⭐️ Announcing Sigrid IDE integrations for Visual Studio Code, JetBrains, and Mendix Studio Pro.
You can use these integrations to check Sigrid findings as you work on your code, triage findings, and export findings to your issue tracker if you're not able to fix them right away.
Have you tried them? We'd love your feedback: Share it in our short survey.

Technology support

This page provides an overview of all technologies that can be analyzed by Sigrid for its various capabilities.

List of supported technologies

The first column refers to how the technology is named in Sigrid’s scope configuration file.
The “auto-detect” column indicates whether Sigrid is able to automatically detect this technology. If this is not the case, indicated by an ⚠️, Sigrid does support this technology, but you will need to configure it manually.
The column “supported Sigrid capabilities” does not list Open Source Health. The reason is that Open Source Health is based on open source ecosystems, not specific technologies. Refer to the section on supported technologies for Open Source Health for more information.
In the list of supported capabilities:
- “GenAI” indicates the technologies for which Sigrid offers AI-generated explanations on the source code. See the GenAI Explanations documentation for more information.
- “Static AI” indicates the technologies for which Sigrid offers static explanations on the Maintainability findings. Support for other Static AI explanations on other Sigrid’s capability depends on whether the technology is supported by the specific Sigrid capability. See the AI Static Explanations documentation for more information.
- “Guardrails” indicates technologies supported by the live quality check in Guardrails’s MCP tool in Sigrid Axis.

