Snyk for Swift and Objective-C

Snyk offers security scanning to test your Projects for vulnerabilities, both from the Snyk CLI and the Snyk Web UI, using different Snyk Integrations.

Features of Snyk for Swift and Objective-C

Some features might not be available, depending on your pricing plan. See pricing plans for more details.

Package managers / Features	CLI support	Git support	License scanning	Fix PRs
Cocoapods	✔︎	✔︎	✔︎
Swift Package Manager	✔︎		✔︎

Snyk CLI for Swift and Objective-C Projects (CI/CD)

The way Snyk analyzes and builds the dependency tree varies depending on the language and package manager of the Project.

After Snyk has built the tree, Snyk uses the vulnerability database to find vulnerabilities in any packages in the dependency tree.

Prerequisites for CLI for Swift and CocoaPods

• Ensure you have installed the relevant package manager before using the Snyk CLI.

• Ensure you have included the relevant manifest files supported by Snyk before testing.

• Install and authenticate the Snyk CLI to analyze projects from your local environment. For more information about Snyk CLI see Getting started with the CLI.

Swift Package Manager and Snyk CLI

A Package.swift file must be present for the Snyk CLI to discover the Project.

To build the dependency graph, Snyk uses the swift package show-dependencies command.

There are some limitations to using the Snyk CLI with Swift Package Manager Projects.

• Only Projects using Swift 3.0 or higher are supported.

• Swift Package Manager supports pre-processing and post-processing. In the case of post-processing, custom commands can add extra dependencies. Detecting such dependencies is not supported.

CocoaPods and Snyk CLI

To build the dependency graph, Snyk examines the Podfile and Podfile.lock files.

When working with Swift and Objective-C projects from the Snyk CLI, you can prevent testing any lock files that are out-of-sync using the following option: --strict-out-of-sync=true|false

For details, see Option for CocoaPods projects in the snyk test help.

Git services for Swift and Objective-C

Swift Package Manager and Git

Scanning Swift Package Manager Projects via Git import is not currently supported.

CocoaPods and Git

To test your Projects, Snyk analyzes the Podfile and Podfile.lock files.

Projects managed by CocoaPods can be imported from any of the Git repositories that Snyk supports.