Posted by: Pdfprep
Post Date: November 22, 2020
To secure composer credentials you want to remove the auth.json file from the project repository.
How do you do that?
A . The build phase runs on a separate server and variables are not available there, you must keep the credentials in the auth.json file, but you can replace the password with its hash
B . Add the env:COMPOSER_AUTH variable on the project level and make it visible on the build phase
C . Put the composer credentials into /mnt/build/.config/composer/auth.json
D . Add the COMPOSER_AUTH variable with the sensitive option enabled
Answer: A
Leave a Reply