Community and language coverage

The Spectra Assure platform supports a variety of communities, programming languages, and file formats. A specific set of features is available for each of those categories.

The tables on this page contain supported communities and programming languages.

For every supported community and programming language, the tables cover the following information:

• Code Analysis - the supported file formats and environments on which Spectra Assure products can perform static analysis
• Packages - the supported package formats, libraries, and package managers
• Dedicated Policies - indicates if there are dedicated Spectra Assure policies for the community/language
• Threat Detection - indicates if the Spectra Assure platform identifies threats targeting the community/language
• Behavioral Analysis - indicates if the Spectra Assure platform performs code intent analysis
• Known Vulnerabilities - indicates if the Spectra Assure platform detects publicly disclosed vulnerabilities (CVE)

Community coverage

Select a community in the table for details about code analysis and package format support.

Community	Dedicated Policies	Threat Detection	Behavioral Analysis	Known Vulnerabilities
Windows	Windows and Linux mitigation checks in compiled binaries only	✔️	✔️	Vulnerabilities in statically linked libraries only
Linux	Windows and Linux mitigation checks in compiled binaries only	✔️	✔️	✔️
macOS	❌	✔️	❌	❌
Machine Learning	✔️	✔️	✔️	N/A or unsupported
Development	❌	✔️	✔️	✔️
Virtual Machines	❌	✔️	✔️	N/A or unsupported
Containers	✔️	✔️	✔️	✔️

Windows

Code Analysis

• Compiled code: PE (x86, arm, chpe)
• Library code: LIB

Packages

• Windows (MSI, MSIX, APPX, WIM)
• Installers (NSIS, InnoSetup, InstallBuilder, InstallShield, Wise, Actual Installer, Advanced Installer, DreamShield, InstallAnywhere, WiX Toolset, SFX Archives)
• Documents (Microsoft Office, CHM, RTF, CRTF)
• Multimedia (BMP)

Linux

Code Analysis

• Compiled code: ELF (x86, arm, mips)
• Library code: A/AR

Packages

• Debian (DEB, UDEB)
• RedHat (RPM, DRPM)
• Alpine (APK)
• Documents (OpenOffice, LibreOffice, PDF, HTML)
• Multimedia (GIF, PNG, JPEG, TIFF, SVG)

macOS

Code Analysis

• Compiled code: Mach-O (x86, arm, ppc)

Packages

• macOS (PKG, DMG, Universal)

Machine Learning

Code Analysis

• Model data

Packages

• NumPy (NPY, NPZ)
• Keras, Tensorflow, scikit-learn, PyTorch, Joblib (PKL)

Development

Code Analysis

• CI/CD and IDE plugins

Packages

• VSCode (VSIX)
• Jenkins (HPI)

Virtual Machines

Code Analysis

• Filesystem data

Packages

• Windows:

  • VHD, VHDX - Virtual machines with MBR/GPT/LVM/EFI partitioning and NTFS/FAT/EXT/XFS/UFS2/BTRFS file systems only

• Linux:

  • OVA
  • VDI, VMDK, QCOW - Virtual machines with MBR/GPT/LVM/EFI partitioning and NTFS/FAT/EXT/XFS/UFS2/BTRFS file systems only

Containers

Code Analysis

• Container images

Packages

• Universal (ISO, UDF)
• Linux (OCI, LXD)
• Docker (TAR)
• Kaniko (TAR)

Language coverage

Special conditions

Programming languages with the info (ℹ️) symbol in the table have some restrictions or special conditions for what is supported.

The following special conditions are indicated:

• C/C++ - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only; Known Vulnerabilities: Vulnerabilities in statically linked libraries only
• Visual Basic - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
• Delphi - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
• Python - Dedicated Policies: Machine learning model data only
• Go - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
• Rust - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only
• AutoIt - Dedicated Policies: Windows and Linux mitigation checks in compiled binaries only

Language	Code Analysis	Packages	Dedicated Policies	Threat Detection	Behavioral Analysis	Known Vulnerabilities
C/C++	Compiled code PE: x86, arm, chpe ELF: x86, arm, mips Mach-O: x86, arm, ppc	N/A or unsupported	ℹ️	✔️	✔️	ℹ️
.NET (C#, F#, VB.NET)	Compiled bytecode CLR	NuGet (NUPKG)	❌	✔️	✔️	✔️
Visual Basic	Source code HTA, VBS, VBE, VBA Compiled code PE: x86, pcode	N/A or unsupported	ℹ️	✔️	✔️	❌
Delphi	Compiled code PE: x86	N/A or unsupported	ℹ️	✔️	✔️	❌
Python	Source code PY Compiled bytecode PYC Model data PKL	Wheel (WHL) PyProject (Poetry, Flit, Setuptools) Installers (Py2ExeInstaller, PyInstaller, PYZ) Keras, Tensorflow, scikit-learn, PyTorch, Joblib (PKL) NumPy (NPY, NPZ)	ℹ️	✔️	✔️	✔️
Node.js	Source code JS Compiled code Electron	NPM (TGZ) Electron (AppImage, ASAR)	❌	✔️	✔️	✔️
Ruby	Source code RB	RubyGems (GEM)	❌	✔️	✔️	✔️
Go	Compiled code PE: x86, arm ELF: x86, arm Mach-O: x86, arm, ppc	N/A or unsupported	ℹ️	✔️	✔️	✔️
Rust	Compiled code PE: x86, arm ELF: x86, arm Mach-O: x86, arm, ppc	Cargo (TGZ)	ℹ️	✔️	✔️	✔️
Java	Compiled bytecode CLASS Scala	Maven (JAR, WAR)	❌	✔️	✔️	✔️
JavaScript	Source code HTA, JS, JSE, TypeScript Browser extension XPI, OEX, CRX	N/A or unsupported	❌	✔️	✔️	❌
PHP	Source code PHP	Packagist (ZIP, TGZ)	❌	✔️	❌	✔️
AutoIt	Source code AU3 Compiled code PE: x86	N/A or unsupported	ℹ️	✔️	✔️	N/A or unsupported
PowerShell	Source code BAT PS	N/A or unsupported	❌	✔️	✔️	N/A or unsupported
Shell	Source code SH	N/A or unsupported	❌	✔️	✔️	N/A or unsupported