CAST HIGHLIGHT - Analyzer - Technologies Frameworks Binary files and File extensions supported – CAST

To know about CAST Highlight technology coverage, you can find the list of supported programming languages by use case (detection & sizing, SCA, cloud readiness, green software insights, software health) from here: Technology Coverage

Frameworks

If the framework is created using supported technologies, the code will be scanned by Highlight regardless of the framework. See the list of supported technologies here Technology Coverage
- Eg : For Angular JS which is a framework developed in JavaScript, Angular files will be considered as JavaScript by CAST Highlight analyzers. Highlight supports TypeScript and JavaScript, hence scanning a node or react app is supported for both Health and Cloud insights and SCA as well, though there is no “React or NodeJS source code” to scan per se,
Some languages or frameworks are not listed as a supported technology. For more details please refer CAST HIGHLIGHT - Analyzer - Why some languages/frameworks might not be seen in the supported technologies list?
Framework files by themselves are not analyzed, there should be some related code for the framework files to be processed in Highlight. That is analysis of 3rd party libraries such as pom.xml (Java/Maven), .json (Javascript), and .vcproj (C#), with no source code is not possible. As a workaround in order to have these dependencies analyzed you can add code to the analysis to proceed or add a 'dummy' file to get the results. Please refer CAST HIGHLIGHT - Analyzer - Framework files, DLL's by themselves are not analyzed for more details.
Highlight doesn't identify technology based on the Framework on which an application is built, it just identifies the technology using its internal mechanism. Please refer CAST HIGHLIGHT - Analyzer - Does Highlight identify technology and technology versions

File extensions recognized

To know more about source code file extensions recognized and how to rename file extensions as needed to match the extensions recognized by the agent, please refer the section "Languages and file extensions" in the Getting Started Guide

Binary files or executable of the application

Highlight’s analyzers analyze binary extensions for Software Composition Analysis of possible third-party components:
- .jar (Java)
- .dll (Windows)
- .a
- .lib
- .so
After the scan, binary file information is stored in a separate result CSV file (BinaryLibraries.csv) which will be uploaded with other CSV results.

Zip files for analysis

The --includeArchiveContent of the command line can extract content of .jar, .tar, .zip, .war file archives.

Related Articles

Automated Framework Discovery

Technology Coverage

CAST HIGHLIGHT - Analyzer - Discovery Step - For the same application technology is classified differently by HL when compared with CAST AIP

CAST HIGHLIGHT - Analyzer - ASP Code support in Highlight

CAST HIGHLIGHT - Analyzer - Framework - Does Highlight support basic frameworks associated with Java technology like STRUTS or SPRING etc..

CAST HIGHLIGHT - Analyzer - Does Highlight identify technology and technology versions

CAST HIGHLIGHT - SCA - Results - Version numbers not detected for dependency though version number of the parent component is available

CAST HIGHLIGHT - Analyzer - Why some languages/frameworks might not be seen in the supported technologies list?

CAST HIGHLIGHT - Discovery Step - Analyzer not detecting all the technologies