Code Scanning
Repository Code Scanner
SecureSlate’s repository code scanner analyzes source code in connected repositories to find security issues such as injection flaws, insecure patterns, and other code-level weaknesses. Findings can map into your compliance program so remediation stays tied to controls and evidence.
How language coverage works
SecureSlate does not hardcode a language allowlist for repository scans. Coverage comes from the scanner: if the scanner can analyze a language or file type in your repository, SecureSlate can include it in the scan.
That means support tracks what the scanner recognizes in your codebase—not a fixed subset configured in SecureSlate itself.
Supported languages
The scanner supports 30+ languages, including:
Apex, Bash, C, C++, C#, Clojure, Crystal, Dart, Dockerfile, Elixir, Go, HTML, Java, JavaScript, JSON, Jsonnet, JSX, Julia, Kotlin, Lisp, Lua, OCaml, PHP, Python, R, Ruby, Rust, Scala, Scheme, Solidity, Swift, Terraform, TSX, TypeScript, Visual Basic, XML, and YAML.
Generic and template modes
In addition to the languages above, the scanner includes generic modes for common template and embedded formats—for example ERB and Jinja. These help cover patterns that appear in markup or templates rather than in a single primary language file.
What this means for your repos
- Polyglot repositories are scanned based on the languages the scanner detects, not a preselected list you maintain in SecureSlate.
- Infrastructure-as-code and config formats (such as Dockerfile, Terraform, YAML, and JSON) are included alongside application languages.
- Web and frontend stacks that mix HTML, JavaScript, TypeScript, JSX, and TSX are covered under the same scanner.
