Static analysis language support

This topic describes the supported types of files that can be scanned by ASoC when you perform static analysis.

Language support

Language Supported file types Frameworks and library support Operating system support
ABAP
  • .abap
Not applicable All supported operating systems
Android
  • .java
  • .kt
Not applicable All supported operating systems
Angular
  • .ts
  • .tsx
Not applicable All supported operating systems
AngularJS
  • .js
Not applicable All supported operating systems
APEX
  • .cls
  • .page
Not applicable All supported operating systems
ASP Classic
  • .asp
  • .asa
  • .inc
Not applicable All supported operating systems
Java™ and Java web content
  • .class
  • .jar
  • .war
  • .ear
  • Enterprise JavaBeans™ (EJB) 2
  • JavaServer Faces (JSF) 2
  • Jax - RS (1.0 and 1.1)
  • Jax - WS (2.2)
  • Spring MVC (2.5, 3, and 4)
  • SpringBoot (using the Spring v3 annotations)
All supported operating systems
.NET (C#, ASP.NET, VB.NET) Default:
  • Visual Studio solutions
  • .NET assemblies
  • .NET Core

ASP .NET MVC (3, 4, and 5)

Windows
Source code-only:
  • .aspx
  • .ascx
  • .cs
  • .vb
  • .vbs

ASP .NET MVC (3, 4, and 5)

All supported operating systems
C/C++ Default:
  • Visual Studio solutions
Note: See "Microsoft Visual Studio support" for important additional information.
Not applicable Windows
Source code-only:
  • .c
  • .cpp
Not applicable All supported operating systems
COBOL
  • .cob
  • .cbl
  • .ws
  • .sqb
Not applicable All supported operating systems
ColdFusion
  • .cfc
  • .cfm
Not applicable All supported operating systems
Go
  • .go
Not applicable All supported operating systems
Groovy
  • .groovy
  • .gsp
Not applicable All supported operating systems
Infrastructure as Code (IaC)
  • .bat
  • .md
  • .sh
  • .yaml
  • .yml
  • Dockerfile
  • Docker
  • Kubernetes
All supported operating systems
JavaScript
  • .asp
  • .aspx
  • .asa
  • .htm
  • .html
  • .xhtml
  • .inc
  • .js
  • .jsf
  • .jsp
  • .jspx
  • .jspi
  • .php*
  • .svg
  • .ts
  • .tsx
  • .wlapp
  • JQuery
  • MooTools
All supported operating systems
Kotlin
  • .kt
Not applicable All supported operating systems
Objective-C/Objective-C++
  • .m
  • .mm
Not applicable All supported operating systems
NodeJS
  • .js
Not applicable All supported operating systems
Perl
  • .pl
  • .pm
  • .cgi
  • .t
Not applicable All supported operating systems
PHP
  • .php
  • .php*
  • .phtm
  • .phps
  • .htaccess
  • .html
  • .inc
  • .module
  • .xml
  • .yaml
  • .yml
Symfony All supported operating systems
PL/SQL
  • .sql
  • .arc
  • .dbf
  • .lst
  • .pck
  • .pkb
  • .pks
  • .plb
  • .pls
  • .rdo
  • .sf
  • .sp
  • .spb
  • .sps
  • .tst
Not applicable All supported operating systems
Python
  • .py
  • .pyt
  • .pyw
  • Django
  • Flask
All supported operating systems
ReactJS
  • .js
Not applicable All supported operating systems
ReactNative
  • .js
Not applicable All supported operating systems
Ruby
  • .rb
  • .gem
Not applicable All supported operating systems
Scala
  • .scala
  • .sc
Not applicable All supported operating systems
Swift
  • .swift
  • .plist
Not applicable All supported operating systems
TSQL
  • .sql
  • .arc
  • .dbf
  • .lst
  • .rdo
Not applicable All supported operating systems
TypeScript
  • .ts
  • .tsx
Not applicable All supported operating systems
Visual Basic
  • .bas
  • .cls
  • .frm
Not applicable All supported operating systems
Vue.js
  • .vue
Not applicable All supported operating systems
Xamarin
  • .cs
Not applicable All supported operating systems
Note: Additional file extensions can be added in SAClientUtil/config/file_extensions.xml.

You can scan all supported languages from the static analysis command line interface (CLI). In addition, you can scan Java projects in Eclipse and IntelliJ IDEA - and in Visual Studio, you can scan .NET. and C/C++.