DKulshreshtha171219 (Community Member) asked a question.
Veera code static analysis of .xcframework (iOS) and .aar (Android)
We have a SDK developed internally for Android and iOS platforms, which we are distributing in format of .xcframework (iOS) and .aar (Android) to our clients.
As part of one of our requirements the final xcframework and aar file needs to be statically analysed through Veera code. I have few related questions:
- What are the steps to prepare xcframework in iOS so that it can be statically analysed?
- What are the steps to prepare aar in Android so that it can be statically analysed?
- What is your recommendation of programming language in iOS with respect to code security and why: Swift or Objective C?
- We would be distributing xcframework after code signing it as recommended by apple here. Can it be statically analysed once signed?
- Out of the steps outlined by you as answers to questions 1, 2, 4, can there be a step which can lead to code decompilation if done by third party as recipient of framework?
.png){kind=logo}
Hi,
We already see that there is a open support case with the case number 00862697 and you will be assisted through the open case.
Regards,
Pranita
Veracode Inc.
It has been almost a week, no reply yet. Can you please reply here or on the support ticket?
Hi, The case has been picked up and the engineer will address your query. we apologise for the delay in the response.