Skip to main content

Checkmarx SCA Release Notes September 2026

Notice

These release notes relate to the SCA standalone product. Users who consume SCA through Checkmarx One should refer to the Checkmarx One release notes to see which SCA features have been released in Checkmarx One.

SCA Resolver

Download the latest version here.

Version 2.15.8 (Sep 26, 2026)

  • Added support for Python UV package manager, must be specified using the --python-package-manager argument

  • Added a --detection-types argument to limit SCA SBOM scans to a single detection method

  • Improved extraction logic to better handle absolute paths

  • Increased size limit for archive submission

  • Improved RPM extraction to support additional compression methods

  • For Maven and Gradle, added support for filtering provided-scope dependencies

  • For Maven, added support for resolving the final version from "latest" or "release" tags for SBOM generation

  • For Maven, added support for multi-module handling in SBOM scans

  • For Pnpm, improved handling of transitive dev dependency scope

  • For Pip, improved parsing to support resolution of local wheel files

In this section: