wehub-resource-sync
d48cda4081
CI / Test (ubuntu-latest, Node 18.x, bun) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, npm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, pnpm) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 18.x, yarn) (push) Failing after 15m1s
CI / Test (ubuntu-latest, Node 20.x, bun) (push) Failing after 17m13s
CI / Test (ubuntu-latest, Node 20.x, npm) (push) Failing after 18m42s
CI / Test (ubuntu-latest, Node 20.x, pnpm) (push) Failing after 15m0s
CI / Test (ubuntu-latest, Node 20.x, yarn) (push) Failing after 49m44s
CI / Test (ubuntu-latest, Node 22.x, bun) (push) Failing after 51m55s
CI / Test (ubuntu-latest, Node 22.x, pnpm) (push) Failing after 21m57s
CI / Test (ubuntu-latest, Node 22.x, npm) (push) Failing after 37m39s
CI / Test (ubuntu-latest, Node 22.x, yarn) (push) Failing after 34m7s
CI / Validate Components (push) Failing after 37m15s
CI / Python Tests (push) Failing after 10m1s
CI / Security Scan (push) Failing after 10m1s
CI / Lint (push) Failing after 17m12s
CI / Coverage (push) Failing after 20m19s
CI / Test (macos-latest, Node 18.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 18.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 20.x, yarn) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, bun) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (macos-latest, Node 22.x, yarn) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, npm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, pnpm) (push) Has been cancelled
CI / Test (windows-latest, Node 22.x, yarn) (push) Has been cancelled
34 lines
1.4 KiB
Markdown
34 lines
1.4 KiB
Markdown
---
|
||
paths:
|
||
- "**/*.swift"
|
||
- "**/Package.swift"
|
||
---
|
||
# Swift セキュリティ
|
||
|
||
> このファイルは [common/security.md](../common/security.md) を Swift 固有のコンテンツで拡張します。
|
||
|
||
## シークレット管理
|
||
|
||
- 機密データ（トークン、パスワード、キー）には **Keychain Services** を使用する — `UserDefaults` は使わない
|
||
- ビルド時のシークレットには環境変数または `.xcconfig` ファイルを使用する
|
||
- ソースにシークレットをハードコードしない — 逆コンパイルツールで容易に抽出される
|
||
|
||
```swift
|
||
let apiKey = ProcessInfo.processInfo.environment["API_KEY"]
|
||
guard let apiKey, !apiKey.isEmpty else {
|
||
fatalError("API_KEY not configured")
|
||
}
|
||
```
|
||
|
||
## トランスポートセキュリティ
|
||
|
||
- App Transport Security（ATS）はデフォルトで強制される — 無効にしない
|
||
- 重要なエンドポイントには証明書ピンニングを使用する
|
||
- すべてのサーバー証明書を検証する
|
||
|
||
## 入力バリデーション
|
||
|
||
- 表示前にすべてのユーザー入力をサニタイズしてインジェクションを防止する
|
||
- 強制アンラップではなく、バリデーション付きの `URL(string:)` を使用する
|
||
- 外部ソース（API、ディープリンク、ペーストボード）からのデータは処理前に検証する
|