SwifterPM opens a "use your confidential information in your keychain" popup when installing dependencies

Metadata

Source

tuist/tuist #13681

Updated

Sep 28, 2026

Details

What happened?

After updating to Tuist 4.210.0, when running tuist install, I have a macOS popup that says “tuist wants to use your confidential information stored in github?com in your keychain. To allow this, enter the “login” keychain password.”.

It’s because I have private repos in my dependencies that are under HTTPS authentication. There is one popup for each dependency, which is annoying since I need to enter my password for each one. I am HTTPS authenticated using the gh CLI.

Building with TUIST_USE_SWIFTERPM=0 makes the popup go away.

How do we reproduce it?

Add a private, HTTPS based repo to the package dependencies (not SSH)
run tuist install

Error log

There are no error messages.

macOS version

26.7

Tuist version

4.210.0

Xcode version

27.0

Flights

Investigate, reproduce, or fix this item in an isolated repository. Each Flight preserves its outcome and agent session.

New Flights are paused Configure model inference, GitHub, and a sandbox provider to start another Flight. Existing results remain available below.

No Flights yet

Start a Flight and preserve its objective, outcome, and session here.

Comments