Skip to main content

Checkmarx Developer Assist JetBrains Plugin - Changelog

The following table lists of improvements and bug fixes have been implemented for the Checkmarx Developer Assist JetBrains Plugin with the relevant version release.

Notice

See full documentation of this plugin here.

Note

As of May 31, 2026, Dev Assist remediation can be triggered via natural language chat in your AI Assistant. For more information, see Remediation Via Chat.

Plugin Version

Release Date

CLI Version

Improvements

Bug Fixes

1.0.4

Aug 25, 2026

2.3.60

For OSS-Realtime scanner, added support for additional package managers and associated manifest files:

  • Java: Gradle (build.gradle, build.gradle.kts)

  • Java: SBT (build.sbt, any .sbt file ✱)

  • JS/TS: Yarn (1 & 2) (package.json, yarn.lock)

  • JS/TS: Bower (bower.json)

  • Python: PIP (requirements.txt, requirements-*.txt, requirement.txt, requirement-*.txt)

  • Python: Setup.py / Setuptools (Setup.py, Setup.cfg)

  • Python: Poetry (pyproject.toml, poetry.lock)

  • PHP/Drupal: Composer (composer.json, composer.lock)

  • Ruby: RubyGems (Gemfile, Gemfile.lock)

For the complete list of supported package managers and manifest files, see Supported Manifest Files.

1.0.3

July 23, 2026

2.3.57

  • General improvements and bug fixes

    Note

    This version is not supported for IntelliJ version 2026.2.1. If you are using that version of IntelliJ, then you should continue using version 1.0.2 or below.

1.0.2

Apr 14, 2026

2.3.48

  • Changed the behavior so that when connection to the Checkmarx MCP is not available, the remediation agent seamlessly offers remediation for all types of risks based on the IDE's LLM. When this occurs, we provide a notification indicating that the recommendations are not based on Checkmarx's specialized models.

1.0.1

Apr 9, 2026

2.3.45

  • General improvements and bug fixes

1.0.0

Mar 2, 2026

2.3.45

Initial release of the plugin. This new tool empowers developers to identify risks in their code in realtime and harness the power of AI to remediate the risks on the spot.

Checkmarx Developer Assist comprises two main elements:

  • Realtime Scanning - Identify vulnerabilities in realtime during IDE development of both human-generated and AI-generated code. Our super-fast scanners run in the background whenever you open or edit a relevant file. Our scanners identify vulnerabilities and unmasked secrets in your code. We also identify vulnerable or malicious container images and open source packages used in your project. Results are marked as Problems which are highlighted in the code and annotated with identifying icons.

  • Agentic-AI Remediation – Initiate an Agentic-AI session to receive remediation suggestions. Checkmarx feeds all relevant info to the AI agent which accesses our MCP server to gather data from our proprietary databases and customized AI models. The AI assistant then uses this data to generate remediated code for your project. You can accept the suggested changes or you can chat with the AI agent to learn more about the vulnerability and fine-tune the remediation suggestion.

In this section: