Libraries, frameworks, and technologies
OpenText SAST supports the libraries, frameworks, and technologies listed in this section with dedicated Fortify Secure Coding Rulepacks and vulnerability coverage beyond core supported languages.
Java
|
Adobe Flex Blaze DS Ajanta Amazon Web Services (AWS) SDK Android Android Jetpack Apache Axiom Apache Axis Apache Beam Apache Beehive NetUI Apache Catalina Apache Cocoon Apache Commons Apache ECS Apache Hadoop Apache HttpComponents Apache Jasper Apache Log4j Apache Lucene Apache MyFaces Apache OGNL Apache ORO Apache POI Apache SLF4J |
Apache Slide Apache Spring Security (Acegi) Apache Struts Apache Tapestry Apache Tomcat Apache Torque Apache Util Apache Velocity Apache Wicket Apache Xalan Apache Xerces ATG Dynamo Azure SDK Castor Display Tag Dom4j GDS AntiXSS Google Cloud Google Dataflow Google Guava Google Web Toolkit gRPC Gson Hibernate |
iBatis IBM MQ IBM WebSphere Jackson Jakarta Activation Jakarta EE (Java EE) Jasypt Java Annotations Java Excel API JavaMail JAX-RS JAXB Jaxen JBoss JDesktop JDOM Jetty JGroups json-simple JTidy Servlet JXTA JYaml Liferay Portal MongoDB |
Mozilla Rhino MyBatis MyBatis-Plus Netscape LDAP API OkHttp OpenCSV Oracle Application Development Framework (ADF) Oracle BC4J Oracle JDBC Oracle OA Framework Oracle tcDataSet Oracle XML Developer Kit (XDK) OWASP Enterprise Security API (ESAPI) OWASP HTML Sanitizer OWASP Java Encoder Plexus Archiver Realm Restlet SAP Web Dynpro Saxon SnakeYAML Spring |
Spring AI Spring MVC Spring Boot Spring Data Commons Spring Data JPA Spring Data MongoDB Spring Data Redis Spring for GraphQL Spring HATEOAS Spring JMS Spring JMX Spring Messaging Spring Security Spring Webflow Spring WebSockets Spring WS Stripes Sun JavaServer Faces (JSF) Tungsten Weblogic WebSocket XStream YamlBeans ZeroTurnaround ZIP Zip4J |
Kotlin
Kotlin support includes all libraries covered for Java and the following Kotlin libraries.
|
Kotlin standard library |
Android KTX | OkHttp |
Scala
Scala support includes all libraries covered for Java and the following Scala libraries.
|
Akka HTTP Scala Play |
Scala Slick |
.NET
|
.NET Framework, .NET Core, and .NET Standard .NET WebSockets ADO.NET Entity Framework ADODB Amazon Web Services (AWS) SDK ASP.NET MVC ASP.NET SignalR ASP.NET Web API |
Azure SDK Castle ActiveRecord CsvHelper Dapper DB2 .NET Provider DotNetZip Entity Framework Entity Framework Core fastJSON gRPC |
Hot Chocolate IBM Informix .NET Provider Json.NET Log4Net Microsoft ApplicationBlocks Microsoft My Framework Microsoft Practices Enterprise Library Microsoft Web Protection Library |
MongoDB MySQL Connector/NET NHibernate NLog Npgsql Open XML SDK Oracle Data Provider for .NET OWASP AntiSamy Saxon |
SharePoint Services SharpCompress SharpZipLib SQLite .NET Provider SubSonic Sybase ASE ADO.NET Data Provider Xamarin Xamarin Forms YamlDotNet |
C
|
ActiveDirectory LDAP Apple System Logging (ASL) |
CURL Library GLib JNI |
MySQL Netscape LDAP ODBC |
OpenSSL POSIX Threads SQLite |
Sun RPC WinAPI |
C++
|
Boost Smart Pointers MFC |
STL WMI |
SQL
Oracle ModPLSQLPHP
|
ADOdb Advanced PHP Debugging CakePHP PHP Debug |
PHP DOM PHP Extension PHP Hash PHP JSON PHP Mcrypt |
PHP Mhash PHP Mysql PHP OCI8 PHP OpenSSL PHP PostgreSQL |
PHP Reflection PHP Simdjson PHP SimpleXML PHP Smarty PHP Sodium |
