I have been researching some SAST providers for a Xamarin application I am working on. I've found a couple providers that can do static analysis of C# source code, but I haven't come across any that mention Xamarin as a supported framework.
I guess I could drop in just my shared code PCL and do static analysis on that (since its just C#), but it would be nice to have a solution that could accept both the IPA and APK as well as the entire Xamarin source, instead of just the PCL code.
I've checked out Fortify on Demand by HP, CheckmarxSAST, Parasoft dotTest so far.
Are there any recommended SAST providers for Xamarin apps? Are there any that specifically mention Xamarin?