Sigrid | On-premise Sigrid | Sigrid Local | Sigrid Axis

Name in configuration file	Technology name(s)	Auto-detect	Supported Sigrid capabilities	Notes
`abap`	ABAP (SAP)	✅	Maintainability, Static AI, GenAI
`abapcds`	ABAP Core Data Services	✅	Maintainability
`abapsmartforms`	ABAP SmartForms	⚠️	Maintainability, Architecture
`abl`	Abl (OpenEdge)	✅	Maintainability, Architecture, Static AI, GenAI, Guardrails
`acl`	ACL	✅	Maintainability
`accell`	Accell	✅	Maintainability, Architecture
`actionscript`	ActionScript	⚠️	Maintainability, Architecture, GenAI
`actionscript3`	ActionScript 3	✅	Maintainability, Architecture, GenAI
`ada`	Ada	✅	Maintainability, Architecture, GenAI
`adabasnatural`	Adabas Natural	⚠️	Maintainability, Architecture, GenAI
`adfxml`	ADF XML	⚠️	Maintainability
`agilepoint`	AgilePoint	⚠️	Maintainability, Architecture
`altovauml`	Altova UML	✅	Maintainability, Architecture	(4), (8)
`ansible`	Ansible	✅	Maintainability, Security, GenAI
`apachecamel`	Apache Camel	✅	Maintainability, Architecture
`apex`	Oracle APEX	⚠️	Maintainability, Architecture, GenAI	(4), (8)
`aps`	APS	✅	Maintainability, Architecture, GenAI
`applicationmaster`	Application Master	✅	Maintainability, Architecture
`ash`	ArtosScript (ash)	⚠️	Maintainability, Architecture
`asp`	ASP	✅	Maintainability, Architecture
`aspx`	ASP.NET	✅	Maintainability, Architecture, Security (7), Static AI
`assembly`	Assembly	✅	Maintainability, Architecture, GenAI
`aura`	Aura	✅	Maintainability, Architecture
`axway`	Axway	✅	Maintainability, Architecture	(4), (8)
`axystudio`	AxyStudio functions	✅	Maintainability	(4), (8)
`axyworkflow`	AxyStudio workflows	✅	Maintainability, Architecture
`baan`	Baan	✅	Maintainability	(4), (8)
`basic`	BASIC	⚠️	Maintainability, Architecture, GenAI
`batch`	Batch	✅	Maintainability, Architecture
`beanshell`	BeanShell	✅	Maintainability
`beinformed`	Be Informed case management	✅	Maintainability, Architecture	(4), (8)
`beinformedknowledgemodels`	Be Informed knowledge models	✅	Maintainability, Architecture	(4), (8)
`biztalk`	BizTalk	✅	Maintainability, Architecture
`biztalkrules`	BizTalk Rules Engine	✅	Maintainability
`blazerules`	Blaze BRM	✅	Maintainability	(4), (8)
`blueprism`	Blue Prism	✅	Maintainability, Architecture
`blueriq`	Blueriq flows/processes	✅	Maintainability, Architecture	(4), (8)
`blueriqexpressions`	Blueriq expressions	✅	Maintainability, Architecture	(4), (8)
`bpel`	BPEL	✅	Maintainability, Architecture
`bpm`	BPMN	⚠️	Maintainability, Architecture
`brail`	Brail	✅	Maintainability
`bsp`	Bsp	✅	Maintainability, Architecture
`c`	C	✅	Maintainability, Architecture, Security, Static AI, GenAI
`cache`	Cache	⚠️	Maintainability, Architecture
`cacheobjectscript`	Cache ObjectScript	✅	Maintainability, Architecture, GenAI
`ccl`	CCL	⚠️	Maintainability, Architecture, GenAI
`cgdc`	CGDC	⚠️	Maintainability, Architecture
`cgt`	CGT	✅	Maintainability, Architecture
`cicode`	Cicode	✅	Maintainability, Architecture
`cl`	CL	⚠️	Maintainability, Architecture
`clearbasic`	Clearbasic	✅	Maintainability, Architecture
`clojure`	Clojure	✅	Maintainability
`cobol`	Cobol	✅	Maintainability, Architecture, Static AI, GenAI
`coffeescript`	CoffeeScript	✅	Maintainability, Architecture, GenAI
`coldfusion`	ColdFusion	✅	Maintainability, Architecture, GenAI
`configuration`	Configuration	✅	Maintainability	(5)
`coolgenc`	CoolGen C	⚠️	Maintainability, Architecture, GenAI
