Skip to content

docs(cobol): promote COBOL to General Availability #1486

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sebsnyk wants to merge 7 commits into
base: main
Choose a base branch
from
Open

docs(cobol): promote COBOL to General Availability #1486

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
82a7cd3
docs(cobol): promote COBOL to General Availability
sebsnyk Jul 20, 2026
ee11ac9
docs(cobol): add COBOL to the Snyk Agent Fix language list
sebsnyk Aug 7, 2026
c25f62b
docs(cobol): apply review wording on the COBOL GA pages
sebsnyk Aug 13, 2026
76368ef
docs(code): normalize the shared column boilerplate on all rules pages
sebsnyk Aug 13, 2026
d6b61c7
docs(code): restore the OWASP 2025 and CWE Top 25 mappings lost to a …
sebsnyk Aug 13, 2026
08e8c5d
docs(code): align Agent Fix languages and COBOL interfile with the en…
sebsnyk Aug 13, 2026
3051569
docs(code): drop the Autofixable column; state Agent Fix coverage once
sebsnyk Aug 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 5 additions & 9 deletions discover-snyk/supported-languages/supported-languages-list/cobol.md
View file
Open in desktop
Comment thread
sebsnyk marked this conversation as resolved.
Original file line number Diff line number Diff line change
@@ -1,29 +1,25 @@
---
description: Snyk support for COBOL with Snyk Code, available in Early Access on Enterprise plans, including CICS frameworks and supported dialects
description: Snyk Code support for COBOL, including CICS frameworks and supported dialects
nav_context: agnostic
---

# COBOL

{% hint style="info" %}
COBOL is supported only for Snyk Code.
Snyk supports COBOL only in Snyk Code.
{% endhint %}

## COBOL for Snyk Code

{% hint style="info" %}
Code analysis support for COBOL is in Early Access and is available only with Enterprise plans. To enable the feature, see [Snyk Preview](https://app.gitbook.com/s/IgtgtomLQ2TUgSKOMSAm/snyk-hierarchy/snyk-preview).
{% endhint %}

For an overview of the supported security rules, visit [COBOL rules](https://app.gitbook.com/s/BJO0IZx7zB6bOkotxQP2/scan-with-snyk/snyk-code/snyk-code-security-rules/cobol-rules).

### Supported frameworks and libraries

For COBOL with Snyk Code, Snyk supports the CICS frameworks and libraries.
For COBOL, Snyk Code supports CICS frameworks and libraries.

### Supported dialects and formats

* IBM Enterprise COBOL for z/OS (v4.2+)
* IBM Enterprise COBOL for z/OS version 4.2 and later
* Micro Focus COBOL
* GNU COBOL
* OpenCOBOL
Expand All @@ -33,7 +29,7 @@ For COBOL with Snyk Code, Snyk supports the CICS frameworks and libraries.

### Supported file formats

The following file formats are supported: `.cbl`, `.ccp`, `.cob`, `.cpy`.
Snyk Code supports the following file formats: `.cbl`, `.ccp`, `.cob`, `.cpy`.

### Available features

Expand Down
4 changes: 2 additions & 2 deletions ...snyk/supported-languages/supported-languages-package-managers-and-frameworks.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,10 +21,10 @@ Check the language availability before you import, test, or monitor it as an app

The following table lists supported languages and the availability of support for using each language with SCM integrations and Snyk CLI, IDE, and CI/CD. Navigate to each language page for more details.

