Skip to content

Handle additional git providers in set_composer_auth_env_var()#218

Open
Copilot wants to merge 7 commits intomainfrom
copilot/handle-more-git-providers
Open

Handle additional git providers in set_composer_auth_env_var()#218
Copilot wants to merge 7 commits intomainfrom
copilot/handle-more-git-providers

Conversation

Copy link
Contributor

Copilot AI commented Jan 25, 2026

Plan: Add support for additional git providers in set_composer_auth_env_var()

  • Review current implementation of set_composer_auth_env_var()
  • Add support for bitbucket-oauth via BITBUCKET_CONSUMER_KEY and BITBUCKET_CONSUMER_SECRET environment variables
  • Add support for gitlab-oauth via GITLAB_OAUTH_TOKEN environment variable
  • Add support for gitlab-token via GITLAB_TOKEN environment variable
  • Add support for http-basic via HTTP_BASIC_AUTH environment variable (JSON format)
  • Add comprehensive PHPUnit unit tests to validate all authentication providers
  • Refactor tests to reduce code duplication with helper method
  • Add Behat feature tests for the authentication functionality
  • Add empty string validation for all token environment variables
  • Run lint, phpcs, phpstan to ensure code quality (all passed)
  • Run PHPUnit test suite - all 86 tests passed
  • All changes complete and verified

Security Summary

No security vulnerabilities detected

  • CodeQL analysis found no security issues in the changes
  • All authentication tokens are handled securely via environment variables
  • Empty strings are rejected to prevent empty credentials in COMPOSER_AUTH
  • Existing COMPOSER_AUTH values are preserved and never overridden
  • Invalid JSON in HTTP_BASIC_AUTH is safely ignored
  • All environment variables are validated before use
  • No sensitive data is logged or exposed
Original prompt

This section details on the original issue you should resolve

<issue_title>Handle more git providers in set_composer_auth_env_var()</issue_title>
<issue_description>As of #47, we support GitHub. There are a few other providers we could support too:

  • bitbucket-oauth
  • gitlab-oauth
  • gitlab-token
  • http-basic</issue_description>

Comments on the Issue (you are @copilot in this section)


💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

Copilot AI and others added 2 commits January 25, 2026 17:35
Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
Copilot AI changed the title [WIP] Add support for additional git providers in set_composer_auth_env_var Handle additional git providers in set_composer_auth_env_var() Jan 25, 2026
Copilot AI requested a review from swissspidy January 25, 2026 17:38
@codecov
Copy link

codecov bot commented Jan 25, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

This comment was marked as resolved.

swissspidy and others added 3 commits January 25, 2026 12:59
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
Co-authored-by: swissspidy <841956+swissspidy@users.noreply.github.com>
@swissspidy swissspidy marked this pull request as ready for review February 3, 2026 14:18
@swissspidy swissspidy requested a review from a team as a code owner February 3, 2026 14:18
@github-actions github-actions bot added command:package Related to 'package' command command:package-update Related to 'package update' command scope:distribution Related to distribution state:unconfirmed labels Feb 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

command:package Related to 'package' command command:package-update Related to 'package update' command scope:distribution Related to distribution state:unconfirmed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Handle more git providers in set_composer_auth_env_var()

2 participants