Skip to content
vetkitChecksChangelogDocumentation

vetkit.ios.entitlements.get-task-allow

A non-debug entitlements file grants get-task-allow. Builds signed with it let other processes attach a debugger and read or modify the app's memory.

Last updated:

Suite: Security

regex

A non-debug entitlements file grants get-task-allow. Builds signed with it let other processes attach a debugger and read or modify the app's memory.

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Remove the key; Xcode adds it automatically to development-signed builds and strips it for distribution.

References

Source: packages/engine/rules/sast/mobile.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.