`coolgencobol`	CoolGen Cobol	⚠️	Maintainability, Architecture, GenAI
`cpp`	C++	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`csharp`	C#	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`csp`	CSP	✅	Maintainability, Architecture
`css`	CSS	✅	Maintainability, Architecture, Static AI
`cypher`	Cypher	✅	Maintainability, Architecture
`cucumber`	Cucumber	✅	Maintainability, Architecture, GenAI
`dart`	Dart (includes Flutter)	✅	Maintainability, Architecture, Static AI, GenAI
`datastage`	Datastage	✅	Maintainability, Architecture
`datastageetl`	DatastageETL	✅	Maintainability, Architecture
`datastageworkflow`	DatastageWorkflow	✅	Maintainability, Architecture
`db2`	DB2	⚠️	Maintainability, Architecture, GenAI
`dcl`	Dcl	✅	Maintainability, Architecture
`delphi`	Delphi	✅	Maintainability, Architecture, Static AI, GenAI
`delphiforms`	Delphi Forms	✅	Maintainability, Architecture
`deltacobol`	Delta/Cobol	✅	Maintainability, Architecture, GenAI
`docker`	Docker	✅	Maintainability, Architecture, Security, Static AI, GenAI
`documentumxcp`	Documentum xCP	✅	Maintainability, Architecture
`drools`	Drools	✅	Maintainability
`dscript`	Dscript	✅	Maintainability
`easytrieve`	Easytrieve	✅	Maintainability, Architecture, GenAI
`egl`	EGL	✅	Maintainability, Architecture, GenAI
`ejs`	EJS	✅	Maintainability, Architecture
`elixir`	Elixir	✅	Maintainability, Architecture, Static AI, GenAI
`embeddedsql`	C++ Embedded SQL	⚠️	Maintainability, Architecture, GenAI
`erb`	ERB	✅	Maintainability, Architecture
`erlang`	Erlang	✅	Maintainability, Security
`esql`	ESQL	✅	Maintainability, Architecture
`filetab`	File Tab	✅	Maintainability
`finacle`	Finacle	⚠️	Maintainability, Architecture
`freeformatcobol`	Freeformat Cobol	⚠️	Maintainability, Architecture, GenAI
`freemarker`	Freemarker	✅	Maintainability, Architecture
`fme`	FME	✅	Maintainability, Architecture	(4), (8)
`fortran`	FORTRAN	✅	Maintainability, Architecture, GenAI
`gensym`	Gensym	✅	Maintainability, Architecture
`grpc`	gRPC	✅	Maintainability, Architecture
`go`	Go (AKA GoLang)	✅	Maintainability, Architecture, Static AI, GenAI
`gosu`	Gosu	⚠️	Maintainability, Architecture, Security
`groovy`	Groovy	✅	Maintainability, Architecture, Security, Static AI, GenAI
`gsp`	GSP	✅	Maintainability, Architecture
`guidefinition`	GUI Definition	✅	Maintainability	(5)
`gupta`	Gupta	✅	Maintainability, Architecture
`haml`	Haml	✅	Maintainability, Architecture
`html`	HTML	✅	Maintainability, Architecture	(7)
`hql`	HQL	✅	Maintainability, Architecture
`ibmace`	IBM ACE	✅	Maintainability
`ibmbpmbpd`	IBM BPM (BPD)	✅	Maintainability, Architecture	(4), (8)
`ibmbpmprocess`	IBM BPM (Process)	✅	Maintainability, Architecture	(4), (8)
`ideal`	Ideal	✅	Maintainability, Architecture
`informatica`	Informatica	✅	Maintainability, GenAI
`informix4gl`	Informix 4GL	✅	Maintainability, Architecture, GenAI
`informixsql`	Informix SQL	⚠️	Maintainability, Architecture
`ingres`	Ingres	⚠️	Maintainability
`intershoppipeline`	Intershop (Pipeline)	⚠️	Maintainability, Architecture
`jasperreports`	Jasper Reports	✅	Maintainability, Architecture
`jade`	Jade	✅	Maintainability, Architecture
`java`	Java	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`javafx`	Java FX	✅	Maintainability, Architecture
`javascript`	JavaScript (includes NodeJS)	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails	(3)
`jbc`	JBC	✅	Maintainability, Architecture
`jbpm`	jBPM	✅	Maintainability, Architecture
