iOS packaging
This section explains how to package native iOS applications developed with Objective-C and Swift. Veracode analyzes all iOS application components that you submit, including standalone frameworks, extensions, and watchOS extensions. After you complete a prescan, you can select these components as separate modules.
Veracode only scans iPhone, iPad, or Watch applications compiled with debug symbols. When you provide debug iOS applications, Veracode can tell you about source files with flaws, and their location and code line number.
Your applications must meet specific packaging and compilation requirements before you can submit them for Veracode Static Analysis and Veracode Software Composition Analysis.
For SCA agent-based scan requirements, see Using Veracode SCA with Programming Languages.
Veracode also supports the following mobile frameworks:
- .NET MAUI
- Appcelerator Titanium
- Apache Cordova/Adobe PhoneGap
- Dart and Flutter
- Ionic
- React Native
- Xamarin
If you are using any of these frameworks please follow the instructions on the respective pages and do not follow the guidance for native iOS apps.
Veracode does not support other cross-platform development frameworks.
Required files
Veracode requires that you include all binary executables and required libraries of the application for scanning.
Supported iOS platforms and compilers
| Language | Platform | Version | IDE |
|---|---|---|---|
| Objective-C, C/C++, Swift 5.x | iOS | iOS 11–17 iPadOS 13.1-17 watchOS 6–10 tvOS 14–17 | Xcode 12.x–15.x |
| NOTE Initial support for iOS 17, iPadOS 17, watchOS 10, tvOS 17. |
The following sections show you how to use Xcode and xcodebuild to configure settings Veracode uses to scan your iOS application.