Veracode's iOS analysis requires that applications be packaged using Bitcode, a compliation setting that Apple has been recommending developers use for years.

In some cases, apps might be using third party libraries that are not compiled with Bitcode enabled. Most of the time, vendors are happy to provide an updated version of the library built Bitcode. In the rare cases where the library cannot be provided in Bitcode, there are some potential workarounds so the application can be packaged appropriately for a static scan. The attached document provides Veracode recommendations for working around these third party libraries.