Help
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Copilot Lvl 3
Message 21 of 24

Re: Download from Github Package Registry without authentication

It's not entirely useless, since it's still convenient for private artifacts, but it's extremely limiting, for sure.

Highlighted
Copilot Lvl 2
Message 22 of 24

Re: Download from Github Package Registry without authentication

This mandatory authentication is quite strange decision for public NuGet packages. How it's supposed to work for big decentralized team?

 

So I want to start using a package from github. And I don't want to send everyone instructions how to make solution build after it. I can add repository in nuget.config to avoid everyone in team to add github source. What should I use for credentials here - seems keep it empty? But then what? Everyone in team have to create github account and do authentication? So it looks like it's usable only for personal projects.

Highlighted
Copilot Lvl 3
Message 23 of 24

Re: Download from Github Package Registry without authentication

They'd not only have to use a personal access token, but one that is scoped with "read:packages" on your repo, and SSO enabled, if applicable, so it's not just a matter convenience. I agree that it's very unfortunate.

Highlighted
Copilot Lvl 3
Message 24 of 24

Re: Download from Github Package Registry without authentication

Any news on this matter, considering the fact NPM was just bought by Microsoft (Github)?

Auth for public packages is an absolute no-go and must be resolved asap.