Supported languages

At a glance: Supported languages for each security category.

Code Security

Language	Supported
C#	Yes
Go	Yes
Java	Yes
JavaScript	Yes
PHP	Yes
Python	Yes
Ruby	Yes
Scala	Yes
TypeScript	Yes

SCA & SBOM

Language	Package manager	Supported	Open PR	Automated monorepo breakdown
Ruby	Gemfile.lock	Yes	No	No
Python	Poetry.lock	Yes	Yes	Yes
	requirements.txt	Yes	Yes	Yes
	pyproject.toml	Yes	Yes	Yes
	pdm.lock	Yes	No	No
	Pipfile.lock	Yes	Yes	Yes
Node.js	package-lock.json	Yes	Yes	Yes
	yarn.lock (V1)	Yes	Yes	Yes
	yarn.lock (V2)	Yes	Yes	Yes
	pnpm-lock.yaml	Yes	No	No
C#	packages.lock.json	Yes	Yes	Yes
	packages.config	Yes	Yes	Yes
	.deps.json	Yes	Yes	Yes
	*.csproj	Yes	Yes	Yes
Java	pom.xml	Yes	Yes	No
	gradle.build	Yes	Yes	No
	BAZEL	Yes	No	No
Kotlin	gradle.build	Yes	Yes	No
	dependencies.kts	Yes	Yes	No
Go	go.mod	Yes	Yes	Yes
Rust	Cargo.lock	Yes	No	No
Scala	build.sbt	Yes	No	No
	Dependencies.scala	Yes	No	No
C/C++	conanfile.txt	Yes	Yes	Yes
	conanfile.py	Yes	Yes	Yes
	*.cmake	Yes	Yes	Yes
	conan.lock	Yes	Yes	Yes
	BAZEL	Yes	No	No
	spack.yaml	Yes	Yes	Yes

API BOM

Language	Web framework	API detection	API/issue correlation¹
OpenAPI specification file	–	Yes	No
Python	Flask	Yes	Yes
	FastAPI	Yes	Yes
	Django	Yes	Yes
JavaScript & TypeScript	Express.js	Yes	Yes
	NestJS	Yes	Yes
Java	SpringBoot	Yes	Yes
Go	Gin	Yes	No
Scala	Play	Yes	Yes
	SpringBoot	Yes	Yes
Kotlin	SpringBoot	Yes	Yes

¹ For these languages and frameworks, OX maps specific Code security and Open source security issues to the APIs that expose them. Learn more

Infrastructure as Code

Language	Supported deployments
Terraform	Alibaba AWS GCP Azure Yandex Openstack
Argo Workflows	Kubernetes
Cloud Formation	AWS
Dockerfile	Any
Kubernetes	Any