The following lists the dependencies required by ShiftLeft CORE to correctly analyze your app/project. We recommend ensuring that the local workstation on which ShiftLeft CORE runs mirrors your development environment as closely as possible.

Browser requirements

ShiftLeft supports the latest versions of Google Chrome and Mozilla Firefox.

Language support and requirements

ShiftLeft CORE's NG SAST is capable of analyzing applications written in the following languages and using the listed frameworks:

  • C/C++
  • C#
  • Go
  • Java
  • JavaScript/TypeScript
  • Kotlin
  • Python
  • Scala

NG SAST can also analyze your Terraform projects/modules.

⚠️ ShiftLeft CORE cannot analyze encrypted or obfuscated artifacts (e.g., encrypted/obfuscated JAR or WAR) or encrypted code.

Language-specific requirements

ShiftLeft CORE is supported on Windows, Linux, and macOS with the specified runtimes installed:

SystemRuntime *
Windows.NET Framework 4.7.2 and/or .NET 5.0
Linux/macOS.NET 5.0 and .NET Core 3.1

Your applications should have the following characteristics:

  • Written in C# 11 (or earlier)
  • Has the specification in MSBuild format (.csproj file)
  • Written for one of the following technologies:
    • .NET Framework
    • .NET Core (deprecated)
    • .NET 5.0, 6.0 or 7.0

* See Alternatives for machines without a required runtime if your app doesn't meet the required characteristics.

Machine requirements: We recommend running NG SAST on a machine with a minimum of 4 GB RAM and 2 CPU Cores. For each subsequent 100,000 lines of code that you submit for analysis, we recommend an additional 2 GB RAM and 1+ CPU Core.

Lines of codeCPUsRAM
<100k3 cores6 GB
>100k4 cores8 GB
> 200k5 cores10 GB
+100k+1 core+2 GB

For example, if your application contains 200,000 lines of code, we recommend that the machine you're using have 8 GB RAM and 4 CPU cores.

Namespaces: NG SAST is compatible with C# apps that utilize the following namespaces:

SCA: To identify open-source vulnerabilities in C# applications, ShiftLeft CORE requires one of the following package formats: .csproj, packages.config.

Other tools/frameworks/versions

If you are using a framework (or a different version from the ones listed above), it nevertheless may be compatible with ShiftLeft. Please contact us for additional details.