C/C++

Applicability

C/C++ is supported for Snyk Open Source and Snyk Code.

Specific considerations apply for the Snyk CLI for open-source C++ scans. Guidance for Snyk for C/C++ is provided.

The following functions are available for C/C++:

• SCM import - available only for Snyk Code.

• Test or monitor your app through CLI and IDE

• Test your app's SBOM using pkg:generic or pkg:conan. For more information, see Test an SBOM document for vulnerabilities.

• Test your app's packages using pkg:generic or pkg:conan. For more information, see List issues for a package.

Package managers and supported file extensions

For Conan, Snyk supports conan.io as a package registry.

No additional options are required for the Snyk IDE. You can display results within the IDE using the Snyk plugin views.

For C/C++ for Snyk Code, Snyk supports the following file formats: .c, .cc, .cpp, .cxx, .h, .hpp, .hxx.

Frameworks and libraries

For C/C++, Snyk supports the following frameworks and libraries:

• argparse parser

• Asio Library

• Boost Library

• Botan LIbrary

• C Standard Library

• C++ Standard Library

• Curl library

• fstream framework

• grpc-cpp library

• HTTPlib framework

• JsonCpp library

• liboai framework

• libpq library

• libpqxx framework

• libsodium library

• LibTomCrypt framework

• libxml2 framework

• MySQL framework

• OpenSSL framework

• POSIX LIbrary

• pugixml library

• SQLite library

• WinHTTP framework

• Xerces libraries

Features

For C/C++, Snyk supports the following features:

Snyk Open Source	Snyk Code
License scanning Reports	Interfile analysis

The Snyk FixPR feature is not available for C/C++. This means that you will not be notified if the PR checks fail when the following conditions are met

• The PR checks feature is enabled and configured to Only fail when the issues found have a fix available.

• "Fixed in" available is set to Yes.