Checkmarx SCA Release Notes March 2026

Notice

These release notes relate to the SCA standalone product. Users who consume SCA through Checkmarx One should refer to the Checkmarx One release notes to see which SCA features have been released in Checkmarx One.

SCA Updates

Added Support for Python 3.14

Checkmarx SCA now supports dependency resolution for Python 3.14 for scans run in the cloud as well as via SCA Resolver. This enables accurate SCA scanning of Python 3.14 projects, helping to maintain continuous visibility into security and license risk for customers who are adopting the newer Python version.

Added Support for .NET 10 (LTS)

Checkmarx SCA now supports dependency resolution for .NET 10 (Long-Term Support), enabling teams to scan NuGet dependencies in .NET 10 projects. As an LTS release, .NET 10 is the preferred target for enterprise and production workloads, making reliable SCA coverage essential for maintaining a secure open-source supply chain over its multi-year support lifecycle.

Added Support for Java 25 (LTS)

Checkmarx One now supports dependency resolution for Java 25 (Long-Term Support), enabling teams to scan Maven and Gradle dependencies in Java 25 projects. As an LTS release, Java 25 is the preferred target for enterprise and production workloads, making reliable SCA coverage essential for maintaining a secure open-source supply chain over its multi-year support lifecycle.

SCA Resolver

Download the latest version here.

Version 2.13.3 (Feb 25, 2026)

Added support for Delta Scan resolution on Checkmarx One CLI scans, dramatically cutting the time of SCA scans when rescanning an existing project. When running SCA scans via the Checkmarx One CLI (v 2.3.44+) using Resolver (this version and above), the Delta Scan feature will now run by default. This setting can be overriden by using the --sca-resolver-params flag with the argument --disable-delta-scan.

In this section: