Does DevSkim support Cobol?

[scvjx]

As title

[joshbw]

Sort of? The engine itself is language agnostic - it works over plaintext using chained regular expressions to nail down findings, so there isn't any technical reason that prevents it from operating against cobol. However, We don't have very many rules that would apply to cobol (other than some of the general crypto rules that are looking for dangerous/deprecated algorithms), and the three of us that maintain the engine aren't super familiar with what sorts of issues are common in the language. We also don't have any real world cobol code bases to test against (Microsoft may use most languages under the sun, but Cobol is one of the few that we don't use). If you are interested in writing and submitting some cobol rules we would certainly be happy to familiarize you with the rules structure and how to produce them