Skip to main content

Azure DevOps Plugin - Changelog

The following table lists the improvements and bug fixes that have been implemented for the Azure DevOps plugin with the relevant version release.

Checkmarx One Version

CLI Version

Improvements

Bug Fixes

2.0.18

2.0.37

  • The KICS scanner is now referred to in Checkmarx One as "IaC Security". All mentions of the scanner and the vulnerabilities identified by it, now refer to IaC Security.

  • The API Security scanner is now supported for use via the CLI. When running the scan create command, you can now add api_security to the list of scanners under --scan-types.

2.0.17

2.0.34

General improvements and bug fixes.

2.0.16

2.0.31

Added the option to authenticate with Checkmarx One using an API Key instead of using an Oauth2 Client.

Tip

When you authenticate using an API Key, there is no need to submit your account info (Base URL, Auth URL, Tenant name).

Learn how to generate an API Key hereGenerating an API Key

2.0.15

2.0.29

General improvements and bug fixes

2.0.14

2.0.25

All documentation links now point to the new Checkmarx documentation portal at https://checkmarx.com/resource/documentation.

2.0.13

2.0.23

General improvements and bug fixes

2.0.12

2.0.21

Fixed issue caused by trying to generate results when no scan had run successfully.

2.0.11

2.0.21

  • General improvements and bug fixes

2.0.10

2.0.19

  • General improvements and bug fixes

2.0.9

2.0.18

  • Added support for Azure 2019

2.0.8

  • You can now add filters to the scan create command (to exclude files/folders from the scan) separately for each specific scanner. The flags for the new filters are: --sast-filter <string>, --kics-filter <string>, --sca-filter <string>. See scan create.

    Tip

    The existing flag --file-filter , which sets filters for the entire scan (for all scanners) is still in use.

  • You can now add an ssh key to a scan, using the flag --ssh-key <string> with the path to the ssh private key.

2.0.7

General improvements and bug fixes

2.0.6

2.0.16

General improvements and bug fixes

2.0.5

General improvements and bug fixes

2.0.4

2.0.13

  • Added new --sca-resolver-params flag to the scan create command. See documentation here.

  • Fixed problems with proxy connection.

2.0.3

2.0.12

  • In the scan create command, we renamed the format flag as scan-info-format.

  • Renamed the results command as results show command.

  • Updated UI elements to reflect the new Checkmarx branding (e.g., logo).

  • Fixed naming of agent for scans run via Azure DevOps to accurately reflect scan origin.

2.0.1

2.0.10

  • Added SummaryJSON reports.

  • Added the --scan-timeout <int> flag to the scan create command, enabling users to specify a time limit after which the scan will fail and terminate. See documentation here.

  • Updated UI elements to reflect the new Checkmarx branding (e.g., logo).

0.0.16

2.0.4

  • Updated CLI to version 2.0.4

  • Added branch parameter (required)

0.0.1

  • Automatically trigger SAST, SCA and KICS scans from Azure DevOps pipelines

  • Supports adding a Checkmarx One scan as a pre-configured task or as a YAML

  • Supports use of CLI arguments to customize scan configuration

  • Interface for viewing scan results summary and trends in the Azure environment

  • Direct links from within Azure to detailed Checkmarx One scan results and reports

In this section: