Supported Technologies
See which languages JFrog Advanced Security supports for SAST, CVEs, and secrets.
SAST, CVEs Contextual Analysis, and Secrets Detection
JFrog Advanced Security supports the following languages for SAST, CVEs, and secrets detection.
| Programming Language | Source Code SAST (First-Party) | Source Code CVEs Contextual Analysis | Binary CVEs Contextual Analysis | Secrets Detection |
|---|---|---|---|---|
| C/C++ | ✅ | Inside Docker | ✅ | |
| C# .NET | ✅ | ✅ | Inside Docker | ✅ |
| Docker | Conditional (depends on contained language) | |||
| Go | ✅ | ✅ | Inside Docker | ✅ |
| Helm and Helm OCI | ✅ (images the chart deploys) | ✅ (images the chart deploys) | ||
| Java | ✅ | ✅ | Maven and Gradle: Uber/Fat JARs and thin JARs in builds | ✅ |
| JavaScript | ✅ | ✅ | Inside Docker | ✅ |
| Kotlin | ✅ | Inside Docker | ✅ | |
| Python | ✅ | ✅ | Inside Docker | ✅ |
| Rust | ✅ | Inside Docker | ✅ | |
| Terraform (IaC) | ✅ | ✅ | ||
| TypeScript | ✅ | ✅ | Inside Docker | ✅ |
For more information about binary contextual analysis inside Docker, see Package Applications in Docker for Contextual Analysis.
For Helm and Helm OCI charts, JFrog Xray scans the container images the chart deploys and shows contextual analysis and secrets results on the chart. For more information, see Helm and Helm OCI.
Misconfigurations
- Infrastructure as code (IaC)
- Terraform modules - Supported in JFrog IDE Plugins and JFrog CLI
- Terraform plan files - Supported in JFrog CLI
- Terraform state files - Supported in JFrog Artifactory (Terraform BE Repository)
- Applications and Services misconfigurations:
- Supported in JFrog Artifactory for Container images
- Supported for Helm and Helm OCI charts through the container images the chart deploys. Xray doesn't check the chart's own files for misconfigurations.
Related Topics
Updated 8 days ago
Did this page help you?