`jcl`	JCL	✅	Maintainability, Architecture, GenAI
`jcs`	JCS	✅	Maintainability, Architecture
`jde`	JDE	✅	Maintainability
`jinja`	Jinja	✅	Maintainability, Architecture
`jsf`	JSF	✅	Maintainability, Architecture
`json`	JSON	✅	Maintainability, Architecture	(5)
`jsp`	JSP	✅	Maintainability, Architecture, Security (7), Static AI
`kotlin`	Kotlin	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`less`	Less	✅	Maintainability, Architecture
`linc`	LINC	✅	Maintainability, Architecture	(4), (8)
`lion`	Lion	✅	Maintainability, Architecture	(4), (8)
`lodestar`	Lodestar	✅	Maintainability, Architecture
`logicapps`	Logic Apps	⚠️	Maintainability, GenAI
`logicnets`	LogicNets	✅	Maintainability, Architecture
`lotusscript`	LotusScript	✅	Maintainability, Architecture
`lua`	Lua	✅	Maintainability, Architecture, Static AI, GenAI
`magic`	Magic	✅	Maintainability, Architecture
`magik`	Magik	✅	Maintainability, Architecture
`magnum`	Magnum	✅	Maintainability, Architecture
`matlab`	Matlab	⚠️	Maintainability, Architecture
`mediationflows`	Mediation Flows	✅	Maintainability, Architecture
`mendix`	Mendix	✅	Maintainability, Architecture, Security, Static AI	(9), (4)
`mendixflow`	Mendix microflows/nanoflows	✅	Maintainability, Architecture, Security	(11)
`messagebuilder`	MessageBuilder	✅	Maintainability, Architecture
`mpsbehavior`	MPS Behavior	✅	Maintainability	(4), (8)
`mpsclass`	MPS Class	✅	Maintainability	(4), (8)
`mpstranslator`	MPS Translator	✅	Maintainability	(4), (8)
`mule`	Mule	✅	Maintainability, Architecture
`mtwize`	MtWize	✅	Maintainability, Architecture
`murexdatadictionary`	Murex Data Dictionary	✅	Maintainability, Architecture
`murexlookuptable`	Murex Lookup Table	✅	Maintainability, Architecture
`murexscript`	Murex Script	✅	Maintainability, Architecture
`murexworkflow`	Murex Workflow	✅	Maintainability, Architecture
`mustache`	Mustache (includes Handlebars)	✅	Maintainability, Architecture
`nabsic`	Nabsic	✅	Maintainability, Architecture	(4), (8)
`navascript`	NavaScript	✅	Maintainability
`naviscript`	Naviscript	⚠️	Maintainability, Architecture
`navision`	Navision (AKA Dynamics NAV, AL)	✅	Maintainability, Architecture
`netiqidmpolicy`	NetIQ IDM Policy	✅	Maintainability	(4), (8)
`netiqidmrequest`	NetIQ IDM Request	✅	Maintainability	(4), (8)
`netiqidmworkflow`	NetIQ IDM Workflow	✅	Maintainability	(4), (8)
`netweaveridm`	NetweaverIDM	✅	Maintainability, Architecture
`nonstopsql`	Nonstop SQL	✅	Maintainability, Architecture, GenAI
`normalizedsystemsjava`	Normalized Systems Java	✅	Maintainability, Architecture
`normalizedsystemsjavascript`	Normalized Systems JavaScript	✅	Maintainability
`normalizedsystemsmodel`	Normalized Systems Model	✅	Maintainability, Architecture
`normalizedsystemstypescript`	Normalized Systems TypeScript	✅	Maintainability
`objectivec`	Objective-C	✅	Maintainability, Architecture, Static AI, GenAI
`odi`	ODI	⚠️	Maintainability, Architecture
`odm`	ODM	✅	Maintainability, Architecture
`omt`	OMT	✅	Maintainability, Architecture
`opa`	OPA	✅	Maintainability, Architecture
`opc`	OPC	✅	Maintainability
`openroad`	OpenROAD 4GL	⚠️	Maintainability
`oraclebpm`	Oracle BPM	✅	Maintainability, Architecture
`oracleofsaa`	Oracle OFSAA	✅	Maintainability, Architecture
`oracleworkflow`	Oracle Workflow	✅	Maintainability, Architecture
`ords`	ORDS	⚠️	Maintainability
`osb`	OSB	✅	Maintainability, Architecture	(4), (8)
