Increase unit coverage + fix uninstall session cleanup, .sh hover popup, and SCA triage handling(AST-137809)

[cx-atish-jadhav]

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

• Increase unit test coverage: plugin-checkmarx-ast to ~47%, common-lib to ~56%.
• Fix AST-136209: clear JetBrains plugin login session on uninstall via PluginLifecycleHandler.java.
• Fix AST-125205: ensure hover popup shows for secret vulnerabilities in .sh files via ProblemBuilder.java.
• Pin checkmarx/ast-github-action to full commit SHA (327efb5d1dd16ac6c7c21a9ff8ec1e8ec393b5e6) in checkmarx-one-scan.yml.

References

• AST-136209 (Jetbrains | Login session data is getting retained in the jetbrains plugin)
• AST-125205 (QA | Secret vulnerabilities detected in .sh file, hover popup not displayed)
• AST-137809 (Increase Unit Test case Coverage to for IntelliJ from 26 to 85%)
• Branch commit: 2db5b35 (coverage bumps and fixes)

Testing

Unit tests: (run the relevant modules)

• ./gradlew :plugin-checkmarx-ast:test
• ./gradlew :common-lib:test

• Jacoco reports reviewed for coverage improvements.
• Manual: verify uninstall clears session state and hover popup appears for .sh secret findings.
• Note: Update with actual commands/results you executed.

Checklist

• I have added documentation for new/changed functionality in this PR (if applicable).
• All active GitHub checks for tests, formatting, and security are passing
• The correct base branch is being used

[github-actions]

Checkmarx One – Scan Summary & Details – 71d7be0c-4f28-4d84-a888-064509d6b7f5

---

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Unpinned Actions Full Length Commit SHA	/checkmarx-one-scan.yml: 26