Scala
Review source and binary scanning support for Scala in JFrog Xray.
Introduction
JFrog Xray provides security and compliance analysis for Scala applications throughout the software development lifecycle.
Scala projects typically produce JVM-compatible artifacts and use Scala Build Tool (SBT) as the primary build tool.
Capabilities
The following capabilities are available for Scala.
| Capability | Source Code Scanning | Binary Scanning |
|---|---|---|
| Vulnerability Matching (CVEs) |  |  |
| License Detection | | |
| Malicious Package Detection | | |
| Operational Risk | | |
| Smart Remediation | | |
Source code scanning isn't currently supported for Scala. No package managers or manifest files are analyzed. For more information, see Scan Your Source Code.
For how scan methods differ, see Source Scanning Engines and Frogbot Versions.
Supported Files
The following files are supported for Scala source code scanning.
| Package Manager | Supported Files |
|---|---|
| SBT | Not supported |
Binary scanning analyzes built Scala artifacts stored in JFrog Artifactory repositories, extracting package metadata from the artifact format itself. For more information, see Scan Your Binaries.
Supported Files
The following files are supported for Scala binary scanning.
| Package Manager | Supported Files |
|---|---|
| SBT | jar, war, ear, and all archive types |
Related Topics
Updated 25 days ago