iOS / iPadOS / Swift
16 items · source
Mobile Applications
- Verify sensitive credentials are stored in Keychain.
- Verify universal links/app links cannot hijack authentication flows.
- Verify Keychain accessibility class.
- Verify Keychain access groups.
- Verify App Transport Security remains enabled.
- Search
Info.plistfor ATS exceptions. - Inventory every WKWebView.
- Inventory Universal Links.
- Verify unsafe Swift/C/C++ interoperability.
- Verify secrets are not copied to the pasteboard unnecessarily.
Desktop Applications
- Verify Keychain access groups.
CI/CD & Supply Chain
- Run SCA against iOS/macOS dependencies.
Pre-Release Gates
- Apple App Store Connect credentials
- iOS/iPadOS binary audit complete.
AI-Generated Crypto, Dependency & Config Bugs
Review every AI-generated:
- Info.plist
Review Blind Spots
- Verify outdated Swift security APIs are not copied.
# iOS / iPadOS / Swift ## Mobile Applications * [ ] Verify sensitive credentials are stored in Keychain. * [ ] Verify universal links/app links cannot hijack authentication flows. * [ ] Verify Keychain accessibility class. * [ ] Verify Keychain access groups. * [ ] Verify App Transport Security remains enabled. * [ ] Search `Info.plist` for ATS exceptions. * [ ] Inventory every WKWebView. * [ ] Inventory Universal Links. * [ ] Verify unsafe Swift/C/C++ interoperability. * [ ] Verify secrets are not copied to the pasteboard unnecessarily. ## Desktop Applications * [ ] Verify Keychain access groups. ## CI/CD & Supply Chain * [ ] Run SCA against iOS/macOS dependencies. ## Pre-Release Gates * [ ] Apple App Store Connect credentials * [ ] iOS/iPadOS binary audit complete. ## AI-Generated Crypto, Dependency & Config Bugs Review every AI-generated: * [ ] Info.plist ## Review Blind Spots * [ ] Verify outdated Swift security APIs are not copied. 16 items · https://github.com/FarzamHabibi/pre-production-checklist · CC BY 4.0