Supported Languages
The following tables present the languages and files SwCA supports for Static Analysis and Runtime Analysis on Linux and Windows assets.
Supported Languages - Linux
| Language | Package Managers/Ecosystem | Files Supported for Static Data Collection | Files Supported for Runtime Data Collection |
|---|---|---|---|
| Rust | Cargo | Cargo.lock | Rust Binary |
| Python | Pipenv | Pipfile.lock | .egg-info/PKG-INFO |
| Poetry | poetry.lock | .dist-info/METADATA | |
| Pip | requirements.txt | ||
| Go | Go | go.mod + go.sum | Go Binary |
| Java | Apache Maven | pom.xml | jar/ear/war/par |
| Gradle | gradle.lockfile | pom.properties (only from the following artifacts: jar/ear/war/par) | |
| MANIFEST.MF (only from the following artifacts: jar/ear/war/par) | |||
| DotNet | Nuget | packages.lock.json | Microsoft.WindowsDesktop.App.runtimeconfig.json |
| packages.config | Microsoft.NETCore.App.runtimeconfig.json | ||
| Packages.props | Microsoft.AspNetCore.App.runtimeconfig.json | ||
| .deps.json | |||
| NodeJs | npm | package-lock.json | NA |
| yarn | yarn.lock | ||
| pnpm | pnpm-log.yaml | ||
| C++ | Conan | conan.lock | NA |
| Ruby | Bundler | Gemfile.lock | NA |
| PHP | Composer | composer.lock | NA |
When you select both the Runtime and Static checkbox, the data collection for the language files for both runtime and static analysis is merged and shared with platform for analysis.
For example, the jar/war/ear file in Java is supported for both static and runtime analysis. When you select both the Runtime and Static checkbox, the data through both the runtime and static data collection is merged and shared with the platform for analysis.
The Runtime Analysis support is available for Linux Cloud Agent 7.3.0 and later versions.
For the language packages with NA for Runtime analysis, Static Analysis support is not available.
Supported Languages - Windows
| Language | Files supported for Static Data Collection | Files supported for Runtime Data Collection |
|---|---|---|
| DotNet | .packages.config | deps.json |
| .nuspec | runtimeconfing.json | |
| Java | pom.xml | pom.propterties |
| manifest.mf | ||
| jar | ||
| war | ||
| gradle.lockfile | ear | |
| Python | pipfile.lock | EGG/WHEEL METADATA Files |
| poetry.lock | ||
| requirements.txt | ||
| Rust | Cargo.lock | NA |
| Ruby | Gemfile.lock (bundler) | NA |
| gemspec | ||
| C++ | conon.lock | NA |
| PHP | composer.json | NA |
| composer.lock | ||
| Node.js | package.json | NA |
| .package-lock.json | ||
| npm-shrinkwrap.json | ||
| Go | go.sum | NA |
| go.mod |
For the following language packages, the Cloud Agent for Windows will only support Static Analysis until the Runtime analysis support is available:
- Rust
- Ruby
- C++
- PHP
- Node.js
- Go