Swift / Objective-C (iOS)
Introduction
JFrog Xray provides security and compliance analysis for Swift and Objective-C (iOS/macOS) applications throughout the software development lifecycle. This page describes the supported scan contexts, capabilities, and dependency analysis available for Swift/Objective-C.
Capabilities
| Capability | Source Code Scanning | Binary Scanning |
|---|---|---|
| Vulnerability Matching (CVEs) | ✅ | ✅ |
| License Detection | ✅ | ✅ |
| Malicious Package Detection | ❌ | ❌ |
| Operational Risk | ❌ | ❌ |
| Smart Remediation | ❌ | ❌ |
SCA capabilities are not currently available for Swift/Objective-C in the source code scanning context.
Supported Files
| Package Manager | Supported Files |
|---|---|
| CocoaPods | Podfile.lock – Flat list, no subspecs, no platform distinction |
| SwiftPM | Package.resolved – v1 and v2 format, pinned version from state.version |
Dependency Graph
| Package Manager | Dependency Graph |
|---|---|
| CocoaPods | ❌ Flat – No dependency tree, subspecs not tracked |
| SwiftPM | ❌ Flat – From Package.resolved, no dependency tree |
Updated 3 months ago
Did this page help you?