Version 3.34 | March 23, 2025

The new triaging capabilities in the Repository Healthand Secret Detectiontabs provide a structured way to manage and prioritize findings. Users can now categorize findings by severity and state, add mandatory comments, and track all actions through a history log.

This ensures a more efficient workflow, allowing security teams to quickly address critical issues while maintaining transparency and accountability. The feature also improves clarity by clearly indicating non-exploitable risks in the UI, helping teams focus on actionable threats.

You can now configure Feedback Apps to send automatic Alerts to Slack, Teams or Email when a new SCA vulnerability is detected in a package that is used in your projects.

We have added a new API, POST /scans/byfilters. This enables retrieving detailed information about scans, similar to GET /scans. However, the new API does not have a limit on the number of characters used in filter submission.

The new external API endpoints provide access to the Checkmarx One Analytics database, enabling customers to integrate their preferred Business Intelligence tools for customizable data analysis and reporting. This API also offers a unified access method for internal Checkmarx One services to consume analytics data.

By replacing multiple real-time data retrieval processes with a single, robust API, it streamlines data access, reduces integration complexity, and minimizes potential points of failure.

For more information, see documentation.

This release introduces enhancements to the Cloud Insights logic for determining the exposure status of replicated images.

In the Checkmarx One left-side menu, Insightshas been replaced with ASPM, and Analytics, Risk Management, and Cloud Insightshave been grouped under this menu.

Download the new version here.

Keycloak was upgraded to version 26.1.