Current Multi-Tenant Version | 3.41

When setting up a code repository integration with Azure DevOps (ADO), the authentication is now done via Microsoft Entra (in place of OAuth 2.0 which was used previously). The change was made because the previous method is no longer supported by ADO. There is no functional change from the user’s perspective.

Easily start authenticated DAST scans without writing a YAML file. This new flow simplifies onboarding by guiding users through setup and authentication via a user-friendly UI, even when initiated from the CLI.

Admins can now manage webhooks at the tenant level, enabling centralized configuration across multiple projects. This reduces manual setup, ensures consistent settings, and streamlines administration for large environments.

The PATCH method is now supported for both Update Applications and Update Projects endpoints, allowing partial updates of specific fields without requiring the full data set.

This improves API efficiency, reduces data transfer, and simplifies workflows by letting users make quick changes - such as adding a tag - without affecting other properties. As a result, updates are faster, more flexible, and require fewer API calls.

See API documentation for the PATCH method in Applications and Projects.

ASPM risk score results are now shown directly in Checkmarx One IDE plugins, aligning the developer experience with the web app. This eliminates the noise of unprioritized findings by allowing developers to focus on high-risk vulnerabilities first.

The integration streamlines remediation, improves efficiency, and promotes adoption by embedding meaningful risk insights directly into the developer workflow.

This feature is currently available only for VS Code. For more information, see documentation.

You can now integrate ACR private registries with Checkmarx One, enabling the Checkmarx One Containers scanner to scan images in the registry. We provide a convenient wizard for setting up the integration.

For more information, see documentation.

You can now integrate Red Hat Quay private registries with Checkmarx One, enabling the Checkmarx One Containers scanner to scan images in the registry. We provide a convenient wizard for setting up the integration.

For more information, see documentation.

We now support including data identified by the Containers scanner in SBOM reports. When generating an SBOM for an application, you can now select which scanners to include in the report, SCA and/or Containers. This will increase visibility into all of the open source components used in your application.

To learn more about Checkmarx One SBOM Reports, click here.