Dart and Flutter packaging

Veracode requires your Flutter artifacts to meet specific packaging and compilation requirements before scanning.

For instructions for other platforms, see Supported languages and platforms.

You can analyze artifacts using Veracode Static Analysis, if you have a license.

Automated packaging

Auto-packaging automates the packaging process for Dart and Flutter projects.

Veracode supports mobile artifacts for iOS and Android written in Flutter and packaged as an iOS Archive (IPA) or an Android Package (APK).

Veracode requires a debug build of your Flutter artifacts.

Language	Platform	Supported versions
Dart	Android, iOS	2.17, 2.18, 2.19, 3.0, 3.1, 3.2, 3.3, 3.4, 3.5, 3.6
Flutter	Android, iOS	3.0, 3.3, 3.7, 3.10, 3.13, 3.16, 3.19, 3.22, 3.24, 3.27

Build your artifacts using the Flutter CLI tool. After you build them, submit the output file to Veracode for scanning.

Review your build system configurations, as you might need to use additional parameters or settings not covered in this section.

To build an iOS Archive file, run the following command:

flutter build ipa --debug

The iOS Archive is available in the build/ios/ipa folder.

To build an Android APK file, run the following command:

flutter build apk --debug

The Android Package file is available in the build/app/outputs/flutter-apk folder.