Static analysis language support
The types of files that can be scanned by ASoC when you perform static analysis.
Language support
Language | Supported file types | Frameworks and library support | Autofix* | Operating system support |
---|---|---|---|---|
.NET (C#, ASP.NET, VB.NET) | Default:
|
ASP .NET MVC (3, 4, 5, 6, 7, and 8) |
Yes | Windows |
Source code-only:
|
ASP .NET MVC (3, 4, 5, 6, 7, and 8) |
Yes | All supported operating systems | |
ABAP |
|
Not applicable | No | All supported operating systems |
Android |
|
Not applicable | Yes | All supported operating systems |
Angular |
|
Not applicable | Yes | All supported operating systems |
AngularJS |
|
Not applicable | No | All supported operating systems |
APEX |
|
Not applicable | Yes | All supported operating systems |
ASP Classic |
|
Not applicable | Yes | All supported operating systems |
C/C++ | Default:
Note: See "Microsoft Visual Studio
support"
for important additional information. |
Not applicable | Yes | Windows |
Source code-only:
|
Not applicable | Yes | All supported operating systems | |
Cascading style sheets |
|
Not applicable | No | All supported operating systems |
COBOL |
|
Not applicable | Yes | All supported operating systems |
ColdFusion |
|
Not applicable | Yes | All supported operating systems |
Dart |
|
Not applicable | Yes | All supported operating systems |
eSQL |
|
Not applicable | Yes | All supported operating systems |
Go |
|
Not applicable | Yes | All supported operating systems |
Groovy |
|
Not applicable | Yes | All supported operating systems |
Infrastructure as Code (IaC) |
|
|
Yes | All supported operating systems |
Terraform:
|
|
Yes | All supported operating systems | |
Java™ and Java™ web content |
|
|
Yes | All supported operating systems |
Source code-only:
|
Not applicable | Yes | All supported operating systems | |
JavaScript |
|
|
Yes | All supported operating systems |
Kotlin |
|
Not applicable | Yes | All supported operating systems |
NodeJS |
|
Not applicable | Yes | All supported operating systems |
Objective-C/Objective-C++ |
|
Not applicable | Yes | All supported operating systems |
Perl |
|
Not applicable | No | All supported operating systems |
PHP |
|
Symfony | Yes | All supported operating systems |
PL/SQL |
|
Not applicable | No | All supported operating systems |
Python |
|
|
Yes | All supported operating systems |
ReactJS |
|
Not applicable | No | All supported operating systems |
ReactNative |
|
Not applicable | No | All supported operating systems |
RPG |
|
Not applicable | No | All supported operating systems |
Ruby |
|
Not applicable | Yes | All supported operating systems |
Rust |
|
Not applicable | No | All supported operating systems |
Scala |
|
Not applicable | Yes | All supported operating systems |
Swift |
|
Not applicable | Yes | All supported operating systems |
TSQL |
|
Not applicable | No | All supported operating systems |
TypeScript |
|
Not applicable | Yes | All supported operating systems |
Visual Basic |
|
Not applicable | Yes | All supported operating systems |
Vue.js |
|
Not applicable | No | All supported operating systems |
Xamarin |
|
Not applicable | Yes | All supported operating systems |
*Autofix is avalable for certain findings.
Note: Additional file extensions can be added in
SAClientUtil/config/file_extensions.xml.
You can scan all supported languages from the static analysis command line interface (CLI). In addition, you can scan Java projects in Eclipse, and in Visual Studio you can scan .NET and C/C++.