Supported Languages

Full Analysis

These languages get the complete pipeline: data element detection, data sink detection, and dataflow analysis connecting the two, plus the gRPC and Thrift API catalog.

Language	File Extensions
Python	`.py`
JavaScript	`.js`, `.jsx`
TypeScript	`.ts`, `.tsx`
Java	`.java`
C#/.NET	`.cs`
Go	`.go`, `.mod`

Data Element Detection Only

These languages are parsed and scanned for sensitive data elements, so occurrences appear in scan results and the datamap. They have no bundled data sink rules, so no dataflows or vulnerabilities are reported for them.

Language	File Extensions
C++	`.cpp`, `.cc`, `.cxx`, `.c++`
Kotlin	`.kt`, `.kts`
PHP	`.php`, `.php3`, `.php4`, `.php5`, `.php7`
Ruby	`.rb`
Rust	`.rs`
Swift	`.swift`

Other Languages and Formats

Schema and query languages, infrastructure-as-code, and configuration formats that the scanner also parses:

Language / Format	File Extensions
Protocol Buffers	`.proto`
Thrift	`.thrift`
SQL	`.sql`
GraphQL	`.graphql`, `.graphqls`, `.gql`
Prisma	`.prisma`
Terraform	`.tf`, `.tfvars`
JSON	`.json`
YAML	`.yaml`, `.yml`
TOML	`.toml`