# Supported Languages and Frameworks

The following is the overview of supported languages across different OX Security categories:

* [Code security](#code-security-support)
* [Open Source Security & SBOM](#sca-and-sbom-support)
* [API BOM](#api-bom-support)
* [Infrastructure](#infrastructure-as-code-support)

## Code Security Support

OX supports static code analysis for the following programming languages.

| Language                    | Code Scanning | AI Fix Support |
| --------------------------- | ------------- | -------------- |
| **Python**                  | Yes           | Yes            |
| **JavaScript / TypeScript** | Yes           | Yes            |
| **Java**                    | Yes           | Yes            |
| **C#**                      | Yes           | Yes            |
| **PHP**                     | Yes           | No             |
| **Swift**                   | Yes           | No             |
| **Go**                      | Yes           | No             |
| **Rust**                    | Yes           | No             |
| **Dart**                    | Yes           | No             |
| **Ruby**                    | Yes           | No             |
| **C / C++**                 | Yes           | No             |
| **Scala**                   | Yes           | No             |
| **Kotlin**                  | Yes           | No             |
| **COBOL**                   | Yes           | No             |
| **Visual Basic .NET**       | Yes           | No             |
| **Clojure**                 | Yes           | No             |
| **R**                       | Yes           | No             |

## SCA & SBOM Support

OX supports Software Composition Analysis (SCA) and Software Bill of Materials (SBOM) generation for the following package manager files.

| Language                | <p>Package<br>Manager</p> | <p>License<br>Scanning</p> | <p>Vulnerability<br>Scan</p> | <p>Dependency<br>Graph</p> | <p>Reachability<br>Analysis</p> | <p>Pull Request<br>Fix</p> | <p>Private Dependency<br>Scanning</p> | <p>Dependency<br>Confusion</p> | <p>Deprecated<br>Dependencies</p> | <p>Malicious<br>Dependencies</p> |
| ----------------------- | ------------------------- | -------------------------- | ---------------------------- | -------------------------- | ------------------------------- | -------------------------- | ------------------------------------- | ------------------------------ | --------------------------------- | -------------------------------- |
| **JavaScript**          | `npm`                     | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | Yes                            | Yes                               | Yes                              |
|                         | `yarn`                    | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | Yes                            | Yes                               | Yes                              |
|                         | `pnpm`                    | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | Yes                               | Yes                              |
| **Python**              | `pip`                     | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | Yes                            | No                                | Yes                              |
|                         | `Poetry`                  | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | Yes                              |
|                         | `Pipenv`                  | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | Yes                              |
|                         | `uv`                      | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | Yes                              |
|                         | `PDM`                     | Yes                        | Yes                          | Yes                        | Yes                             |                            |                                       |                                |                                   |                                  |
| **Java**                | `Maven`                   | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | No                                | Yes                              |
|                         | `Gradle`                  | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | No                                | Yes                              |
| **Scala**               | `SBT`                     | Yes                        | Yes                          | Yes                        | No                              | No                         | No                                    | No                             | No                                | Yes                              |
|                         | `Maven`                   | Yes                        | Yes                          | Yes                        | No                              | Yes                        | Yes                                   | No                             | No                                | Yes                              |
|                         | `Gradle`                  | Yes                        | Yes                          | Yes                        | No                              | Yes                        | Yes                                   | No                             | No                                | Yes                              |
| **Kotlin**              | `Maven`                   | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | No                                | Yes                              |
|                         | `Gradle`                  | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | No                                | Yes                              |
| **Objective-C / Swift** | `CocoaPods`               | Yes                        | Yes                          | Yes                        | No                              | No                         | No                                    | No                             | No                                | No                               |
|                         | `SwiftPM`                 | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | No                               |
|                         | `XcodeGen`                | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | No                               |
| **Go**                  | `Go Modules`              | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | No                                    | No                             | No                                | Yes                              |
| **Dart**                | `Dart`                    | Yes                        | Yes                          | Yes                        | Yes                             |                            |                                       |                                |                                   |                                  |
| **Rust**                | `Rust`                    | Yes                        | Yes                          | Yes                        | Yes                             |                            |                                       |                                |                                   |                                  |
| **Ruby**                | `RubyGems`                | Yes                        | Yes                          | Yes                        | No                              | No                         | No                                    | No                             | No                                | Yes                              |
| **C#**                  | `NuGet`                   | Yes                        | Yes                          | Yes                        | Yes                             | Yes                        | Yes                                   | No                             | No                                | Yes                              |
| **Visual Basic .NET**   | `NuGet`                   | Yes                        | Yes                          | Yes                        | Yes                             |                            |                                       |                                |                                   |                                  |
| **PHP**                 | `Cpmposer`                | No                         | Yes                          | Yes                        | No                              | Yes                        | No                                    | No                             | No                                | Yes                              |

## API BOM Support

OX supports API analysis and detection for specific specifications and frameworks.

| Language                       | Web framework              | API detection | API/Issue correlation¹ |
| ------------------------------ | -------------------------- | ------------- | ---------------------- |
| **OpenAPI specification file** | —                          | Yes           | N/A                    |
| **Python**                     | Flask                      | Yes           | Yes                    |
|                                | FastAPI                    | Yes           | Yes                    |
|                                | Django                     | Yes           | Yes                    |
|                                | Connexion                  | Yes           | Yes                    |
|                                | Graphene                   | Yes           | Yes                    |
| **JavaScript & TypeScript**    | Express.js                 | Yes           | Yes                    |
|                                | NestJS                     | Yes           | Yes                    |
|                                | Koa                        | Yes           | Yes                    |
|                                | Apollo GraphQL             | Yes           | Yes                    |
| **Java**                       | SpringBoot                 | Yes           | Yes                    |
| **Go**                         | Gin                        | Yes           | Yes                    |
|                                | Echo                       | Yes           | Yes                    |
|                                | Chi                        | Yes           | Yes                    |
| **Scala**                      | Play                       | Yes           | Yes                    |
|                                | SpringBoot                 | Yes           | Yes                    |
| **Kotlin**                     | SpringBoot                 | Yes           | Yes                    |
|                                | Ktor                       | Yes           | Yes                    |
| **C#**                         | Microsoft ASP.NET Core MVC | Yes           | Yes                    |

## Infrastructure as Code Support

OX detects and supports IaC tools and deployment configurations for the following platforms.

| Tool           | Supported Deployments                       |
| -------------- | ------------------------------------------- |
| Terraform      | Alibaba, AWS, GCP, Azure, Yandex, OpenStack |
| Argo Workflows | Kubernetes                                  |
| CloudFormation | AWS                                         |
| Dockerfile     | Any                                         |
| Kubernetes     | Any                                         |


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.ox.security/supported-languages-and-frameworks.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.