To secure composer credentials you want to remove the auth.json file from the project repository.
How do you do that?
Select an option, then click Submit answer.
-
○
The build phase runs on a separate server and variables are not available there, you must keep the credentials in the auth.json file, but you can replace the password with its hash
-
○
Add the env:COMPOSER_AUTH variable on the project level and make it visible on the build phase
-
○
Put the composer credentials into /mnt/build/.config/composer/auth.json
-
○
Add the COMPOSER_AUTH variable with the sensitive option enabled