Skip to main content

Checkmarx SCA Release Notes April 2025

Notice

These release notes relate to the SCA standalone product. Users who consume SCA through Checkmarx One should refer to the Checkmarx One release notes to see which SCA features have been released in Checkmarx One.

Warning

The IgnoreVulnerability and UnignoreVulnerability APIs, which had been used for triaging SCA vulnerabilities, will be deprecated soon. They have been replaced by the new Management of Risk API, which supports applying any Checkmarx One state and adding comments. We recommend migrating to the new API soon.

SCA Updates

SPDX SBOM Scan Improvement

We have improved the accuracy of identification of direct and transitive packages when running an SCA scan on an SPDX format SBOM.

SCA Resolver

Download the latest version here.

Version 2.12.21 (Apr 24, 2025)

  • Fixed issue affecting Syft execution on Windows environments.

In this section: