Static analysis language support
The types of files that can be scanned by ASoC when you perform static analysis.
Language support
Language | Supported file types | Frameworks and library support | Autofix1 | Operating system support |
---|---|---|---|---|
.NET (C#, ASP.NET, VB.NET) | Default:
|
ASP .NET MVC (3, 4, 5, 6, 7, and 8) |
Yes | Windows |
Source code-only:
|
ASP .NET MVC (3, 4, 5, 6, 7, and 8) |
Yes | All supported operating systems | |
ABAP |
|
Not applicable | No | All supported operating systems |
Android |
|
Not applicable | Yes | All supported operating systems |
Angular |
|
Not applicable | Yes | All supported operating systems |
AngularJS |
|
Not applicable | No | All supported operating systems |
APEX |
|
Not applicable | Yes | All supported operating systems |
ASP Classic |
|
Not applicable | Yes | All supported operating systems |
C/C++ | Default:
Note: See "Microsoft Visual Studio
support"
for important additional information. |
Not applicable | Yes | Windows |
Source code-only:
|
Not applicable | Yes | All supported operating systems | |
Cascading style sheets |
|
Not applicable | No | All supported operating systems |
COBOL |
|
Not applicable | Yes | All supported operating systems |
ColdFusion |
|
Not applicable | Yes | All supported operating systems |
Dart |
|
Not applicable | Yes | All supported operating systems |
eSQL |
|
Not applicable | Yes | All supported operating systems |
Go |
|
Not applicable | Yes | All supported operating systems |
Groovy |
|
Not applicable | Yes | All supported operating systems |
Infrastructure as Code (IaC) |
|
|
Yes | All supported operating systems |
Terraform:
|
|
Yes | All supported operating systems | |
Java™ and Java™ web content |
|
|
Yes | All supported operating systems |
Source code-only:
|
Not applicable | Yes | All supported operating systems | |
JavaScript |
|
|
Yes | All supported operating systems |
Kotlin |
|
Not applicable | Yes | All supported operating systems |
NodeJS |
|
Not applicable | Yes | All supported operating systems |
Objective-C/Objective-C++ |
|
Not applicable | Yes | All supported operating systems |
Perl |
|
Not applicable | No | All supported operating systems |
PHP |
|
Symfony | Yes | All supported operating systems |
PL/SQL |
|
Not applicable | No | All supported operating systems |
Python |
|
|
Yes | All supported operating systems |
ReactJS |
|
Not applicable | No | All supported operating systems |
ReactNative |
|
Not applicable | No | All supported operating systems |
RPG |
|
Not applicable | No | All supported operating systems |
Ruby |
|
Not applicable | Yes | All supported operating systems |
Rust |
|
Not applicable | No | All supported operating systems |
Scala |
|
Not applicable | Yes | All supported operating systems |
Swift |
|
Not applicable | Yes | All supported operating systems |
TSQL |
|
Not applicable | No | All supported operating systems |
TypeScript |
|
Not applicable | Yes | All supported operating systems |
Visual Basic |
|
Not applicable | Yes | All supported operating systems |
Vue.js |
|
Not applicable | No | All supported operating systems |
Xamarin |
|
Not applicable | Yes | All supported operating systems |
- Autofix is avalable for certain findings.
- PowerShell files (.ps1) are scanned only if secrets scanning is enabled, and are scanned only for secrets.
Note: Additional file extensions can be added in
SAClientUtil/config/file_extensions.xml.
You can scan all supported languages from the static analysis command line interface (CLI). In addition, you can scan .NET projects in Visual Studio you can scan .NET.