Releases of April 2023
Multi-Tenant (April 2023)
New features and improvements
Status | Description |
|---|---|
Version 2.84 (Released on April 30, 2023) | |
NEW | The latest update to Feedback Apps allows users to define and override issue-type fields in Azure work items configuration at the project or scan level using project and scan tags. This is a convenient solution for users who would otherwise have to maintain multiple Feedback apps, saving them time and effort. |
NEW | We have added a new preview wizard that enhances the comparison of two scan results by presenting relevant information in a clear and concise manner. This wizard displays pertinent information about the two scans, including relevant details and totals for fixed, new, and recurrent issues. With this feature, users can quickly see which issues have been fixed and which ones are still outstanding. They can also determine if new issues have arisen since the last scan, enabling them to take proactive measures to resolve these issues before they escalate. |
NEW | Single-tenant customers can now use self-hosted Azure DevOps (ADO) instances. Previously, only multi-tenant customers were able to use self-hosted ADO instances, while single-tenant customers were required to use Microsoft-hosted instances. With this new feature, single-tenant customers can now choose to host their ADO instances on their own servers, giving them more control over their data and enabling them to meet any specific security or compliance requirements they may have. Self-hosted ADO instances also offer greater flexibility and customization options compared to Microsoft-hosted instances. |
NEW | Feedback App for Jira has been updated to support complex type fields. The term "complex fields" refers to pre-defined "structures" rather than simple dropdown selections, integers, or strings. |
NEW | Checkmarx One has extended its support for various formats of fields in different Jira issue types. In case an issue type has a mandatory field of an unsupported format, the user will be prompted to convert that field to an optional one, ensuring that the issue can still be created or edited. This feature helps users maintain data consistency and completeness while working with various issue types. |
Version 2.83 (Released on April 16, 2023) | |
NEW | The SAST engine implemented in Checkmarx One has been upgraded to version 9.5.4. |
NEW | The Code Repository Coverage widget has undergone a redesign to not only enhance its visual appeal but also improve its functionality and user experience. The updated widget boasts a sleek and modern appearance, with a refreshed color palette and intuitive design that makes it easy to use and navigate. Whether you're a developer looking to track code coverage metrics or a team lead interested in monitoring progress, the redesigned widget is sure to be a valuable tool for your workflow. |
NEW | The Code Repository (SCM) import process for Bitbucket projects has been enhanced to enable all users, regardless of their permissions, to import projects and scan them within their organization. By allowing users without Admin permissions to import projects, we are providing a more inclusive and flexible user experience while also improving the efficiency and usability of the import process. |
NEW | Customers now have the option to host their own Azure DevOps (ADO) instance if they prefer a self-hosted solution. This is especially useful for organizations with specific security, compliance, or customization requirements that cannot be met with a cloud-based solution. |
Bug Fixes
Status | Description |
|---|---|
Version 2.83 (Released on April 16, 2023) | |
FIXED | Results from different programming languages are mixed in the Results Viewer. As a result, result states are affected. |
Checkmarx SCA
Support for Unity Package Manager
We added support for Unity package manager.
| Languages/Frameworks: Unity Repository: Unity Technologies, Needle-mirror, Open UPM File Types: none | |||
Supported Package Managers | Exploitable Path | Supply Chain Security (SCS) | Manifest Files (Packages marked with | |
none |
|
| manifest.json | |
SCA Resolver Releases
We released the following new versions of SCA Resolver:
Notice
The complete changelog, and links to download SCA Resolver are available here.
Version 2.1.5
Added support for Unity package manager. For more information, see Unity Package Manager Dependency Resolver.
For Bower, fixed issue that dependency resolution was failing when latest version ("*") was specified.
For Ivy, fixed issue that unused versions were being resolved despite the fact that a newer version had been specified in the manifest file.
ImageResolver updated to version 2.0.43.
Version 2.1.2
Added support for authentication via Master Access Control, see Master Access Control Authentication for Checkmarx SCA Resolver.
For Sbt, stack overflow is fixed when building the dependency tree.
For Gradle, when a submodule is duplicated in a project we now resolve the package only once.
ImageResolver was updated to version 2.0.41.
Single-Tenant (April 2023)
Checkmarx SCA
Support for Unity Package Manager
We added support for Unity package manager.
| Languages/Frameworks: Unity Repository: Unity Technologies, Needle-mirror, Open UPM File Types: none | |||
Supported Package Managers | Exploitable Path | Supply Chain Security (SCS) | Manifest Files (Packages marked with | |
none |
|
| manifest.json | |
SCA Resolver Releases
We released the following new versions of SCA Resolver:
Notice
The complete changelog, and links to download SCA Resolver are available here.
Version 2.1.5
Added support for Unity package manager. For more information, see Unity Package Manager Dependency Resolver.
For Bower, fixed issue that dependency resolution was failing when latest version ("*") was specified.
For Ivy, fixed issue that unused versions were being resolved despite the fact that a newer version had been specified in the manifest file.
ImageResolver updated to version 2.0.43.
Version 2.1.2
Added support for authentication via Master Access Control, see Master Access Control Authentication for Checkmarx SCA Resolver.
For Sbt, stack overflow is fixed when building the dependency tree.
For Gradle, when a submodule is duplicated in a project we now resolve the package only once.
ImageResolver was updated to version 2.0.41.