Swift / Objective-C (iOS)
Review Swift and Objective-C source and binary scanning support in JFrog Xray.
Introduction
JFrog Xray provides security and compliance analysis for Swift and Objective-C applications on iOS and macOS throughout the software development lifecycle. This page describes the supported scan contexts, capabilities, and dependency analysis available for Swift and Objective-C.
Capabilities
The following capabilities are available for Swift and Objective-C.
| Capability | Source Code Scanning | Binary Scanning |
|---|---|---|
| Vulnerability Matching (CVEs) |  | |
| License Detection | | |
| Malicious Package Detection |  | |
| Operational Risk | | |
| Smart Remediation | | |
Software Composition Analysis (SCA) isn't currently available for Swift and Objective-C source code scanning. For more information, see Scan Your Source Code.
Which files a source scan reads depends on the scan method. For those differences, see Source Scanning Engines and Frogbot Versions.
Supported Files
| Package Manager | Supported Files | Available with |
|---|---|---|
| CocoaPods | supported | Default jf audit |
| SwiftPM | supported | Default jf audit |
| CocoaPods | Podfile.lock – Flat list, no subspecs, no platform distinction | Frogbot V3 |
| SwiftPM | Package.resolved – v1 and v2 format, pinned version from state.version | Frogbot V3 |
Dependency Graph
| Package Manager | Dependency Graph |
|---|---|
| CocoaPods | Flat – No dependency tree, subspecs not tracked |
| SwiftPM | Flat – From Package.resolved, no dependency tree |
Binary scanning analyzes built Swift and Objective-C artifacts stored in JFrog Artifactory repositories, extracting package metadata from the artifact format itself. For more information, see Scan Your Binaries.
Supported Files
The following files are supported for Swift and Objective-C binary scanning.
| Package Manager | Supported Files |
|---|---|
| CocoaPods | CocoaPod packages |
| SwiftPM | Swift packages |
Related Topics
Updated 26 days ago