Kotlin setup instructions

Since Kotlin uses gradle and gradle supports Kotlin by default, you can use the general gradle approach.

The recommended way is to generate a Socket facts file with socket manifest gradle, which uses your local Gradle config to resolve the full dependency graph. See socket manifest gradle --help for more information (or this page).

After generating the manifest(s) you can create a report by running socket scan create in the same dir.

Reachability: For full application reachability scans, we recommend socket scan create --reach --dynamic-sbom-inference. Manifests are generated as part of the scan for every Gradle build under the scan target (not just the one at the root), and reachability is analyzed and reported per subproject. It works from the dependency graph gradle itself resolves, including where each dependency lives, so the analysis can reliably install the dependencies it needs.