<table><thead><tr><th width="270">Language</th><th width="225">Snyk Open Source</th><th width="210">Snyk Code</th><th data-hidden>SCM support</th><th data-hidden>Snyk CLI, IDE, CI/CD</th></tr></thead><tbody><tr><td><a href="../supported-languages-package-managers-and-frameworks/apex.md">Apex</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/c-c++.md">C/C++</a></td><td>✔️</td><td>✔️</td><td>For Snyk Code</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/cobol.md">COBOL</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td></td><td></td></tr><tr><td><a href="supported-languages-list/dart-and-flutter.md">Dart and Flutter</a></td><td>✔️</td><td>✔️</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td></tr><tr><td><a href="supported-languages-list/elixir.md">Elixir</a></td><td>✔️</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td></tr><tr><td><a href="supported-languages-list/go.md">Go</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/groovy.md">Groovy</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td></td><td></td></tr><tr><td><a href="../supported-languages-package-managers-and-frameworks/java-and-kotlin/">Java and Kotlin</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/javascript/">JavaScript</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/.net/">.NET (C# and VB.NET)</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/php.md">PHP</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/python/">Python</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/ruby.md">Ruby</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/rust.md">Rust</a></td><td>Limited support</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2714">✔️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td></tr><tr><td><a href="supported-languages-list/scala.md">Scala</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/swift-and-objective-c.md">Swift and Objective-C</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/typescript.md">TypeScript</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr></tbody></table>
<table><thead><tr><th width="270">Language</th><th width="225">Snyk Open Source</th><th width="210">Snyk Code</th><th data-hidden>SCM support</th><th data-hidden>Snyk CLI, IDE, CI/CD</th></tr></thead><tbody><tr><td><a href="../supported-languages-package-managers-and-frameworks/apex.md">Apex</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/c-c++.md">C/C++</a></td><td>✔️</td><td>✔️</td><td>For Snyk Code</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/cobol.md">COBOL</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/dart-and-flutter.md">Dart and Flutter</a></td><td>✔️</td><td>✔️</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td></tr><tr><td><a href="supported-languages-list/elixir.md">Elixir</a></td><td>✔️</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td></tr><tr><td><a href="supported-languages-list/go.md">Go</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/groovy.md">Groovy</a></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td>✔️</td><td></td><td></td></tr><tr><td><a href="../supported-languages-package-managers-and-frameworks/java-and-kotlin/">Java and Kotlin</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/javascript/">JavaScript</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/.net/">.NET (C# and VB.NET)</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/php.md">PHP</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/python/">Python</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/ruby.md">Ruby</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/rust.md">Rust</a></td><td>Limited support</td><td><span data-gb-custom-inline data-tag="emoji" data-code="2714">✔️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td><td><span data-gb-custom-inline data-tag="emoji" data-code="2716">✖️</span></td></tr><tr><td><a href="supported-languages-list/scala.md">Scala</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/swift-and-objective-c.md">Swift and Objective-C</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr><tr><td><a href="supported-languages-list/typescript.md">TypeScript</a></td><td>✔️</td><td>✔️</td><td>✔️</td><td>✔️</td></tr></tbody></table>
Comment thread
sebsnyk marked this conversation as resolved.

{% hint style="info" %}
Interfile analysis in Snyk Code is available for all supported languages.
Interfile analysis in Snyk Code is available for all supported languages except COBOL.

For Snyk Open Source, only official releases are tracked. Commits, including into the default branch, are not identified unless included in an official release or tag.

Expand Down
6 changes: 6 additions & 0 deletions discover-snyk/whats-new.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,12 @@ nav_context: new

The most recent updates include significant changes to the user docs, such as features added or removed, structural changes that affect how you find relevant information, and other improvements to enhance your interaction with the Snyk knowledge base.

## August 2026

### Snyk supported languages

* Snyk Code support for COBOL is now generally available, on all plans, across SCM integrations and the Snyk CLI, IDE, and CI/CD. Visit [COBOL](https://docs.snyk.io/supported-languages/supported-languages-list/cobol) and [COBOL rules](https://docs.snyk.io/scan-with-snyk/snyk-code/snyk-code-security-rules/cobol-rules) for more details.

## July 2026

### Evo by Snyk
Expand Down
2 changes: 1 addition & 1 deletion ...snyk-code/manage-code-vulnerabilities/fix-code-vulnerabilities-automatically.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,7 +18,7 @@ Snyk Agent Fix uses an agentic architecture that combines Snyk proprietary secur
* Dynamic few-shot prompting: Instead of relying on fine-tuning, the architecture uses the Snyk database of more than 35,000 expert-written fixes to provide real-world context to the LLM during inference. Every sample includes vulnerable code from real open-source projects and fixes written by Snyk security experts.
* Agentic retries: If a generated fix fails a Snyk Code scan, the system analyzes the error, feeds it back into the model, and generates a corrected version.

