Skip to main content

Checkmarx SCA Release Notes November 2025

Notice

These release notes relate to the SCA standalone product. Users who consume SCA through Checkmarx One should refer to the Checkmarx One release notes to see which SCA features have been released in Checkmarx One.

Warning

The IgnoreVulnerability and UnignoreVulnerability APIs, which had been used for triaging SCA vulnerabilities, will be deprecated soon. They have been replaced by the new Management of Risk API, which supports applying any Checkmarx One state and adding comments. We recommend migrating to the new API soon.

SCA Updates

Global Inventory and Risks Improvements

The Global Inventory screen has been redesigned to deliver a faster, more intuitive experience aligned with the Checkmarx One design system. Key enhancements include:

  • Improved performance and responsiveness for smoother navigation and faster data loading

  • Improved look and feel

  • Refined column titles and data to make information easier to understand and filter

These updates provide a clearer, more efficient view of your organization’s inventory and risks.

SCA Resolver

Download the latest version here.

Version 2.12.38 (November 19, 2025)

  • Improved handling for commands that take too long to complete.

  • For Java, improved dependency constraints for the results and gradle detection tree.

  • For nuget, added support forproject.assets.json files, used for .NET projects.

In this section: