Skip to content

applications(php): add private repositories indstructions#900

Open
davlgd wants to merge 1 commit intomainfrom
davlgd-php-private-repos
Open

applications(php): add private repositories indstructions#900
davlgd wants to merge 1 commit intomainfrom
davlgd-php-private-repos

Conversation

@davlgd
Copy link
Copy Markdown
Collaborator

@davlgd davlgd commented Mar 19, 2026

📝 What does this PR do?

This pull request adds documentation to help users configure Composer authentication for private PHP package repositories. The new section explains how to securely provide credentials using the COMPOSER_AUTH environment variable, and warns against committing sensitive information to version control.

Composer authentication for private repositories:

  • Added a section describing how to use the COMPOSER_AUTH environment variable for authenticating with private Composer repositories, including a warning not to commit auth.json files to the repository and a link to the Composer authentication schema documentation.

🔗 Related Issue (if applicable)


🧪 Type of Change

  • ⚠️ Bug fix
  • 📅 Changelog update
  • 📚 Documentation update
  • ✨ New content/feature
  • 🔧 Technical/maintenance

✅ Quick Checklist

@davlgd davlgd requested a review from Copilot March 19, 2026 18:35
@davlgd davlgd self-assigned this Mar 19, 2026
@github-actions
Copy link
Copy Markdown

:octocat: Preview is deploying...

Please wait while the preview is deploying on Clever Cloud...

ℹ️ Name 🔗 Infos & links
🌱 Deploying commit 8ff796b
👁️ Preview Generating preview app...

Copy link
Copy Markdown
Contributor

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR adds documentation for PHP applications to help users authenticate Composer against private package repositories during deployment, using the COMPOSER_AUTH environment variable (instead of committing credentials).

Changes:

  • Added a new “Private repositories” section to the PHP Composer documentation.
  • Documented using COMPOSER_AUTH for deployment-time authentication and warned against committing auth.json.
  • Linked to Composer’s authentication schema documentation.


## Private repositories

If your project depends on packages from private repositories (such as [Packagist.com](https://packagist.com/), Laravel Nova, or a private Git host), you need to configure authentication for Composer during deployment. Set the `COMPOSER_AUTH` environment variable in the Clever Cloud console with a JSON object containing your credentials. Composer reads this variable natively at install time, so you don't need to commit any secret to your repository.

## Private repositories

If your project depends on packages from private repositories (such as [Packagist.com](https://packagist.com/), Laravel Nova, or a private Git host), you need to configure authentication for Composer during deployment. Set the `COMPOSER_AUTH` environment variable in the Clever Cloud console with a JSON object containing your credentials. Composer reads this variable natively at install time, so you don't need to commit any secret to your repository.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document private composer dependencies

2 participants