Snyk Agent Fix remediates vulnerabilities across your entire stack without language-specific fine-tuning. By using a prompt-based agentic reasoning model, Snyk Agent Fix supports all languages supported by Snyk Code: Apex, C, C++, C#, Go, Java, JavaScript, PHP, Python, Ruby, Swift, and TypeScript.
Snyk Agent Fix remediates vulnerabilities across your stack without language-specific fine-tuning. By using a prompt-based agentic reasoning model, Snyk Agent Fix supports every language that Snyk Code supports. For the current list, see [Supported languages, package managers, and frameworks](https://app.gitbook.com/s/L7HyJj9FsK1W4pNt8Gzl/supported-languages/supported-languages-package-managers-and-frameworks).

## How Snyk Agent Fix works

Expand Down
6 changes: 3 additions & 3 deletions scan-fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -13,10 +13,10 @@ This page lists all security rules used by Snyk Code when scanning your source c

Each rule includes the following information.

* Rule Name: The Snyk name of the rule.
* **Rule Name**: The Snyk name of the rule.
* **Languages**: The programming languages to which this specific rule applies. Note that there might be two rules with the same name that apply to different languages.
* **CWE(s):** The [CWE numbers](https://cwe.mitre.org/) that are covered by this rule.
* **Security Categories**: The [OWASP Top 10 ](https://owasp.org/Top10/)(2021 edition) category to which the rule belongs to, if any, and if it is included in [SANS 25](https://www.sans.org/top25-software-errors/).
* **CWEs**: The [CWE numbers](https://cwe.mitre.org/) the rule covers.
* **Security Categories**: The [OWASP Top 10](https://owasp.org/Top10/2025/) (2025 edition) category the rule maps to, when applicable. This column also notes whether the rule appears in the [CWE Top 25](https://cwe.mitre.org/top25/), and any applicable [OWASP API Security Top 10](https://owasp.org/API-Security/editions/2023/en/0x11-t10/) (2023) or [OWASP Mobile Top 10](https://owasp.org/www-project-mobile-top-10/) (2024) categories.

{% hint style="info" %}
\* XML listed in the language column applies only to NuGet XML files.&#x20;
Expand Down
49 changes: 24 additions & 25 deletions ...fix-and-prevent/scan-with-snyk/snyk-code/snyk-code-security-rules/apex-rules.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -8,29 +8,28 @@ nav_context: agnostic
Each rule includes the following information.

* **Rule Name**: The Snyk name of the rule.
* **CWE(s)**: The [CWE numbers](https://cwe.mitre.org/) that are covered by this rule.
* **Security Categories**: The [OWASP Top 10](https://owasp.org/Top10/) (2025 edition) category to which the rule belongs to, if any, and if it is included in [SANS 25](https://www.sans.org/top25-software-errors/).
* **Autofixable**: Security rules that are autofixable by Snyk Agent Fix. This information is included only for the supported programming languages.
* **CWEs**: The [CWE numbers](https://cwe.mitre.org/) the rule covers.
* **Security Categories**: The [OWASP Top 10](https://owasp.org/Top10/2025/) (2025 edition) category the rule maps to, when applicable. This column also notes whether the rule appears in the [CWE Top 25](https://cwe.mitre.org/top25/), and any applicable [OWASP API Security Top 10](https://owasp.org/API-Security/editions/2023/en/0x11-t10/) (2023) or [OWASP Mobile Top 10](https://owasp.org/www-project-mobile-top-10/) (2024) categories.

