Use environment variables, configuration files, or similar methods to configure the IP address instead of hard-coding it. If confidentiality isn’t required, prefer a domain name to allow destination changes without rebuilding the software.
// Test file: pass.swift// Expected annotations: 0importFoundation// Compliant: IP is loaded from a configuration objectletprimaryServer=configuration.serverIp// Exception: IPv4 loopback address for local developmentletlocalServer="127.0.0.1"// Exception: IPv4 documentation address from RFC 5737lettestNetServer="198.51.100.50"// Exception: IPv6 documentation address from RFC 3849letipv6Example="2001:db8:85a3::8a2e:370:7334"// A version number that looks like an IP but fails the validationletappVersion="Application version 3.1.123.900 is not an IP."
원활한 통합. Datadog Code Security 사용해 보기
Datadog Code Security
이 규칙을 사용해 Datadog Code Security로 코드 분석해 보기
이 규칙의 사용법
1
2
rulesets:- swift-security # Rules to enforce Swift security.
리포지토리 루트에서 위의 콘텐츠를 사용해 static-analysis.datadog.yml 생성
Datadog의 무료 IDE Plugins를 사용하거나 Code Security 스캔을 CI 파이프라인에 추가