Skip to content

Commit 7fbb4d2

Browse files
committed
Update Azure NPM secret names
Turns out Dependabot-triggered Actions use Dependabot secrets, not Actions secrets. In the Action, the password must be base64 encoded, but in the Dependabot configuration it must not, so we need three secrets: * GitHub Action secret: base64 encoded password * Dependabot secret: base64 encoded password * Dependabot secret: plain text password There's no reasonable way to base64 encode the secret on-the-fly. See: https://docs.github.com/en/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
1 parent ca404ea commit 7fbb4d2

File tree

3 files changed

+5
-5
lines changed

3 files changed

+5
-5
lines changed

.github/dependabot.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ registries:
44
type: npm-registry
55
url: https://pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/
66
username: powershell-rel
7-
password: ${{ secrets.AZURE_NPM_TOKEN }}
7+
password: ${{ secrets.AZURE_NPM_PASSWORD }}
88
updates:
99
- package-ecosystem: npm
1010
directory: "/"

.github/workflows/ci-test.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -66,7 +66,7 @@ jobs:
6666
shell: pwsh
6767
run: Invoke-Build
6868
env:
69-
NPM_AUTH_TOKEN: ${{ secrets.AZURE_NPM_TOKEN }}
69+
NPM_PASSWORD: ${{ secrets.AZURE_NPM_PASSWORD_BASE64}}
7070

7171
- name: Upload build artifacts
7272
uses: actions/upload-artifact@v4

.github/workflows/npmrc

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,12 +1,12 @@
1-
; This requires NPM_AUTH_TOKEN to be available as a base64 encoded secret, since
1+
; This requires NPM_PASSWORD to be available as a base64 encoded secret, since
22
; Azure DevOps does not support actual auth tokens.
33

44
; begin auth token
55
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/:username=powershell-rel
6-
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/:_password=${NPM_AUTH_TOKEN}
6+
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/:_password=${NPM_PASSWORD}
77
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/:email=powershell-rel
88
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/:username=powershell-rel
9-
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/:_password=${NPM_AUTH_TOKEN}
9+
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/:_password=${NPM_PASSWORD}
1010
//pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/:email=powershell-rel
1111
; end auth token
1212
registry=https://pkgs.dev.azure.com/powershell-rel/PowerShellEditorServices/_packaging/PSESFeed/npm/registry/

0 commit comments

Comments
 (0)