Skip to main content

iOS packaging

This section explains how to package native iOS, iPadOS, watchOS, tvOS, and visionOS applications developed with Objective-C and Swift. Veracode analyzes all application components that you submit, including standalone frameworks and extensions. After you complete a prescan, you can select these components as separate modules.

Veracode only scans iPhone, iPad, Apple Watch, Apple TV, or Vision Pro applications compiled with debug symbols. When you provide debug iOS applications, Veracode can tell you about source files with flaws, and their location and code line number.

Your applications must meet specific packaging and compilation requirements before you can submit them for Veracode Static Analysis and Veracode Software Composition Analysis.

For SCA agent-based scan requirements, see Using Veracode SCA with Programming Languages.

Veracode also supports the following mobile frameworks:

If you are using any of these frameworks please follow the instructions on the respective pages and do not follow the guidance for native iOS apps.

Veracode does not support other cross-platform development frameworks.

Required files

Veracode requires that you include all binary executables and required libraries of the application for scanning.

Supported iOS platforms and compilers

LanguagePlatformVersionIDE
Objective-C, C/C++, Swift 5.xiOSiOS 11–17
iPadOS 13.1-17
watchOS 6–10
tvOS 14–17
visionOS 1
Xcode 12.x–15.x
NOTE Initial support for iOS 17, iPadOS 17, watchOS 10, tvOS 17, visionOS 1.

The following sections show you how to use Xcode and xcodebuild to configure settings Veracode uses to scan your iOS application.