What Checkmarx/kics shipped
Written by FoxPlug from public releases; not affiliated with Kics. An automatic summary of the public release, pull request and commit data of github.com/Checkmarx/kics. Kics did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 14, 2026
What shipped
- Release v2.2.0 shipped with updated queries catalog, new Synapse workspace queries, and a fix for the Last User is Root Dockerfile query. Release
- All Dockerfile queries now support case-insensitive matching of Dockerfile commands. Pull request #8115
- Fixed version checking to remove the extra 'v' prefix when fetching the latest available version. Pull request #8114
- Filesystem scanning now skips .cache files before they reach the parser, improving performance and reducing noise. Pull request #8112
- Queries catalog, index, and Dockerfile were updated for the 2.2.0 release. Pull request #8126
- Removed unused goreleaser configuration files from the release directory. Pull request #8122
Why it matters
v2.2.0 brings improved Dockerfile scanning with case-insensitive command support and new query coverage for Synapse workspaces. Performance improvements from skipping cache files and bug fixes to version detection make the scanner more reliable.
Changelog entry
- Release v2.2.0 with updated queries catalog and new Synapse workspace queries Release
- Fix: added missing case to Last User is Root Dockerfile query Release
- Fix: all Dockerfile queries now support case-insensitive matching of Dockerfile commands Pull request #8115
- Fix: filesystem scanning skips .cache extension files before parser processing Pull request #8112
- Fix: removed extra 'v' prefix from fetched version information Pull request #8114
- Chore: removed unused goreleaser configuration files Pull request #8122
v2.2.0 is out. Dockerfile queries now support case-insensitive matching, new Synapse workspace coverage added, and filesystem scanning skips cache files automatically.
Kics v2.2.0 is now available. This release improves Dockerfile scanning with case-insensitive command support, adds new queries for Synapse workspace security checks, and optimizes performance by skipping cache files during filesystem walks. Version detection and release tooling have also been refined.