`osbproxy`	OSB Proxy	✅	Maintainability, Architecture	(4), (8)
`osmprocess`	OSM Process	⚠️	Maintainability, Architecture
`osmtask`	OSM Task	✅	Maintainability, Architecture
`outsystems`	OutSystems	✅	Maintainability, Architecture, GenAI	(1), (4), (9)
`pascal`	Pascal	⚠️	Maintainability, Architecture, GenAI
`pega`	Pega	✅	Maintainability	(1), (9)
`perl`	Perl	✅	Maintainability, Architecture, Security (7), GenAI
`php`	PHP	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`plc`	PLC	✅	Maintainability, Architecture, GenAI	(4), (8)
`plcfbd`	PLC Functional Block Diagram	✅	Maintainability
`plcil`	PLC Instruction List	✅	Maintainability
`plcld`	PLC Ladder Diagram	✅	Maintainability
`plcsfc`	PLC Sequential Function Chart	✅	Maintainability
`plcst`	PLC Structured Text	✅	Maintainability, GenAI
`pli`	PL/I	✅	Maintainability, Architecture, GenAI
`plsql`	Oracle PL/SQL	✅	Maintainability, Architecture, Static AI, GenAI
`plsqlforms`	Oracle PL/SQL Forms	✅	Maintainability	(4), (8)
`plsqlreports`	Oracle PL/SQL Reports	✅	Maintainability
`pluk`	PLUK	✅	Maintainability, Architecture
`polymertemplates`	Polymer Templates	✅	Maintainability, Architecture	(4), (8)
`powerbuilder`	Powerbuilder	✅	Maintainability, Architecture
`powercenter`	PowerCenter	✅	Maintainability, Architecture	(4), (8)
`powerfx`	Power Fx (AKA Microsoft Power Apps)	✅	Maintainability, GenAI
`powershell`	Powershell	✅	Maintainability, Architecture, Static AI, GenAI
`progress`	Progress (OpenEdge)	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`prt`	PRT	✅	Maintainability
`puppet`	Puppet	✅	Maintainability, Architecture, GenAI
`python`	Python	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails
`r`	R	✅	Maintainability, Architecture, GenAI
`radience`	Radience	✅	Maintainability, Architecture	(4), (8)
`razor`	Razor	✅	Maintainability, Architecture, Static AI
`regelspraak`	ALEF Regelspraak	✅	Maintainability, Architecture	(4), (8)
`regelspraakhtml`	ALEF Regelspraak (HTML export)	✅	Maintainability, Architecture	(4), (8)
`rexx`	Rexx	⚠️	Maintainability, Architecture, GenAI
`robot`	Robot	✅	Maintainability
`rpg`	RPG	✅	Maintainability, Architecture, GenAI
`ruby`	Ruby (includes Ruby on Rails)	✅	Maintainability, Architecture, Security, Static AI, GenAI
`rust`	Rust	✅	Maintainability, Architecture, Static AI, GenAI	(4), (8)
`salesforceapex`	Salesforce Apex	✅	Maintainability, Architecture, GenAI
`salesforceflow`	Salesforce Flow	✅	Maintainability, Architecture
`salesforceprocessbuilder`	Salesforce Process Builder	✅	Maintainability
`sappo`	SAP PO	✅	Maintainability, Architecture	(4), (8)
`sas`	SAS	✅	Maintainability, Architecture
`sasflows`	SAS Flows	✅	Maintainability	(4), (8)
`sass`	Sass	✅	Maintainability, Architecture, Static AI
`scala`	Scala	✅	Maintainability, Architecture, Security, Static AI, GenAI
`scl`	SCL	⚠️	Maintainability, Architecture
`scr`	SCR	✅	Maintainability, Architecture
`script`	Shell script	✅	Maintainability, Architecture, GenAI
`servicenow`	ServiceNow	✅	Maintainability, Architecture	(4), (8)
`siebeldeclarative`	Siebel Declarative	⚠️	Maintainability, Architecture	(4), (8)
`siebeljs`	Siebel JS	⚠️	Maintainability, Architecture	(4), (8)
`siebelscripted`	Siebel Scripted	⚠️	Maintainability, Architecture	(4), (8)
`siebelworkflow`	Siebel Workflow	⚠️	Maintainability, Architecture	(4), (8)
`siebeltbui`	Siebel TBUI	⚠️	Maintainability, Architecture	(4), (8)
`slim`	Slim	✅	Maintainability
