Starting macOS Applications Analysis

In DerScanner, the following methods of importing macOS applications for analysis are implemented.

• Upload file from a local device Upload a source code archive or the application executable file (.app file, packed in a ZIP archive: binary files of x86 and x64 architectures are supported).

• Upload via link Specify a path to the repository with project source code (Git and Subversion are supported). DerScanner’s server should have access to the specified repository. Via the link, it should be possible to download code from the repository using the git clone or svn export command. Example links:

  • https://gitlab.example.com/myproject.git (Git)
  • ssh://gitlab.example.com/myproject (Git)
  • https://svn.example.com/mysvnproject/trunk/ (Subversion)
  • svn://svn.example.com/mysvnproject/branches/my-branch (Subversion)
  • svn+ssh://svn.example.com/mysvnproject/ (Subversion)

To upload code from a private repository, specify your username and password. For more information about analysis settings see Settings.

A list of supported file extensions can be found in the Appendix. To analyze nested archives, select the Analyze libraries and nested archives option.

To get an executable file supported by the system, you should:

1. Build an application in Xcode and find a directory with an .app extension.
2. Pack it into a ZIP archive.

When analyzing source code (either as an archive or by link to a repository), the project should be built without errors via standard Xcode (version <= 11.5.) build commands.

For advanced analysis settings click Show Settings. For details, see General.