8.9.0 Supported Code Languages and Frameworks

Owned by David P (Deactivated)
Last updated: Aug 17, 2020 by Rui Pereira (Unlicensed)
3 min read

CxSAST

The following code languages can be scanned using v8.9.0:

EnvironmentPrimary LanguagesSecondary LanguagesFrameworksFile extensionsAdditional Information

  • Java
  • J2SE
  • J2EE
  • JSP
  • JavaScript
  • VBScript
  • PL\SQL
  • HTML5
  • Struts
  • Spring MVC
  • Spring Dependency Injection
  • iBatis*
  • GWT
  • Hibernate
  • OWASP ESAPI
  • JSTL FMT Taglib
  • ATG DSP Taglib
  • Java Server Faces (JSF)
  • JSP
  • Google Guice
  • PrimeFaces
  • Spring Boot
  • .javasln
  • .project
  • .java
  • .jsp
  • .jspf
  • .tag
  • .tld
  • .hbs
  • .properties
Java can be configured as a unified language with Scala.

  • C#
  • VB.NET

  • ASP.NET

  • JavaScript

  • VBScript

  • PL\SQL

  • HTML5

  • Enterprise Libraries
  • Telerik
  • ComponentArt
  • Infragistics
  • iBatis*
  • Hibernate.Net [*]
  • Entity framework
  • ASP.Net MVC framework
  • ASP.Net CORE Razor
  • ASP.NET Core
  • .sln
  • .csproj
  • .cs
  • .cshtml
  • .xaml
  • .vb
  • .config

ASP
  • JavaScript [**]
  • VBScript
  • PL\SQL
  • HTML5
ASP.Net MVC framework
  • .asp

VB6

  • .bas
  • .vbp
  • .frm
  • .cls
  • .dsr
  • .ctl
  • .vb


C/C++
  • MISRA
  • Informix ESQL/C
  • MySQL
  • .cpp
  • .c++
  • .cxx
  • .hpp
  • .hh
  • .h++
  • .hxx
  • .c
  • .cc
  • .h


PHP

JavaScript

  • Zend
  • Kohana
  • CakePHP
  • Symfony
  • Smarty
  • bWapp
  • OWASP ESAPI
  • .php
  • .php3
  • .php4
  • .php5
  • .php5.6
  • .phtm
  • .phtml
  • .tpl
  • .ctp
  • .twig


Apex
  • Lightning
  • VisualForce
  • .apex
  • .apexp
  • .page
  • .component
  • .cls
  • .trigger
  • .tgr
  • .object
  • .report
  • .workflow
This is for Salesforce APEX only.

Ruby
Ruby on Rails
  • .rb
  • .rhtml
  • .rxml
  • .rjs
  • .erb

JavaScript
ES5
ES6


  • JQuery
  • Node.js
  • Ajax
  • Knockout
  • AngularJS
  • ExpressJS
  • Pug (Jade)
  • Backbone
  • Handlebars
  • Cordova / PhoneGap
  • Hapi.JS
  • XS (SAP)
  • Kony Visualizer
  • ReactJS* 
  • SAPUI5 
  • .js
  • .htm
  • .html
  • .json

Related imageTypescript**
Angular
  • .ts
  • .html




  • .vbs

Perl

  • .pl
  • .pm
  • .plx
  • .psgi

Android (Java)
  • Volley (Android)
  • .java
  • .kt

Objective C
Swift 

  • .m
  • .h
  • .swift
  • .xib




  • .html
  • .htm





  • .pls
  • .sql  
  • .pkh
  • .pks
  • .pkb
  • .pck

Python
  • JavaScript
  • VB script
  • PL\SQL
Django
  • .py

Groovy
  • JavaScript
  • VB script
  • PL\SQL


  • .groovy
  • .gsh
  • .gvy
  • .gy

Scala
Akka
  • .scala
  • .sc
  • .conf
Scala can be configured as a unified language with Java.

GO Language
Protobuf
  • .go

Image result for kotlin logoKotlin for Android

  • .kt
  • .kts





Other extensions:

  • .aspx
  • .ascx
  • .config
  • .xml
  • .cgi
  • .inc

[*] Requires minor adjustments

[**]  Client side

Open Source Analysis (CxOSA)

Checkmarx analyzes the open sources using the following methods:

  • Analyzes the open source third parties themselves, supported in the languages list below.
  • Analyzes the projects' manifest files by resolving their dependencies against customer-defined repositories

The following open source code analysis languages and package managers can be analyzed using v8.9.0:

Environment
File Extensions

Environment
File Extensions

Java

Jar files


.Net

DLL files

JavaScript

.js


TypeScript



Image result for React logo

React



NodeJS


Related image

Angular




WCF


WPF



F#


C#

DLL files


Kotlin


Python



Related image

Groovy


PHP




Scala


Package ManagersFile Extensions
Package ManagersFile Extensions

Gradle




Maven


NPM



Image result for yarn logo

Yarn


NuGet

nupkg files

Pip


Image result for composer package manager

Composer



Image result for sbt package manager

SBT


Image result for bower package manager

Bower





Codebashing - Application Security Training Platform

For supported code for Codebashing, see Codebashing.



Read More