Azure DevOps Artifact Feed - Private Packages

To connect to a private artifact feed on Azure DevOps, you can follow the steps below. We will use the custom .npmrc file config option from the private registry configuration modal.

Connect Aikido to a private registry by configuring your package manager credentials.

• in Azure Devops, navigate to the "Artifacts" page of the project, click on "Connect to Feed" button and select "NPM" from the list

• You will now land on page describing how to setup the project, select "Other" From the project setup tabs, you should see a page with setup instructions similar to this

  

  Azure npm registry setup instructions with authentication and access token configuration steps.
• Follow the steps described and add all the required information for the .npmrc file in the input field in the Aikido configuration modal. At the end, the file's content should look similar to this:

  registry=https://pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/ 
  always-auth=true
  ; begin auth token
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:username=[YOUR_USER]
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:_password=bmV2ZXIgZ29ubmEgZ2l2ZSB5b3UgdXA=
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/registry/:email=npm requires email to be set but doesn't use the value
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:username=[YOUR_USER]
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:_password=bmV2ZXIgZ29ubmEgZ2l2ZSB5b3UgdXA=
  //pkgs.dev.azure.com/[ORG]/_packaging/[FEED]/npm/:email=npm requires email to be set but doesn't use the value; end auth token 
  ; end auth token

• Click on "Apply Changes"

• Aikido will now provide that file to the autofix application for JS dependency fixes for your Azure DevOps repos.