dependabot / dependabot/dependabot-core
Support auth.json for private composer repository
- Dominant language
- Ruby
- Stars
- 5.8k
- Forks
- 1.5k
- Avg merge
- 2d 18h
- Merged PRs (30d)
- 149
Description
### Is there an existing issue for this?
- [X] I have searched the existing issues
### Feature description
Regarding the latest feature request (#9093) it would probably be good to support composers `auth.json`[^1] file format for private repositories.
```
version: 2
registries:
private-packages:
type: composer-repository
url: https://
file: ${{secrets.COMPOSER_AUTH_JSON}}
```
The `COMPOSER_AUTH_JSON` secret would contain the JSON file content. This is also the common way to provide the file to any GitHub actions.
[^1]: https://getcomposer.org/doc/articles/authentication-for-private-packages.md#authentication-in-auth-json-per-project
Contributor guide
Assessment
This issue has not been assessed yet.