Capabilities

Swift

Swift package analysis and vulnerability scanning capabilities

Package analysis

Cataloger + EvidencePackage URL TypeLicenseDependenciesPackage Manager Claims
DepthEdgesKindsFilesDigestsIntegrity Hash
cocoapods-cataloger
Podfile.lock
pkg:cocoapodsTransitiveRuntime
swift-package-manager-cataloger
Package.resolved, .package.resolved
pkg:swiftTransitiveRuntime

Vulnerability scanning

Data SourceDisclosuresFixesTrack by
Source
Package
AffectedDateVersionsDate
National Vulnerability Database (NVD)

Grype Configuration
Configuration KeyDescription
match.stock.using-cpesUse CPE package identifiers to find vulnerabilities

Next steps