VeryGoodOpenSource / VeryGoodOpenSource/very_good_workflows

feat: Add support for custom package repositories

Open
#303 0 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

feature
Dominant language
JavaScript
Stars
335
Forks
89
Avg merge
17h 19m
Merged PRs (30d)
20

Description

Description

Hi there 👋

According to https://dart.dev/tools/pub/custom-package-repositories, you're able to use pub dependencies hosted on repositories that are not pub.dev using the dart pub token add _____ command. Unfortunately, our workflows don't seem to support this credential type.

It would be awesome if we could support it, but I see a few big questions:

  1. You'd only want to run that command if you have tokens to pass in. (should be accomplishable with a if statement on that step.)
  2. You'd want to be able to pass in a list of tokens in the off chance you're using multiple pub dependencies. (Not sure if this is possible.)
  3. Each token needs the token itself AND the site it applies to, so a simple string probably won't work. Maybe a map with two values?

Not sure how we can support this, but since it's a part of the Dart CLI it's probably important to at least consider it. I personally ran into this issue working on a side project and it's led me away from the workflows.

Happy to chat further :)

Requirements
  • All CI/CD checks are passing.
  • There is no drop in the test coverage percentage.
Additional Context

No response

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start by reviewing the repository's reusable workflow definitions and how they currently provide credentials for Dart or pub dependencies. Check the Dart CLI behavior for dart pub token add, including conditional execution and multiple repository/token pairs. Done means custom package repository tokens are supported without exposing secrets, and CI/CD checks and coverage remain passing.

Written by the indexing model from the issue text.

Assessment

Tech stack
github-actions
Domain
ci-cd
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.