Java and Kotlin

Applicability

Snyk supports Java and Kotlin for code analysis and Java and Kotlin for open source.

Supported Java versions

You can use any Java version up to Java SE 17.

There are special considerations for Snyk CLI for Java and Kotlin and SCM integrations with Maven and Gradle.

Guidance for Java and Kotlin is available, along with information about the Snyk workflow with Java and Kotlin and More information about Java support.

Check the language availability to be imported as an application, tested, or monitored using the Snyk products.

Available functions:

• SCM import, available for Snyk Open Source and Snyk Code.

• Test or monitor your app through CLI and IDE, available for Snyk Open Source and Snyk Code.

• Test your app's SBOM using pkg:maven

• Test your app's packages using pkg:maven

Package managers and supported file extensions

Snyk for Java and Kotlin supports Maven and Gradle as package managers and maven.org as a package registry.

Use any of the following versions:

• Maven: 3.*. For more information, see the Snyk Maven plugin readme.

• Gradle: 4.*, 5.*, 6.*, 7.*, 8.*. For more information, see the Snyk Gradle plugin readme.

Snyk for Java and Kotlin supports the following file formats:

• Snyk Open:

  • Maven: pom.xml

  • Gradle: build.gradle, build.gradle.kts

• Snyk Code:

  • Java: .java, .jsp, .jspx

  • Kotlin: .kt

Frameworks and libraries

The following frameworks and libraries are supported in Snyk for Java and Kotlin:

• Amazon AWS SDK - Comprehensive

• Android Standard Library - Partial

• Apache Commons - Comprehensive

• Apache Tomcat - Partial

• Apache XML - Comprehensive

• apache.mahou - Comprehensive

• bouncycastle - Comprehensive

• com.azure.ai.openai - Comprehensive

• com.google.ai.client.generativeai - Comprehensive

• com.google.cloud.vertexai.generativeai - Comprehensive

• com.google.re2j - Comprehensive

• com.google.gwt - Partial

• Dropwizard - Comprehensive

• elasticsearch - Partial

• FasterXML Jackson - Comprehensive

• Google Guava - Comprehensive

• hibernate - Comprehensive

• http4k - Comprehensive

• io.jsonwebtoken - Comprehensive

• Jakarta EE - Partial

• Jakarta XML Services - Partial

• Java EE - Partial

• Java Servlet - Comprehensive

• Java Servlet (javax) - Comprehensive

• Java Server Pages - Partial

• Java Standard Edition - Comprehensive

• javalin - Partial

• jooq - Comprehensive

• Kyro - Comprehensive

• Micronaut - Comprehensive

• mongo-java-driver - Comprehensive

• Netty - Comprehensive

• okhttp3 - Comprehensive

• org.apache.hc.client5 - Comprehensive

• org.apache.http.client - Comprehensive

• org.apache.sling - Partial

• org.apache.tools.zip - Comprehensive

• org.codehaus.plexus - Comprehensive

• org.dom4j.io - Comprehensive

• Playframework - Comprehensive

• rxhttp - Comprehensive

• Seam logger - Comprehensive

• SnakeYaml - Comprehensive

• Spongycastle - Comprehensive

• Spring boot - Partial

• Spring Web, MVC and JDBC - Comprehensive

• Struts - Partial

• Vaadin - Comprehensive

• XStream - Comprehensive

Kotlin only:

• Android Standard Library - Partial

• com.aallam.openai - Comprehensive

• com.expediagroup.graphql.server - Comprehensive

• Javalin - Partial

• Ktor - Comprehensive

• Kotlin Standard Library - Comprehensive

• khttp - Comprehensive

Features

The following features are supported in Snyk for Java and Kotlin:

Snyk Open Source	Snyk Code
Reports Fix PRs (Maven) License scanning	Reports Custom rules Interfile analysis - Kotlin fully supported Interfile analysis - Android partially supported

If you need help, contact Snyk Support.