Native languages round 2: SWift!

[commjoen]

This challenge is about finding hardcoded secrets in binaries in Swift! With this we want to explain to our users that no language or binary is safe to just put the secret in offline. For this you need to:

• Add a swift binary to the wrongsecrets/binaries repowith crosscompiling for the various OSes
• Add a challenge here that uses the binary (See contributing.md and the code of the other binary challenges).

[commjoen]

https://github.com/compnerd/gha-setup-swift and https://github.com/marketplace/actions/install-swift-on-linux for github actions to build for linux and windows

[commjoen]

https://www.swift.org/documentation/server/guides/building.html

[commjoen]

OWASP/wrongsecrets-binaries#50 is almost complete: is just needs alpine support in order to build out the challenge.

[commjoen]

In order to continue this challenge, we will first have to wait for Alpine support. Let's wait for swiftlang/swift#62245 to be completed. We contacted the developer on whether there is a way to use his work already to compile our OWASP/wrongsecrets-binaries#50 for Alpine.

[commjoen]

Status update: I did not find any way to use the code on all designated platforms. I could not make run swift on alpine. We tested various glibc methods on musl as well and they don’t work either. Maybe fully static linking could do?