CodeSentry: On-Premise System Requirements & Supported File Formats

Overview

CodeSentry is built as a SaaS hosted solution but can be installed locally within your own domain if required. The on-premise installation uses Replicated and consequently the operating system and hardware requirements for CodeSentry are closely related to those for Replicated as described below. 

This information is applicable to CodeSentry version 4.2 and above.

Platform Support

It is important to note that CodeSentry can only be installed on Linux systems.

Hardware

Hardware requirements are specific to the workload running in the cluster but the following guidelines are recommended to support bare cluster installations.

Primary:

• Memory - recommended: 132GB, minimum: 100GB
• CPU - Intel Xeon® Platinum 8175M processors with Advanced Vector Extension (AVX-512) instruction set (or better).
  
  • Cores - recommended: 46 virtual cores, minimum: 38 virtual cores
• Disk - High-IOPS, low latency disks are required (SSD, non-NFS) - 4.5TB
  

Node:

• Memory - recommended: 96GB, minimum: 32GB
• CPU - recommended 16 virtual cores, minimum: 8 virtual cores
• Disk - 1.5TB

Performance

Typical performance, noted as number of targets scanned per hour, is calculated by scanning a variety of typical software packages. CodeSentry is capable of the following performance, depending upon hardware settings.

Supported File Formats

Analyzable File Type (mime type)	Typical File Extension	N-Day Shallow	Zero-Day Shallow	N-Day Deep	Zero-Day Deep
Android Dex	.dex
Android ODex	.odex
Java Archive (application/zip)	.jar
Java Class File	.class
Javascript files	.js
Javascript packages	.npm
Linux executable (application/x-executable)	none
Linux executable (application/x-pie executable)	none
Linux kernel	none
Linux kernel module	none
Linux shared library (application/x-sharedlib)	.so
Linux Object File * (application/x-object)	.o
MacOS executable or library (application/x-mach-binary)	none
Python files	.py
Python packages	.whl, .python
Windows dynamic linked library (application/x-dosexec)	.dll
Windows object file	.obj
Windows executable (application/x-dosexec)	.exe
Firmware files	various

* = Shallow zero-day analysis of a .o file will complete with scan status of "Done" but no findings will be detected.

Supported Firmware Formats

The following formats are supported

• File Formats
  • SREC
  • bFLT
  • base64
  • Intel HEX
  • uBoot
  • wim
• File Systems
  • JFFS2 (.img and .jffs2)
  • romfs
  • yaffs2
  • ubifs

Other Information

The following addition information can be found in the CodeSentry datasheet

• Software Bill of Materials (SBOM) Output
• Vulnerabilities and Checks Performed
• Security Attributes