`smalltalk`	Smalltalk	⚠️	Maintainability, Architecture, GenAI
`solidity`	Solidity	✅	Maintainability, Architecture, GenAI
`sonicesb`	Sonic ESB	✅	Maintainability, Architecture
`spl`	SPL	✅	Maintainability
`sqlj`	SQLJ	✅	Maintainability, Architecture
`sqr`	SQR	⚠️	Maintainability, Architecture
`ssis`	SSIS	✅	Maintainability, Architecture
`starlimssql`	StarLIMS	✅	Maintainability, Architecture
`streamserve`	StreamServe	✅	Maintainability, Architecture
`synapse`	Synapse	⚠️	Maintainability
`synon`	Synon	✅	Maintainability, Architecture
`swift`	Swift	✅	Maintainability, Architecture, Security, Static AI, GenAI
`t4`	T4	✅	Maintainability
`tacl`	TACL	✅	Maintainability, Architecture, GenAI
`tal`	TAL	✅	Maintainability
`tandem`	Tandem	✅	Maintainability, Architecture, GenAI	(4), (8)
`tapestry`	Tapestry	✅	Maintainability, Architecture
`terraform`	Terraform	✅	Maintainability, Architecture, Security, Static AI, GenAI
`thrift`	Thrift	✅	Maintainability, Architecture
`thymeleaf`	Thymeleaf	✅	Maintainability, Architecture
`tibco`	TIBCO BW	✅	Maintainability, Architecture
`tibcobe`	TIBCO BE (XML)	✅	Maintainability, Architecture
`tibcobejava`	TIBCO BE (Java)	✅	Maintainability, Architecture
`tibcobestatemachine`	TIBCO BE (State Machine)	✅	Maintainability, Architecture
`tibcobw6`	TIBCO BW6	✅	Maintainability, Architecture
`tripleforms`	TriplEforms	✅	Maintainability
`trs`	TRS	✅	Maintainability	(4), (8)
`tsql`	T-SQL (Microsoft SQL Server, MS SQL))	✅	Maintainability, Architecture, Static AI, GenAI
`turtle`	Turtle	✅	Maintainability
`twig`	Twig	✅	Maintainability
`typescript`	TypeScript (includes React/TypeScript)	✅	Maintainability, Architecture, Security, Static AI, GenAI, Guardrails	(10)
`uil`	UIL (Motif)	✅	Maintainability, Architecture
`uniface`	Uniface	✅	Maintainability, Architecture	(4), (8)
`until`	Until	⚠️	Maintainability, Architecture
`vag`	Visual Age	✅	Maintainability, Architecture
`vagrecord`	Visual Age Record	✅	Maintainability, Architecture
`vb`	Visual Basic	✅	Maintainability, Architecture, Security (7), Static AI, GenAI
`vbnet`	Visual Basic .NET	✅	Maintainability, Architecture, Security (7), Static AI, GenAI
`velocity`	Velocity	✅	Maintainability, Architecture
`vgl`	VGL	✅	Maintainability
`visualforce`	VisualForce	✅	Maintainability
`visualfoxpro`	Visual FoxPro	⚠️	Maintainability
`visualrpg`	Visual RPG	✅	Maintainability, Architecture
`visualobjects`	Visual Objects	⚠️	Maintainability, Architecture
`vue`	Vue	✅	Maintainability, Architecture, Security, Static AI, GenAI	(2)
`vulcan`	Vulcan.NET	⚠️	Maintainability, Architecture
`webfocus`	WebFocus	✅	Maintainability, Architecture
`webmethods`	WebMethods	✅	Maintainability, Architecture
`websmart`	WebSmart	✅	Maintainability, Architecture	(4), (8)
`websmartpanels`	WebSmart Panels	✅	Maintainability
`wonderware`	Wonderware	✅	Maintainability
`wsdl`	WSDL	✅	Maintainability, Architecture
`wtx`	WTX	⚠️	Maintainability
`xaml`	XAML	✅	Maintainability, Architecture
`xml`	XML	✅	Maintainability, Architecture	(5)
`xpdl`	Tibco ActiveMatrix BPM	✅	Maintainability
`xpp`	X++ AX	✅	Maintainability, Architecture, GenAI	(4), (8)
`xpp365`	X++ for Dynamics 365	✅	Maintainability, Architecture, GenAI	(4), (8)
`xquery`	Xquery	✅	Maintainability, Architecture, GenAI
`xsd`	XSD	✅	Maintainability, Architecture
`xslt`	XSLT	✅	Maintainability, Architecture
`xul`	XUL	✅	Maintainability
`yaml`	YAML	✅	Maintainability, Architecture	(5)

