
* Access to the account is strictly limited to the specified **Teams** and **Environments** selected during account creation.
* **For Organization Admins:**
  * When an **Organization Admin** creates an account without selecting specific **Teams** and **Environments**, the account will be universally applicable, granting access to **all teams** and **all environments** by default.
* **For Team Admins with Multiple Teams:**
  * If a **Team Admin** who manages multiple teams creates an account without specifying particular **Teams** and **Environments**, the account will only be accessible to the teams for which the logged-in user holds admin privileges.

8. Click **Save**. The tool is integrated in the source stage.
9. You can edit the entered values by clicking the **Edit** option as shown below:

<figure><img src="https://591284771-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxDmLTMQiowMHZ4CQPCvT%2Fuploads%2Fet0XwtnlDiEeeCzsMC9e%2Fopsmx%20code%20scan%203.png?alt=media&amp;token=5b3f749c-71f1-4cbd-8dd2-047d48c389ec" alt=""><figcaption></figcaption></figure>

10. Do the necessary changes and click **Update**. The new values get updated.

<figure><img src="https://591284771-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FxDmLTMQiowMHZ4CQPCvT%2Fuploads%2FtZrFmricSypV1e28woNr%2Fopsmx%20code%20scan%204.png?alt=media&amp;token=39193c1f-2aaa-434d-a8f9-f2ae87ff3b74" alt=""><figcaption></figcaption></figure>

11. To delete the integration, click the **Delete** button.
