[question] Is it possible to pass git credentials when doing conan config install about conan HOT 3 CLOSED

okay I embed the credentials into the git url and this helps me as of now. Many Thanks for your answer.

yes, sure, that can work. If you are interested in other alternatives, the conan config install has a --args "extra-args" argument that will also forward those arguments to the git clone. But the problem is intrinsically the same, it is a security issue, because the credentials can easily get exposed in CI logs, so this is something to try to avoid.

I am closing the ticket as responded, don't hesitate to re-open or create a new one for further questions, thanks for the feedback!

from conan.

Hi @maitrey

In general, the recommendation for git credentials would be the same as for regular git clone operations inside Conan recipes: Do not use Conan for injecting those dependencies. Git has modern auth mechanisms, like ssh-keys, GIT_ASKPASS, etc, that allows for more secure authentication and credentials manager than explicitly passing credentials in a Conan command like conan config install that will expose those credentials in the CI pipeline logs.

Also, I'd recommend having a look to the new conan config install-pkg feature, that stores configuration in Conan packages, using the same auth as any other Conan package (and simplifying different tasks as updates)

from conan.

okay I embed the credentials into the git url and this helps me as of now. Many Thanks for your answer.

from conan.