News for hackers. Stuff that matters.

A comment on GitHub has completed its acquisition of NPM. Parent comment

Re:GitHub has completed its acquisition of NPM by oaiey on Thursday April 16, 2020 @12:54AM (#22886199)
Speaking of... The NuGet registry in GitLab deserves an option to run without authentication from other builds and/or the "public" accessing it. Currently, it does not even handle the build job token and I have to cross connect builds using my personal access token (which then again is accessible to other maintainers of a repo).
[ Parent | on HN ]
Re:GitHub has completed its acquisition of NPM by tr-gitlab on Thursday April 16, 2020 @09:44AM (#22889259)
GitLab PM here - Agreed that is an important feature and one we have scheduled for milestone 13.1 which will be released in June 2020.

As a workaround, you can add your access token as an environment variable and use that to publish/install packages via CI/CD.

And if you are interested in contributing to GitLab that issue is a great way get started.

[ Parent | on HN ]
Re:GitHub has completed its acquisition of NPM by sytse on Thursday April 16, 2020 @12:27PM (#22891001)
The issue for this is at https://gitlab.com/gitlab-org/gitlab/issues/36424
[ Parent | on HN ]
Re:GitHub has completed its acquisition of NPM by oaiey on Monday April 20, 2020 @10:09AM (#22923915)
That is what I did. However the secret is then available to all admins. Anyway. Good to know it is scheduled.
[ Parent | on HN ]
Re:GitHub has completed its acquisition of NPM by blyry on Thursday April 16, 2020 @08:36AM (#22888714)
We stopped using gitlabs artifact repositories for this exact reason!
[ Parent | on HN ]
Re:GitHub has completed its acquisition of NPM by tr-gitlab on Thursday April 16, 2020 @09:45AM (#22889266)
We'd love for you to try again. We do support using the job token with our NPM, Maven and Conan repositories. What do you currently use?
[ Parent | on HN ]