Skip to main content

Maven Plugin Change Log

The following table lists the features and changes implemented for the plugin with the relevant version release. To obtain the plugin, go to the plugin download section.

Version

Change / Feature

Additional Information

2024.4.3

  • Added support for Critical Severity for CxSAST

  • The below third-party libraries have been upgraded :

    • maven-plugin-api to 3.9.9

    • maven-plugin-annotations to 3.15.0

    • maven-core to 3.9.9

    • maven-reporting-api to 4.0.0

    • maven-reporting-impl to 4.0.0-M15

    • plexus-archiver to 4.10.0

    • commons-compress to 1.27.1

    • plexus-utils to 4.0.2

    • commons-io to 2.17.0

    • junrar to 7.5.5

    • jackson-databind to 2.18.0

    • commons-collections4 to 4.5.0-M2

    • maven-deploy-plugin to 3.1.3

    • maven-compiler-plugin to 3.13.0

    • maven-plugin-plugin to 3.15.0

    • maven-javadoc-plugin to 3.10.1

    • maven-source-plugin to 4.0.0-beta-1

    • nexus-staging-maven-plugin to 1.7.0

    • maven-gpg-plugin to 3.2.7

  • Supported SAST Versions: 9.5 - 9.7

  • OSA Support: Supported

    * FSA agent supported version: 24.2.2

  • SCA Support: Not supported

  • Supported Java Version: Oracle JDK 8

2022.2.3

  • Updated the dependencies for use with FSA 21.0.5.

  • Third-party libraries have been upgraded as listed below:

    • Library “commons-io: commons-io” to 2.11.0

    • Library “com.github.junrar: junrar” to 7.5.1.

    • Library “org.freemarker:freemarker” to 2.3.31.

    • Library “com.fasterxml.jackson.core: jackson-databind” to 2.13.2.2.

    • Library “commons-collections: commons-collections” to 3.2.2.

    • Library “org.apache.commons: commons-compress” to 1.21.

  • Supported SAST Versions: 9.2, 9.3, 9.4

  • OSA Support: Supported

    * FSA agent supported version: 21.0.5

  • SCA Support: Not supported

  • Supported Java Version: Oracle JDK 8

9.00.2

  • Proxy Support, e.g., mvn -Dhttp.proxyHost=${proxy_host} -Dhttp.proxyPort=${proxy_port} checkmarx:scan

  • Proxy Authentication Support, e.g., mvn -Dhttp.proxyHost=${proxy_host} -Dhttp.proxyPort=${proxy_port} -Dhttp.proxyUser=${proxy_username} -Dhttp.proxyPassword=${proxy_password} checkmarx:scan

  • Added support for maven encryption (username, password).

8.90.0

  • Updated CxOSA scan support for the following dependency managers: NuGet, Python

  • Ability to break the build if CxOSA Policy Compliance is violated

    • New command line parameter in the CLI (-CheckPolicy)

    • New Exit code number (18) in case the policy is violated

  • Fixed issue that caused CPU spikes

  • Added support for proxy authentication

  • Fixed issue for recursive file pattern exclusions

  • Fixed issue that caused enabling ‘https.’ verification

  • Fixed issue that truncated team name and caused new projects to be created

  • Improved multipart requests to CxSAST server

8.70.0

  • A new parameter (-ExecuteNpmAndBower) has been added to this version of the CxSAST CLI plugin enabling the retrieval of all NPM and Bower dependancies before starting the CxOSA scan.

  • The parameters ('-OsaReportHtml' & '-OsaReportPDF') have been deprecated and are no longer supported in this version

8.60.0

  • Support tokenized authentication

  • Create CxOSA scan by sending SHA1 instead of binaries

In this section: