Full Analysis
Section titled “Full Analysis”These languages get the complete pipeline: data element detection, data sink detection, and dataflow analysis connecting the two.
| Language | File Extensions |
|---|---|
| Python | .py |
| JavaScript | .js, .jsx |
| TypeScript | .ts, .tsx |
| Java | .java |
| C#/.NET | .cs |
| Go | .go, .mod |
Data Element Detection Only
Section titled “Data Element Detection Only”These languages are parsed and scanned for sensitive data elements, so occurrences appear in scan results and the datamap. They have no bundled data sink rules, so no dataflows or vulnerabilities are reported for them.
| Language | File Extensions |
|---|---|
| C++ | .cpp, .cc, .cxx, .c++ |
| Kotlin | .kt, .kts |
| PHP | .php, .php3, .php4, .php5, .php7 |
| Ruby | .rb |
| Rust | .rs |
| Swift | .swift |
Other Languages and Formats
Section titled “Other Languages and Formats”Schema and query languages, infrastructure-as-code, and configuration formats that the scanner also parses:
| Language / Format | File Extensions |
|---|---|
| SQL | .sql |
| GraphQL | .graphql, .graphqls, .gql |
| Prisma | .prisma |
| Terraform | .tf, .tfvars |
| JSON | .json |
| YAML | .yaml, .yml |
| TOML | .toml |