Try JFrog
Guides
Contact SupportTry JFrog
  1. advanced-security

Supported Technologies

SAST, CVEs Contextual Analysis, and Secrets Detection

Programming LanguageSource Code SAST (1st party)Source Code CVEs Contextual AnalysisBinary CVEs Contextual AnalysisSecrets Detection
Go✅✅Inside Docker✅
Java✅✅Limited (Maven & Gradle — Uber/Fat JARs only)✅
KotlinInside Docker✅
JavaScript✅✅Inside Docker✅
TypeScript✅✅Inside Docker✅
C# .NET✅✅Inside Docker✅
Python✅✅Inside Docker✅
C/C++✅Inside Docker✅
Rust✅Inside Docker✅
DockerConditional (depends on contained language)
Terraform (IaC)✅✅

Misconfigurations

  • Infrastructure as code (IaC)
    1. Terraform modules - Supported in JFrog IDE Plugins and JFrog CLI
    2. Terraform plan files - Supported in JFrog CLI
    3. Terraform state files - Supported in JFrog Artifactory (Terraform BE Repository)
  • Applications and Services misconfigurations:
    1. Supported in JFrog Artifactory for Container images