NPM - Private Packages
Below is a list of private NPM registries and how you can configure Aikido to connect to them.
Azure Devops - Artifact Feed
To connect to a private artifact feed on Azure DevOps, you can follow the steps below. We will use the custom .npmrc
file config option from the private registry configuration modal.
in Azure Devops, navigate to the "Artifacts" page of the project, click on "Connect to Feed" button and select "NPM" from the list
You will now land on page describing how to setup the project, select "Other" From the project setup tabs, you should see a page with setup instructions similar to this
Follow the steps described and add all the required information for the .npmrc file in the input field in the Aikido configuration modal. At the end, the file's content should look similar to this:
registry=https://pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/ always-auth=true ; begin auth token //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:username=[YOUR_USER] //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:_password=bmV2ZXIgZ29ubmEgZ2l2ZSB5b3UgdXA= //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:email=npm requires email to be set but doesn't use the value //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:username=[YOUR_USER] //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:_password=bmV2ZXIgZ29ubmEgZ2l2ZSB5b3UgdXA= //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:email=npm requires email to be set but doesn't use the value; end auth token ; end auth token
Click on "Apply Changes"
Aikido will now provide that file to the autofix application for JS dependency fixes for your Azure DevOps repos.