COBOL support for Snyk Code now generally available
Snyk Code adds general availability SAST support for COBOL, enabling mainframe application scanning across CLI, IDE, and SCM integrations. Fixed-format COBOL is now scanned automatically alongside other languages with real-time security feedback.
COBOL support becomes generally available on August 17, 2026. Snyk Code brings SAST to your mainframe applications, scanning fixed-format COBOL across the integrations you already use, so mainframe code receives the same real-time, in-workflow security coverage as the rest of your stack. Detection is tuned with feedback from design-partner environments across large finance and mainframe estates.
What you can do
Scan COBOL applications for security issues alongside your other languages, with no separate workflow.
Catch real, actionable findings, with COBOL engagement in line with mainline languages.
Bring mainframe AppSec into the CLI, IDE, SCM, and PR-check integrations your teams already use.
Scope change at general availability
At general availability, the COBOL preview flag is removed and COBOL scanning runs automatically across all repositories. You may see new findings in repositories that were not scanned during the preview.
For design-partner customers
Thank you for shaping COBOL support during early access.
Source: original entry ↗
More from Snyk
Follow Snyk to get its new changes in your feed and email digest.
Snyk CLI v1.1308.1 released
HTML report output is now available by default without preview features, and project names are consistently displayed in test summaries. This release also patches multiple security vulnerabilities.
Pending ignore requests now visible on Project's Issues page
Issues with pending ignore requests now display a clear "Pending Ignore Request" status on the Issues page and in issue details, with filtering support. The issues API now reports pending as part of an issue's ignore status for programmatic distinction of open, pending, and ignored findings.
Snyk Code October update: improved analysis and more findings
Snyk Code now analyzes projects more deeply and accurately across Java, Kotlin, Go, TypeScript, JavaScript, Python, C#, PHP and Ruby, with significantly more findings reported. Improvements include better import resolution via config files, corrected PHP typing, expanded library coverage, new vulnerability detection rules, and enhanced template and serverless application analysis.