Version 3.5

The SAST engine in Checkmarx One has been upgraded to version 9.6.2. For complete Release Notes, click here.

The new SAST engine aims to find the perfect balance between thorough security tests and the need for quick and actionable results. There’s no need to choose between speed and security. Alongside the Base Preset, we are thrilled to announce a new scan mode designed to speed up the scan: Fast Scan mode.

Fast Scan mode decreases the scanning time of projects by up to 90%, making it faster to identify relevant vulnerabilities and enable continuous deployment while ensuring that security standards are followed. This will help developers tackle the most relevant vulnerabilities.

For more information on Fast Scan, refer to this page. To learn how to configure Fast Scan in Checkmarx One, see here.

We've introduced a new feature that allows you to recalculate SCA risks without resubmitting your source code for scanning.

Checkmarx One leverages the dependencies identified in the previous scan of the project and re-assesses the risks affecting your project based on the current data (e.g., new vulnerabilities identified in the package, new Policies applied to the project, changes in risk states, etc.).

To trigger a scan recalculation, click the Recalculate button on the SCA results screen for the relevant project. Results from scan recalculation are shown as a separate scan.

The Jira Feedback App now includes a custom field displaying the schema type version on Jira tickets.

Tabular data can now be exported in the form of CSV files. This functionality is accessible in the Projects list, Scans list, and Applications list.

With the latest update to the Code Repository Integration, groups in the integrated repositories are now sorted automatically, providing users with a structured and easily accessible view. The Search functionality allows users to quickly find the required group.

The manual steps in Checkmarx One for applying suggested vulnerability fixes have been automated by implementing automatic creation of pull requests. Automatic pull requests are applicable only for projects imported via the Code Repository Import process, using API tokens.