Skip to main content

Contrast CLI supported languages

We support the following languages for Contrast CLI:

Language

Requirements

Notes

Java

Maven

A Maven project must be defined with a pom.xml file, and have the icon-external-link.svgApache Maven Dependency plugin. To test if the CLI works with your project, build a dependency tree by running mvn dependency:tree.

Gradle (v4.8 or above)

A build.gradle file is required and gradle dependencies or ./gradlew dependencies must also be supported.

.NET Framework and .NET Core

MSBuild 15.0 or greater and a packages.lock.json file

If the packages.lock.json file is not present, it can be generated by setting RestorePackagesWithLockFile to true within each csproj and running .NET build.

Node.js

You must have either a package-lock.json or a yarn.lock file present.

Vulnerability reporting is supported for front-end technologies like React or Angular.

PHP

You must have the compose.lock and the composer.json files present.

Python

The pipfile and pipfile.lock files.

Ruby

The gemfile and gemfile.lock files.

Go

The go.mod file.

Note

Only single language applications are supported at this time.