Build Swift packages with an existing continuous integration setup and prepare apps that consume package dependencies within an existing CI pipeline.
Continuous integration (CI) is the process of automating and streamlining the building, analyzing, testing, archiving, and publishing of your apps to ensure that they're always in a releasable state. Most projects that contain or depend on Swift packages don't require additional configuration.
To ensure the CI workflow’s reliability, make sure it uses the appropriate version of package dependencies.
SwiftPM records the result of dependency resolution in Package.resolved (at the top-level of the package) and it's used when performing dependency resolution (rather than having SwiftPM searching the latest eligible version of each package). Running swift package update updates all dependencies to the latest eligible versions and updates the Package.resolved. You can commit Package.resolved to your Git repository to ensure it’s always up-to-date on the CI environment to prevent the CI from building your project with unexpected versions of package dependencies. Otherwise you can choose to add Package.resolved file to .gitignore file and have swift package resolve command in charge of resolving the dependencies (swift package resolve is invoked by most SwiftPM commands).
To resolve package dependencies that require authentication, such as private packages, you need to provide credentials to your CI setup. SwiftPM honors the machine's SSH configuration - there's no additional setup required on SwiftPM side. For private package, use the SSH-based Git URLs and configure SSH credentials. You may also need to set up a known_hosts file in the ~/.ssh directory of the user that runs your CI tasks.
CI services like Jenkins, Github Action, TravisCI, CircleCI provide ways to set up SSH keys or other techniques to access private repositories. Since SwiftPM uses git to clone the repositories there's no additional setup required on SwiftPM side, and SwiftPM will honor the machine's SSH and Git configuration.
When building on macOS based CI hosts you can use the command-line tool xcodebuild.
xcodebuild uses Xcode's built-in Git tooling to connect to repositories. In many cases, you don't need to make changes to how xcodebuild connects to them. However, some use cases require you use the configuration you set for your Mac's Git installation (Some examples: URL remapping, Proxy configurations, Advanced SSH configurations). To have xcodebuild use your Mac's Git installation and configuration instead of Xcode's built-in Git tooling, pass -scmProvider system to the xcodebuild command.
For more information on using xcodebuild in continuous integration workflows, visit this link.