PHP WordPress PHP XML PHP XMLReader PHP Zend PHP Zip |
JavaScript/TypeScript/HTML5
|
Angular Anthropic Claude Apollo Server Bluebird child-process-promise Express |
Gemini API GraphQL.js Handlebars Helmet iOS JavaScript Bridge jQuery |
JS-YAML LangChain Mustache Node.js Azure Storage Node.js Core OpenAI |
React React Native React Native Async Storage React Router SAPUI5/OpenUI5 |
Sequelize Underscore.js Vertex AI Vue |
Python
|
aiopg Amazon Web Services (AWS) Lambda Amazon SageMaker Anthropic Claude Azure Functions boto3 Django Flask |
Google Cloud Graphene gRPC httplib2 Jinja2 LangChain libxml2 lxml |
memcache-client _mysql MySQL Connector/Python MySQLdb OpenAI oslo.config pandas Paramiko |
psycopg2 pycrypto PyCryptodome pycurl pylibmc PyMongo PySpark PyYAML |
requests simplejson six TensorFlow Twisted Mail urllib3 Vertex AI WebKit |
Ruby
|
MySQL pg |
Rack SQLite |
Thor |
Objective-C
|
AFNetworking Apple AddressBook Apple AppKit Apple CFNetwork Apple ClockKit Apple CommonCrypto Apple CoreData |
Apple CoreFoundation Apple CoreLocation Apple CoreServices Apple CoreTelephony Apple Foundation Apple HealthKit |
Apple LocalAuthentication Apple MessageUI Apple Security Apple Social Apple UIKit |
Apple WatchConnectivity Apple WatchKit Apple WebKit Hpple Objective-Zip Realm |
SBJson SFHFKeychainUtils SSZipArchive ZipArchive ZipUtilities ZipZap |
Swift
|
Alamofire Apple AddressBook Apple CFNetwork Apple ClockKit Apple CommonCrypto Apple CoreData |
Apple CoreFoundation Apple CoreLocation Apple Foundation Apple HealthKit Apple LocalAuthentication |
Apple MessageUI Apple Security Apple Social Apple SwiftUI Apple UIKit Apple WatchConnectivity |
Apple WatchKit Apple WebKit Hpple Realm SQLite SSZipArchive |
Zip ZipArchive ZIPFoundation ZipUtilities ZipZap |
COBOL
|
Auditor CICS DLI |
Micro Focus COBOL Run-time System MQ |
POSIX SQL |
Go
|
GORM logrus gRPC |
Dart
|
Flutter |
Configuration
|
.NET Configuration Adobe Flex (ActionScript) Configuration Ajax Frameworks Amazon Web Service (AWS) Ansible AWS CloudFormation Azure Resource Manager (ARM) Build Management |
Docker Configuration (Dockerfiles) GitHub Actions Google Android Configuration iOS Property List J2EE Configuration Java Apache Axis Java Apache Log4j Configuration Java Apache Spring Security (Acegi) |
Java Apache Struts Java Apache Tomcat Configuration Java Blaze DS Java Hibernate Configuration Java iBatis Configuration Java IBM WebSphere Java MyBatis Configuration |
Java OWASP AntiSamy Java Spring and Spring MVC Java Spring Boot Java Spring Mail Java Spring Security Java Spring WebSockets Java Weblogic Kubernetes Mule |
OpenAPI Specification Oracle Application Development Framework (ADF) PHP Configuration PHP WordPress Silverlight Configuration Terraform (AWS, Azure, GCP) WS-SecurityPolicy XML Schema |
Infrastructure as Code: Amazon Web Services
|
API Gateway App Mesh AppSync Athena Aurora Backup Batch Certificate Manager CloudFormation CloudFront CloudTrail CloudWatch CodeBuild CodeCommit CodeStar Cognito |
Config ConfigurationRecorder Database Migration Service (DMS) DataSync DocumentDB DynamoDB EC2 Elastic Block Store (EBS) Elastic Container Registry (ECR) Elastic Container Service (ECS) Elastic File System (EFS) Elastic Kubernetes Service (EKS) |
