everything-claude-code / rules

---
description: "Swift security extending common rules"
globs: ["**/*.swift", "**/Package.swift"]
alwaysApply: false
---
# Swift Security

> This file extends the common security rule with Swift specific content.

## Secret Management

- Use **Keychain Services** for sensitive data (tokens, passwords, keys) -- never `UserDefaults`
- Use environment variables or `.xcconfig` files for build-time secrets
- Never hardcode secrets in source -- decompilation tools extract them trivially

```swift
let apiKey = ProcessInfo.processInfo.environment["API_KEY"]
guard let apiKey, !apiKey.isEmpty else {
    fatalError("API_KEY not configured")
}
```

## Transport Security

- App Transport Security (ATS) is enforced by default -- do not disable it
- Use certificate pinning for critical endpoints
- Validate all server certificates

## Input Validation

- Sanitize all user input before display to prevent injection
- Use `URL(string:)` with validation rather than force-unwrapping
- Validate data from external sources (APIs, deep links, pasteboard) before processing

More agent context in tpavanipradeep/everything-claude-code

81 other files this repository gives its agents, the first 60 shown.

Also found in 19 other repositories

The same file, byte for byte, in the weekly crawl of public GitHub; the 10 with the most stars.

• affaan-m/ECC246k
• loulanyue/awesome-claude-notes272
• mturac/everything-openai-codex89
• mit-network/everything-claude-code76
• Fmarzochi/EGC52
• ysyecust/everything-claude-code44
• j7-dev/everything-github-copilot19
• Infopibe/everything-claude-code8
• yapota2018/affaan-m-everything-claude-code4
• ArogyaReddy/https-github.com-affaan-m-everything-claude-code12