Update to AST CLI 2.3.55 and switch to Echo repository

Updates the AST CLI binaries to version 2.3.55 across all platforms (Linux, Linux ARM, macOS, Windows). Switches distribution from Sonatype Central to Checkmarx's Echo repository, adds Echo repository configuration to pom.xml for dependencies and plugins, and configures Maven mirror authentication in CI/release workflows with ECHO_LIBRARIES_ACCESS_KEY secret. Also adds .vscode to gitignore.

Author: cx-atish-jadhav

.github/workflows/ci.yml

@@ -34,7 +34,9 @@ jobs:
 
       - name: Configure echo mirror for dependency resolution
         run: |
-          sed -i 's|</settings>|<mirrors><mirror><id>echo</id><mirrorOf>central</mirrorOf><url>https://maven.echohq.com</url></mirror></mirrors></settings>|' ~/.m2/settings.xml
+          sed -i 's|</settings>|<servers><server><id>echo-repo</id><username></username><password>'"$ECHO_LIBRARIES_ACCESS_KEY"'</password></server></servers><mirrors><mirror><id>echo</id><mirrorOf>*</mirrorOf><url>https://maven.echohq.com</url></mirror></mirrors></settings>|' ~/.m2/settings.xml
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
 
       - name: Check existence of cx-linux binary
         run: |

.github/workflows/release.yml

@@ -50,6 +50,8 @@ on:
         required: true
       OSSRH_USERNAME:
         required: true
+      ECHO_LIBRARIES_ACCESS_KEY:
+        required: true
 
 permissions:
   contents: read
@@ -127,7 +129,9 @@ jobs:
 
       - name: Configure echo mirror for dependency resolution
         run: |
-          sed -i 's|</settings>|<mirrors><mirror><id>echo</id><mirrorOf>central</mirrorOf><url>https://maven.echohq.com</url></mirror></mirrors></settings>|' ~/.m2/settings.xml
+          sed -i 's|</settings>|<servers><server><id>echo-repo</id><username></username><password>'"$ECHO_LIBRARIES_ACCESS_KEY"'</password></server></servers><mirrors><mirror><id>echo</id><mirrorOf>*</mirrorOf><url>https://maven.echohq.com</url></mirror></mirrors></settings>|' ~/.m2/settings.xml
+        env:
+          ECHO_LIBRARIES_ACCESS_KEY: ${{ secrets.ECHO_LIBRARIES_ACCESS_KEY }}
 
       - name: Update the POM version.
         run: mvn -B versions:set -DnewVersion="$RELEASE_VERSION" --file pom.xml -DskipTests

.gitignore

@@ -32,4 +32,5 @@ docker-compose.override.yml
 #################################
 Thumbs.db
 .directory
-.DS_Store
+.DS_Store
+/.vscode

checkmarx-ast-cli.version

@@ -1 +1 @@
-2.3.54
+2.3.55

pom.xml

@@ -211,14 +211,32 @@
         </plugins>
     </build>
 
+    <pluginRepositories>
+        <pluginRepository>
+            <id>echo-repo</id>
+            <url>https://maven.echohq.com</url>
+        </pluginRepository>
+    </pluginRepositories>
 
     <distributionManagement>
         <repository>
-            <id>central</id>
-            <url>https://central.sonatype.com/api/v1/publish</url>
+            <id>echo-repo</id>
+            <url>https://maven.echohq.com</url>
         </repository>
     </distributionManagement>
 
+    <repositories>
+        <repository>
+            <id>echo-repo</id>
+            <url>https://maven.echohq.com</url>
+            <releases>
+                <enabled>true</enabled>
+            </releases>
+            <snapshots>
+                <enabled>false</enabled>
+            </snapshots>
+        </repository>
+    </repositories>
 
     <licenses>
         <license>

src/main/resources/cx-linux

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:776d9864c0104e1d0023641ef931bd1c58478cf56768ce77f2bfbfd6e9e64493
-size 80568482
+oid sha256:d76d1d464af46b0dc5976f8c79560344d86e1641b6eb1959e7a8120f5eab7293
+size 83103906

src/main/resources/cx-linux-arm

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:d40b3cfb9f930e96a9d6b494d4c7b9cd98e3bb857e55a0f55c92d764bb8c3c1a
-size 75235490
+oid sha256:19f2a49ce38731f078fc7e17e92fdde86e0ba43cd61b0cd9a89636308b9710e5
+size 77529250

src/main/resources/cx-mac

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:df4a2d6b72936afa65df8730f0ee491f6d518286421063f50df2e48d3d5b56f9
-size 160422432
+oid sha256:2a777f54cae91dc22e27dead84734ef5e84107011c9ffde441be988b9c25ac86
+size 165550656

src/main/resources/cx.exe

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:c7227ac9dd89f344c12629d367774a2428595b3daff0a2e710981d924f13dbf4
-size 82488128
+oid sha256:8c9bf6f587910590eebde2364f19c4884f814561afbcdfcc9be3f038fdfc1199
+size 85082432