Notes

Not supported by on-premise Sigrid.
Sigrid automatically detects whether you are using Vue in combination with JavaScript or Vue in combination with TypeScript.
Sigrid will automatically detect if you are using React within your JavaScript and/or TypeScript code.
Not supported by Sigrid Local.
In most cases, configuration files are not considered part of production code and are therefore not relevant for Sigrid’s maintainability analysis. Only add these technologies if you consider them part of the system’s production code.
“Unknown technology” will be shown in Sigrid when the technology cannot be detected.
Requires an additional Sigrid Security Checkmarx license.
You can use Sigrid CI for this technology, but you will need to use a special option. See instructions on how to technology conversion configuration below.
Sigrid CI is not supported for this technology. You can still use Sigrid, but you will need to use one of the alternative upload channels.
typescript should also be used with React and/or JSX files with TypeScript that use the .ts or .tsx file extensions.
Technology support is currently in beta, and not yet generally available. Contact SIG if you want to participate in this beta program.

Framework-specific support

The list of supported technologies refers to the base technologies. For many modern technologies, the choice of frameworks has a significant impact on your system structure and architecture. Sigrid therefore also provides support for framework-specific constructs for the following frameworks:

Android, Angular, ASP.NET Core, Doctrine, Entity Framework, Flask, GWT, JavaFX, Javalin, JDBC, JMS, JNI, JPA, Hibernate, Laminas, Mongoose, Qt, RabbitMQ, React, S3, SAP UI, Spring, Spring Boot, Spring Cloud, Spring Data, Spring Kafka, Styled Components, Swing, Svelte, WPF Vue, Yii.

Technology conversion configuration

For the vast majority of technologies, you can simply publish your repository and have your code analyzed by Sigrid. However, a small number of technologies cannot be analyzed by Sigrid in its “native” format. In those situations, Sigrid needs to convert these technologies to another format before it can be analyzed.

This configuration can be managed using the --convert option in Sigrid CI. This is only applicable for the following technologies:

Technology	Value of the `--convert` option
ABB Control Builder	`ABBControlBuilder`
Altova UML	`AltovaUML`
Oracle APEX	`Apex`
Axway	`Axway`
Axystudio	`Axystudio`
BRM	`BRM`
Be Informed	`Beinformed`
Blueriq	`Blueriq`
Data Bricks	`Databricks`
Ecostruxure	`Ecostruxure`
FME	`FME`
IBM BPM	`IbmBpm`
Infinite Blue	`Infiniteblue`
JDE	`JDE`
Linc	`Linc`
Lion	`Lion`
Lion/COBOL	`LionCobol`
MicroFocus COBOL	`MicroFocusCobol`
MPS	`MPSLanguage`
Nabsic	`Nabsic`
NetIQ IDM	`NetIQIDM`
OSB Pipeline	`OSBPipeline`
OutSystems	`Outsystems` or `OutsystemsExporter` (contact SIG support for details)
PEGA	`Pega` or `PegaFilter` (contact SIG support for details)
Pentaho Data Integration	`Pentahodataintegration`
PL/SQL Headstart	`PlsqlHeadstart`
PL/SQL Forms	`Plsqlforms`
Polymer	`Polymer`
PowerCenter	`Powercenter`
Radience	`Radience`
Regelspraak	`Regelspraak` or `Regelspraakhtml` (contact SIG support for details)
Rust	`Rust`
Sailpoint BeanShell	`Sailpointbeanshell`
SAP PO	`Sappo`
SAS Flows	`Sasflows`
ServiceNow	`ServiceNow`
Siebel	`SiebelProject` or `SiebelRepository` (contact SIG support for details)
Svelte	`Svelte`
Uniface	`Ssduniface` or `Unifacexml` (contact SIG support for details)
Tandem	`Tandem`
TRS	`Trs`
USoft	`Usoft` or `UsoftEsi` (contact SIG support for details)
WebSmart	`Websmart`
X++	`Xpp`
X++ 365	`Axmodel`

Supported open source ecosystems

In addition to supporting 300+ technologies, Sigrid also supports various open source ecosystems for its Open Source Health capability. Note that different projects might use different open source ecosystems, even if they use the same technology. For example, there is no standardized way to manage open source dependencies in Java projects. Some Java projects use Maven, others use Gradle. This is why some technologies are listed multiple times in the table below.

