dependabot / dependabot/dependabot-core

Support auth.json for private composer repository

Open
#9,115 7 comments 9 reactions 1 assignee Assigned to @Copilot View on GitHub
L: php:composer T: feature-request
Dominant language
Ruby
Stars
5.8k
Forks
1.5k
Avg merge
2d 18h
Merged PRs (30d)
149

Description

### Is there an existing issue for this?

- [X] I have searched the existing issues

### Feature description

Regarding the latest feature request (#9093) it would probably be good to support composers `auth.json`[^1] file format for private repositories.

```
version: 2
registries:
private-packages:
type: composer-repository
url: https://
file: ${{secrets.COMPOSER_AUTH_JSON}}
```

The `COMPOSER_AUTH_JSON` secret would contain the JSON file content. This is also the common way to provide the file to any GitHub actions.

[^1]: https://getcomposer.org/doc/articles/authentication-for-private-packages.md#authentication-in-auth-json-per-project

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.