What Checkmarx/kics shipped
Written by FoxPlug from the repository's own releases; not affiliated with Kics. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/Checkmarx/kics; Kics did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of September 14, 2026
What shipped
- Release v2.2.0 shipped with updated queries catalog, new Synapse workspace queries, and a fix for the Last User is Root Dockerfile query. Release
- All Dockerfile queries now support case-insensitive matching of Dockerfile commands. Pull request #8115
- Fixed version checking to remove the extra 'v' prefix when fetching the latest available version. Pull request #8114
- Filesystem scanning now skips .cache files before they reach the parser, improving performance and reducing noise. Pull request #8112
- Queries catalog, index, and Dockerfile were updated for the 2.2.0 release. Pull request #8126
- Removed unused goreleaser configuration files from the release directory. Pull request #8122
Why it matters
v2.2.0 brings improved Dockerfile scanning with case-insensitive command support and new query coverage for Synapse workspaces. Performance improvements from skipping cache files and bug fixes to version detection make the scanner more reliable.
Changelog entry
- Release v2.2.0 with updated queries catalog and new Synapse workspace queries Release
- Fix: added missing case to Last User is Root Dockerfile query Release
- Fix: all Dockerfile queries now support case-insensitive matching of Dockerfile commands Pull request #8115
- Fix: filesystem scanning skips .cache extension files before parser processing Pull request #8112
- Fix: removed extra 'v' prefix from fetched version information Pull request #8114
- Chore: removed unused goreleaser configuration files Pull request #8122
v2.2.0 is out. Dockerfile queries now support case-insensitive matching, new Synapse workspace coverage added, and filesystem scanning skips cache files automatically.
Kics v2.2.0 is now available. This release improves Dockerfile scanning with case-insensitive command support, adds new queries for Synapse workspace security checks, and optimizes performance by skipping cache files during filesystem walks. Version detection and release tooling have also been refined.