Help
cancel
Showing results for 
Search instead for 
Did you mean: 
Copilot Lvl 2
Message 1 of 10

Download from Github Package Registry without authentication

Solved! Go to Solution.
After publish a maven Package on Github Package Registry I can download it as dependency if I my settings.xml filé contains my username and my personal access token.

But how another person can use it without authentication? I thought Github Package Registry was like a maven central repo.

9 Replies
Solution
Community Manager
Message 2 of 10

Re: Download from Github Package Registry without authentication

Hi @Markenson

 

Thank you for being here! Currently you need to authenticate to download both public and private packages I'm afraid. We are investigating how, going forwards, beyond the beta we maybe able to offer this functionality, however this could be a way off yet - I've added a +1 against this for you, and we'll let you know as soon as we have an update that we can share surrounding this. Keep an eye on https://github.blog for all updates meanwhile.


Best,
AndreaG

Mark helpful posts with Accept as Solution to help other users locate important info. Don't forget to give Kudos for great content!

Copilot Lvl 2
Message 3 of 10

Re: Download from Github Package Registry without authentication

Thank you, @AndreaGriffiths11 !

 

Knowing that's only authenticaded operation save (and too much) my time!

 

I'll stay tuned about this on blog.

 

Best regards,

Markenson

Highlighted
Copilot Lvl 2
Message 4 of 10

Re: Download from Github Package Registry without authentication

You should mention that in the documentation as well. It took me hours to find this thread :-(

 

I think providing a package registry for open source projects that is accessible with authentication only does not make sense. 

Community Manager
Message 5 of 10

Re: Download from Github Package Registry without authentication

Thanks for the feedback @uhafner, I agree and apologies for that. I'll be sure to pass this feedback to our docs team.


Best,
AndreaG

Mark helpful posts with Accept as Solution to help other users locate important info. Don't forget to give Kudos for great content!

Copilot Lvl 3
Message 6 of 10

Re: Download from Github Package Registry without authentication

That's unfortunate, but I'm glad to hear you're looking into the issue. My team also produce Maven artifacts with external consumers, and requiring those consumers to authenticate with a token with our organization's SSO enabled is stopping us from using GitHub package registry.

Copilot Lvl 2
Message 7 of 10

Re: Download from Github Package Registry without authentication

+100

 

Yes they need something like `mavenCentral()` to add to the build.gradle/pom.xml.

 

Otherwise the whole feature is useless IMO.

Copilot Lvl 3
Message 8 of 10

Re: Download from Github Package Registry without authentication

It's not entirely useless, since it's still convenient for private artifacts, but it's extremely limiting, for sure.

Ground Controller Lvl 1
Message 9 of 10

Re: Download from Github Package Registry without authentication

This mandatory authentication is quite strange decision for public NuGet packages. How it's supposed to work for big decentralized team?

 

So I want to start using a package from github. And I don't want to send everyone instructions how to make solution build after it. I can add repository in nuget.config to avoid everyone in team to add github source. What should I use for credentials here - seems keep it empty? But then what? Everyone in team have to create github account and do authentication? So it looks like it's usable only for personal projects.

Copilot Lvl 3
Message 10 of 10

Re: Download from Github Package Registry without authentication

They'd not only have to use a personal access token, but one that is scoped with "read:packages" on your repo, and SSO enabled, if applicable, so it's not just a matter convenience. I agree that it's very unfortunate.