Composer config for http-basic about composer-install

[llaville]

@ramsey Perharps a NOTE (section about authentication) in the README page will be welcome !

[ramsey]

I'm not sure this should be a concern of this action.

Try out something like this, and let me know if it works for you:

- name: "Configure Composer"
  run: |
    composer config http-basic.nova.laravel.com ${NOVA_USERNAME} ${NOVA_PASSWORD}
- uses: "ramsey/composer-install@v2"

[llaville]

If I may, I had today with same kind of problem. I wanted to access one of my fork from another project on GitHub.

After reading :

• https://getcomposer.org/doc/articles/authentication-for-private-packages.md#authentication-using-the-composer-auth-environment-variable
• https://www.previousnext.com.au/blog/managing-composer-github-access-personal-access-tokens

I suggest to use the COMPOSER_AUTH env var strategy

In my case, I've added in my GitHub workflow :

        env:
            COMPOSER_AUTH: '{"github-oauth": {"github.com": "${{ secrets.CI_TOKEN }}"}}'

Using https://getcomposer.org/doc/articles/authentication-for-private-packages.md#http-basic is quite the same (just adjust the json syntax and secrets used