Synopsys uses a single scan engine to power all our static analysis solutions, including Coverity® and Polaris fAST Static. The engine supports a large collection of programming languages, frameworks, libraries, and integrations to enable fast and accurate scans for any application.
This page lists many of the most popular technologies supported by our static analysis engine. For the complete list of details, please see our documentation.
Languages
• Apex
• C/C++
• C#
• CUDA
• Fortran
• Go
• Java
• JavaScript
• JSP
• Kotlin
• Objective-C/C++
• PHP
• Python
• Ruby
• Scala
• Swift
• TypeScript
• VB.NET
Development platforms
• .NET Core
• Android
• ASP.NET
• iOS
Infrastructure-as-code
Platforms
• Terraform
• AWS CloudFormation
• Kubernetes
• Helm
• ELK
File formats
• JSON
• YAML
• HCL (Terraform)
• HTML
• XML
• plist
• TOML
• Properties
• Vue template
• JSX
• TSX
Cloud deployments
Coverity Connect can be run in containers in AWS, Azure, and GCP public clouds. And it offers support for cloud-native technologies Docker and Kubernetes.
Frameworks
Synopsys supports over 200 frameworks for C#, Java, JavaScript, Go, and others. Some of those frameworks are listed here. For the full list of supported frameworks, please see our documentation.
C#
• .NET Framework
• ASP.NET ASMX Web Services
• ASP.NET Core
• ASP.NET MVC
• ASP.NET Web API
• ASP.NET Web Forms
• Amazon AWSSDK
• Azure SDK
• Elasticsearch.NET
• Google Cloud
• GraphQL
• Identity Server
• MassTransit
• MongoDB
• MySQL
• Nhibernate
• Razor templates
• SendGrid
• WCF Services
Java
• Android SDK
• Apache Shiro
• Axis
• Dropwizard
• DWR
• Enterprise Java Beans (EJBs)
• Google Web Toolkit (GWT)
• Hibernate
• iBatis
• Java Frameworks
• Java Persistence API (JPA)
• Javax.websocket
• JAX RS
• JAX WS
• JEE
• JSF/Facelets
• JSP and JSP Standard Tag Library (JSTL)
• Play
• ReactiveX (RxJava, Reactor)
• Restlet
• Spring Boot
• Spring Framework
• Struts
• Terasoluna
• Tiles
• Vert.x
• WS XML-RPC
JavaScript/TypeScript
Client-side
• Angular
• Angular JS
• Apache Cordova
• Backbone
• Bootstrap
• Ember
• HTML5 DOM APIs/Ajax
• jQuery
• Mithril
• React / Preact
• React Native
• Socket.IO
• Swig
• Vue.js
Server-side
• Angular server-side rendering
• Express
• Fastify
• Hapi
• Koa
• Mean.io
• Node.js
• Passport
• React server-side rendering (Next.js)
• Restify
• SAP XS Classic and Advanced
• Socket.IO
• Vue server-side rendering
Template engines
• Consolidate
• doT.js
• EJS
• Handlebars
• Hogan
• Jade
• koa-views
• Lodash (templating)
• Marko
• Mustache
• Nunjucks
• Pug
• Swig
• Twig
• Underscore (templating)
• Vision
Major libraries
• aws-sdk
• Axios
• Azure-storage
• Google Cloud APIs
• graphql
• Mongoose / MongoDB
• Mssql
• mysql
• Request
• Sequelize
• Sqlx
• Swashbuckle
• Underscore / Lodash
Go
• beego
• Buffalo
• Echo
• Fiber
• fasthttp
• Gin
• go-pg
• go-redis
• go-restful
• Gorilla WebSocket
• HttpRouter
• iris
• MongoDB Go Driver
• mux
• sqlx
Python
• aiohttp
• Django
• Flask
• httplib2
• marshmallow
• MySQLdb
• oauthlib
• PyMySQL
• Sqlalchemy
Kotlin
• Android SDK
• Android KTX
PHP
• Symfony
Ruby
• Ruby on Rails
Operating systems
• AIX
• FreeBSD
• Linux
• Linux ARM64
• MacOS ARM
• MacOS X
• Solaris
• Windows
Native SDLC integrations
Source code management
• AccuRev
• Apache Subversion (SVN)
• CVS
• Git
• Mercurial (Hg)
• Perforce Helix
• Team Foundation Server SCM
CI / build servers
• Azure DevOps Server
• Bazel
• Jenkins
Issue tracking
• Jira
• Bugzilla
Legacy IDEs
• IBM Rational Team Concert
• QNX Momentics
• Wind River Workbench
IDEs supported by Code Sight
• Visual Studio for VB.NET, C#, C/C++, JavaScript, PHP, Python, Ruby, TypeScript
• Visual Studio Code for C# (.NET Core), C/C++, Java, JavaScript, PHP, Python, Ruby, TypeScript
• Visual Studio Code (Rapid Scan) for Java, JavaScript, and TypeScript
• Eclipse for Java, JavaScript, C/C++, PHP, Python, Ruby, TypeScript
• IntelliJ for Java, JavaScript, PHP, Python, Ruby, TypeScript
• WebStorm for JavaScript, TypeScript
• PyCharm for Python
• PhpStorm for PHP
• RubyMine for Ruby
* For the full list of supported IDEs with version numbers, see Code Sight documentation.
Compilers
Synopsys supports a wide range of popular compilers, including those shown below. For the full list of supported compilers, please see our documentation.
• Analog Devices Blackfin
• Analog Devices SHARC
• Analog Devices TigerSHARC
• ARM C/C++
• Borland C++
• CEVA BXx
• CEVA XC16
• CEVA-X2
• CEVA-XC4500
• Clang
• Cosmic C
• Freescale CodeWarrior
• GNU GCC/G++
• GHS PowerPC on Windows
• Green Hills C/C++/EC++
• HI-TECH PICC
• IAR C/C++
• IBM AIX
• IBM XLC
• Intel C++ for Windows
• JDK for Mac OS X
• Keil compilers
• Marvell MSA
• MPLAB XC8
• Nvidia CUDA Compiler (NVCC)
• OpenJDK
• QNX C/C++
• Renesas C/C++
• SNC C/C++
• SNC GNU C/C++
• SONY PS4 SDK
• STMicroelectronics GNU C/C++
• STMicroelectronics ST Micro C/C++
• Sun (Oracle) CC
• Sun/Oracle JDK
• Synopsys MetaWare C and C++
• Tasking for ARM Cortex and TriCore
• TI Code Composer
• Visual Studio
• Wind River C/C++
Critical checks
• API usage errors
• Best practice coding errors
• Buffer overflows
• Build system issues
• Class hierarchy inconsistencies
• Code maintainability issues
• Concurrent data access violations
• Control flow issues
• Cross-site request forgery (CSRF)
• Cross-site scripting (XSS)
• Deadlocks
• Error handling issues
• Hard-coded credentials
• Incorrect expression
• Insecure data handling
• Integer handling issues
• Integer overflows
• Memory—corruptions
• Memory—illegal accesses
• Null pointer dereferences
• Path manipulation
• Performance inefficiencies
• Program hangs
• Race conditions
• Resource leaks
• Rule violations
• Security best practices violations
• Security misconfigurations
• SQL injection
• Uninitialized members
This page applies to Coverity 2023.6.0 and later releases.