Technology support

This page provides an overview of all technologies that can be analyzed by Sigrid for its various capabilities.

List of supported technologies

• The first column refers to how the technology is named in Sigrid’s scope configuration file.
• The column “supported Sigrid capabilities” does not list Open Source Health. The reason is that Open Source Health is based on open source ecosystems, not specific technologies. Refer to the section on supported technologies for Open Source Health for more information.
• In the list of supported capabilities:
  • “GenAI” indicates the technologies for which Sigrid offers AI-generated explanations on the source code. See the GenAI Explanations documentation for more information.
  • “Static AI” indicates the technologies for which Sigrid offers static explanations on the Maintainability findings. Support for other Static AI explanations on other Sigrid’s capability depends on whether the technology is supported by the specific Sigrid capability. See the AI Static Explanations documentation for more information.
  • “MCP” indicates technologies supported by Sigrid’s MCP (Model Context Protocol). Visit this page for more information about MCP integration.

Sigrid | On-premise Sigrid | Sigrid Local

Notes

1. Not supported by on-premise Sigrid.
2. Sigrid automatically detects whether you are using Vue in combination with JavaScript or Vue in combination with TypeScript.
3. Sigrid will automatically detect if you are using React within your JavaScript and/or TypeScript code.
4. Not supported by Sigrid Local.
5. In most cases, configuration files are not considered part of production code and are therefore not relevant for Sigrid’s maintainability analysis. Only add these technologies if you consider them part of the system’s production code.
6. “Unknown technology” will be shown in Sigrid when the technology cannot be detected.
7. Use either html or angularjstemplate, but not both.
   • Prefer angularjstemplate if you’re using Angular templates.
   • Use html for all other types of HTML files or templates.
8. You can use Sigrid CI for this technology, but you will need to use a special option. See instructions on how to technology conversion configuration below.
9. Sigrid CI is not supported for this technology. You can still use Sigrid, but you will need to use one of the alternative upload channels.
10. typescript should also be used with React and/or JSX files with Typescript that use the .ts or .tsx file extensions.
11. Technology support is currently in beta, and not yet generally available. Contact SIG if you want to participate in this beta program.

Framework-specific support

The list of supported technologies refers to the base technologies. For many modern technologies, the choice of frameworks has a significant impact on your system structure and architecture. Sigrid therefore also provides support for framework-specific constructs, for the following frameworks:

Android, Angular, Doctrine, Entity Framework, Flask, GWT, JavaFX, Javalin, JDBC, JMS, JNI, JPA, Hibernate, Laminas, Mongoose, Qt, RabbitMQ, React, S3, SAP UI, Spring, Spring Boot, Spring Cloud, Spring Data, Spring Kafka, Styled Components, Swing, Svelte, WPF Vue, Yii.

Technology conversion configuration

For the vast majority of technologies, you can simply publish your repository and have your code analyzed by Sigrid. However, a small number of technologies cannot be analyzed by Sigrid in its “native” format. In those situations, Sigrid needs to convert these technologies to another format before it can be analyzed.

This configuration can be managed using the --convert option in Sigrid CI. This is only applicable for the following technologies:

Supported open source ecosystems

In addition to supporting 300+ technologies, Sigrid also supports various open source ecosystems for its Open Source Health capability. Note that different projects might use different open source ecosystems, even if they use the same technology. For example, there is no standardized way to manage open source dependencies in Java projects. Some Java projects use Maven, others use Gradle. This is why some technologies are listed multiple times in the table below.

Supported security analyzers

These are the supported security analyzers as you may see them in your security findings overview. You can use the literal text in the Display name below to enable or disable specific analyzers, if deemed necessary. For such configuration, see the Security/Third Party Findings section section on the system security page.

Note this section only described third party security analysis analyzers. The results from these analyzers are then combined with the results from Sigrid’s own security ruleset before being displayed.

Supported software quality standards

Requesting additional technology support

Even with 300+ supported technologies, we are still continuously working on adding support for new technologies and frameworks and updating our technology support for new technology versions. You can contact us using the information provided below if you believe we should extend technology support for your organization.

Contact and support

Feel free to contact SIG’s support department for any questions or issues you may have after reading this document, or when using Sigrid or Sigrid CI. Users in Europe can also contact us by phone at +31 20 314 0953.