MASTG-TOOL-0133: Visual Studio Code (vscode)
Visual Studio Code is a code editor that offers various plugins useful for development and security testing. For example:
- SARIF Viewer: to work with and visualise SARIF files.
- Swift: for syntax support for the Swift programming language.
- Kotlin: for syntax support for the Kotlin programming language.
Techniques¶
MASTG-TECH-0132: Software Composition Analysis (SCA) of iOS Dependencies by Creating a SBOM MASTG-TECH-0133: Software Composition Analysis (SCA) of iOS Dependencies by Scanning Package Manager Artifacts
Demos¶
MASTG-DEMO-0052: Scanning Package Manager Artifacts for Insecure iOS Dependencies