Elastic Load Balancing (ELB) ElastiCache EMR FinSpace FSx Global Accelerator Glue GuardDuty HealthLake Identity and Access Management (IAM) Image Builder Key Management Service (KMS) Kinesis Kinesis Video Streams |
Lightsail Location Service Lookout for Equipment Mainframe Modernization Managed Streaming for Apache Kafka (MSK) MemoryDB for Redis MQ Neptune OpenSearch Service Quantum Ledger Database (QLDB) RDS Redshift Rekognition Route 53 |
SageMaker Secrets Manager Simple Notification Service (SNS) Simple Queue Service (SQS) Simple Storage Service (S3) Step Functions Systems Manager Timestream Transfer Family VPC VPC Lattice WorkSpaces Family |
Infrastructure as Code: Microsoft Azure
|
App Service Application Gateway Automation Microsoft Entra Domain Services Azure Health Data Services Azure Kubernetes Service (AKS) Batch Blob Storage |
Cache for Redis Cognitive Search Container Registry Cosmos DB Database for MariaDB Database for MySQL Database for PostgreSQL Databricks Data Box |
Data Factory Defender for Cloud Event Hubs Front Door Grafana Hostname Binding IoT Central IoT Hub Key Vault Logic Apps |
Machine Learning MariaDB Media Services Monitor NetApp Files Private Cloud Policy Portal SignalR Service |
Site Recovery Spring Apps SQL Storage Accounts Virtual Machine Scale Sets Virtual Machines Web PubSub |
Infrastructure as Code: Google Cloud
|
Access Context Manager AlloyDB Apigee API Management App Engine Artifact Registry |
Backup for GKE BigQuery Cloud Bigtable Cloud DNS Cloud Functions Cloud Key Management |
Cloud Load Balancing Cloud Logging Cloud Spanner Cloud SQL Cloud Storage Compute Engine |
Filestore Google Cloud Platform Google Kubernetes Engine (GKE) Identity and Access Management (IAM) |
Media CDN Memorystore Pub/Sub Secret Manager Workflows |
Secrets
|
.netrc 1Password Actually Good Encryption (AGE) Adafruit Adobe Airtable Algolia Alibaba (Aliyun) Amazon (AWS, MWS) Apple (macOS) Apache HTTP Asana Atlassian Authress Basic access authentication bcrypt Beamer Bearer token Bitbucket Bittrex Brevo (Sendinblue) Clojars Code Climate Codecov Coinbase Confluent Contentful Databricks Datadog |
Defined DES DigitalOcean Docker Doppler Droneci Dropbox Duffel Dynatrace EasyPost Encryption key Etsy Fastly Finicity Finnhub Flickr Flutterwave Frame.io Freshbooks Git GitHub GitLab Gitter GNOME GNU (Bash) GoCardless Google (API, Google Cloud, OAuth) Grafana |
HashiCorp (Terraform, Vault) Heroku HexChat HubSpot Intercom Java JFrog (Artifactory) JSON Web Token KDE Wallet (Kwallet) KeePass Kraken Kucoin LaunchDarkly Linear Lob Mailchimp Mailgun Mapbox Mattermost MD5 MessageBird Microsoft (Azure App Storage, Cosmos DB, Functions and Bitlocker, PowerShell, RDP, VBScript) Microsoft (Outlook) Mutt MySQL Netlify |
New Relic npm NuGet Okta OpenVPN Password in comment Password in connection string Password in PowerShell script Password in URI Password Safe PayPal (Braintree) Pidgin Plaid Planetscale PostgreSQL Postman Prefect Pulumi PuTTY PyPI RapidAPI Readme RSA Security Ruby (Ruby on Rails, RubyGems) Sauce Labs Secret key Secure Shell Protocol (SSH) |
Sendbird SendGrid Sentry SHA1 SHA256 SHA512 Shippo Shopify Sidekiq Slack SonarQube Square Squarespace StackHawk Stripe Sumologic Telegram Travis Trello Twilio Twitch Typeform Yandex Zendesk |