Skip to content
vetkitChecksChangelogDocumentation

vetkit.swift.storage.file-protection-disabled

A file is written with Data Protection explicitly disabled (.noFileProtection / FileProtectionType.none). Its contents stay readable while the device is locked and from unencrypted backups.

Last updated:

Suite: Security

swift

A file is written with Data Protection explicitly disabled (.noFileProtection / FileProtectionType.none). Its contents stay readable while the device is locked and from unencrypted backups.

Category: SECURITY · Engine rule severity: WARNING

How to fix it

Use .completeFileProtection (or .completeFileProtectionUnlessOpen for files written in the background).

References

Source: packages/engine/rules/sast/swift.yml.

Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.