| Rule Name | CWE(s) | Security Categories | Autofixable |
| ------------------------------------------------------------ | ---------------- | ---------------------- | ----------- |
| Access Violation | CWE-284, CWE-285 | OWASP:A01 | Yes |
| Clear Text Sensitive Storage | CWE-200, CWE-312 | OWASP:A01, OWASP:A04 | Yes |
| Command Injection | CWE-78 | Sans Top 25, OWASP:A03 | Yes |
| Improper Access Control: Email Content Injection | CWE-284 | OWASP:A01 | Yes |
| Use of Hardcoded Credentials | CWE-798, CWE-259 | Sans Top 25, OWASP:A07 | Yes |
| Use of Hardcoded Passwords | CWE-798, CWE-259 | Sans Top 25, OWASP:A07 | Yes |
| Hardcoded Secret | CWE-547 | OWASP:A05 | Yes |
| Use of Password Hash With Insufficient Computational Effort | CWE-916 | OWASP:A02 | Yes |
| Insecure Data Transmission | CWE-319 | OWASP:A02 | Yes |
| Open Redirect | CWE-601 | OWASP:A01 | Yes |
| Cross-site Scripting (XSS) | CWE-79 | Sans Top 25, OWASP:A03 | Yes |
| Regular expression injection | CWE-400, CWE-730 | None | Yes |
| SOQL Injection | CWE-89 | Sans Top 25, OWASP:A03 | Yes |
| SOSL Injection | CWE-89 | Sans Top 25, OWASP:A03 | Yes |
| Server-Side Request Forgery (SSRF) | CWE-918 | Sans Top 25, OWASP:A10 | Yes |
| Unverified Password Change | CWE-620 | OWASP:A07 | Yes |
| Unsafe SOQL Concatenation | CWE-89 | Sans Top 25, OWASP:A03 | Yes |
| Unsafe SOSL Concatenation | CWE-89 | Sans Top 25, OWASP:A03 | Yes |
| Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | CWE-614 | OWASP:A05 | Yes |
| XML Injection | CWE-91 | OWASP:A03 | Yes |
| Rule Name | CWEs | Security Categories |
| ------------------------------------------------------------ | ---------------- | -------------------------------------------------------------------- |
| Access Violation | CWE-284, CWE-285 | CWE Top 25, OWASP:A01:2025, OWASP-API:API1:2023, OWASP-API:API5:2023 |
| Clear Text Sensitive Storage | CWE-200, CWE-312 | CWE Top 25, OWASP:A01:2025, OWASP:A06:2025, OWASP-API:API10:2023 |
| Command Injection | CWE-78 | CWE Top 25, OWASP:A05:2025 |
| Improper Access Control: Email Content Injection | CWE-284 | CWE Top 25, OWASP:A01:2025 |
| Use of Hardcoded Credentials | CWE-798, CWE-259 | OWASP:A07:2025 |
| Use of Hardcoded Passwords | CWE-798, CWE-259 | OWASP:A07:2025 |
| Hardcoded Secret | CWE-547 | OWASP:A02:2025 |
| Use of Password Hash With Insufficient Computational Effort | CWE-916 | OWASP:A04:2025 |
| Insecure Data Transmission | CWE-319 | OWASP:A04:2025, OWASP-API:API8:2023, OWASP-API:API10:2023 |
| Open Redirect | CWE-601 | OWASP:A01:2025 |
| Cross-site Scripting (XSS) | CWE-79 | CWE Top 25, OWASP:A05:2025 |
| Regular expression injection | CWE-400, CWE-730 | OWASP-API:API4:2023 |
| SOQL Injection | CWE-89 | CWE Top 25, OWASP:A05:2025 |
| SOSL Injection | CWE-89 | CWE Top 25, OWASP:A05:2025 |
| Server-Side Request Forgery (SSRF) | CWE-918 | CWE Top 25, OWASP:A01:2025, OWASP-API:API7:2023 |
| Unverified Password Change | CWE-620 | OWASP:A07:2025 |
| Unsafe SOQL Concatenation | CWE-89 | CWE Top 25, OWASP:A05:2025 |
| Unsafe SOSL Concatenation | CWE-89 | CWE Top 25, OWASP:A05:2025 |
| Sensitive Cookie in HTTPS Session Without 'Secure' Attribute | CWE-614 | OWASP:A02:2025 |
| XML Injection | CWE-91 | OWASP:A05:2025 |
Loading
Loading