Supported languages for Contrast CLI

We support the following languages for Contrast CLI:

Language

Requirements

Notes

Java

Maven

A Maven project must be defined with a pom.xml file, and have the icon-external-link.svgApache Maven Dependency plugin. To test if the CLI works with your project, build a dependency tree by running mvn dependency:tree.

Gradle (v4.8 or above)

To test if the CLI works with your project, build a dependency tree by running the Gradle dependencies task by running gradle dependencies or ./gradlew dependencies if using the Gradle Wrapper.

.NET Framework and .NET Core

MSBuild 15.0 or greater and a packages.lock.json file

If the packages.lock.json file is not present, it can be generated by setting RestorePackagesWithLockFile to true within each csproj and running .NET build.

Node.js

You must have either a package-lock.json or a yarn.lock file present.

Vulnerability reporting is supported for front-end technologies like React or Angular.

Python

The pipfile and pipfile.lock files

Ruby

The gemfile and gemfile.lock files

Go

The go.mod file

Note

Only single language applications are supported at this time.