Open source ecosystem	Common technologies	Vulnerability risk	License risk	Freshness risk	Transitive dependencies	Notes
Bower	JavaScript	✅	✅	✅	❌
Cargo	Rust	✅	✅	✅	✅
CocoaPods	Swift, Objective-C	❌	❌	❌	❌	End-of-life, as CocoaPods itself is shutting down.
Composer	PHP	✅	✅	✅	✅
Go Modules	Go	✅	✅	✅	✅
Gradle	Java, Kotlin, Groovy	✅	✅	✅	✅	Instructions for publishing
Hex	Erlang, Elixir	❌	❌	❌	✅
Ivy	Java	✅	✅	✅	✅
LibMan	JavaScript	✅	✅	✅	❌
Mendix Marketplace	Mendix	✅	✅	✅	✅
Mendix managed dependencies	Mendix	✅	✅	✅	✅
Maven	Java	✅	✅	✅	✅	Instructions for publishing
NPM	JavaScript, TypeScript	✅	✅	✅	✅
NuGet	C#	✅	✅	✅	✅
PNPM	JavaScript, TypeScript	✅	✅	✅	✅
Poetry	Python	✅	✅	✅	✅	Instructions for publishing
pub.dev	Dart, Flutter	✅	❌	✅	❌
PuppetForge	Puppet	❌	✅	✅	❌
PyPi	Python	✅	✅	✅	✅
Python `pyproject.toml`	Python	✅	✅	✅	✅
RubyGems	Ruby	✅	✅	✅	✅
SBT	Scala	✅	✅	✅	✅
SwiftPM	Swift	❌	✅	✅	❌
UV	Python	✅	✅	✅	✅
Unmanaged JAR files	Java
Unmanaged DLL files	C#
Unmanaged JS files	JavaScript

Supported security analyzers

These are the supported security analyzers as you may see them in your security findings overview. You can use the literal text in the Display name below to enable or disable specific analyzers, if deemed necessary. For such configuration, see the Security/Third Party Findings section section on the system security page.

Note this section only described third party security analysis analyzers. The results from these analyzers are then combined with the results from Sigrid’s own security ruleset before being displayed.

Display name	Technologies	Notes	Supports Sigrid CI
Bandit	Python		✅
Checkmarx	(many)	Requires Sigrid Security Checkmarx license.	❌
ErrorProne.NET	C#	Requires compiling code.	✅
ESLint	JavaScript, TypeScript		✅
FB Contrib	Java		✅
FindSecBugs	Java		✅
FlawFinder	C		✅
Google ErrorProne	Java	Requires compiling code.	✅
Gosec	Go		✅
KICS	Docker, Ansible, Kubernetes, etc.		✅
Microsoft Code Quality	C#	Requires compiling code.	✅
MobSF	Android		✅
MultithreadingAnalyzer	C#	Requires compiling code.	✅
NodeJS Scan	JavaScript, TypeScript		✅
Puma Security	C#	Requires compiling code.	✅
SecurityCodeScan	C#	Requires compiling code.	✅
SonarQube (C#)	C#	Requires compiling code.	✅
SonarQube (Java)	Java	Requires compiling code.	✅
SpotBugs	Java		✅
SemGrep	(many)		✅
VMWare CSA	Java, C#, configuration	Cloud Suitability Analyzer.	✅

Supported software quality standards

Software quality standard	Relevant for capabilities
ISO 25010	Maintainability, Architecture, Security, Reliability
SIG Security Model	Security
OWASP Top 10	Security
ISO 5055	Security, Reliability
CWE Top 25	Security
PCI DSS 4.0	Security
OWASP ASVS 4.0	Security
OWASP Low-code/No-code Top 10	Security

Requesting additional technology support

Even with 300+ supported technologies, we are still continuously working on adding support for new technologies and frameworks and updating our technology support for new technology versions. You can contact us using the information provided below if you believe we should extend technology support for your organization.

Contact and support

Feel free to contact SIG’s support team for any questions or issues you may have after reading this documentation or when using Sigrid.