Tutorial: Authenticate vcpkg Git-based registries in GitHub Actions

When using vcpkg with private registries it is necessary to provide access credentials to authenticate Git operations executed internally by vcpkg.

In this tutorial you will learn how to authenticate a private Git repository to use in your GitHub Actions workflow.

• Create a Personal Access Token for your private repository
• Create a GitHub Actions secret to use in your workflow
• Authenticate to private Git repositories in your workflow

Prerequisites

• A GitHub account
• A private vcpkg Git-registry hosted on GitHub
• vcpkg

1 - Create a Personal Access Token for your private repository

Follow the instructions on GitHub to generate a fine-grained Personal Access Token (PAT) and grant it permission to access the private repository where your vcpkg Git registry is hosted.

2 - Create a GitHub Actions secret to use in your workflow

Note

Never store a GitHub Personal Access Token in your repository files

The next step is to follow GitHub's instructions to store the PAT as a secret available in your GitHub Actions workflows.

3 - Authenticate to private Git repositories in your workflow

Now is time to add an authentication step to your workflow, use the following template in your workflow's YAML file. Replace PRIVATE_REPO_URL with the URL of your private repository, for example: https://github.com/Microsoft/secret-vcpkg-registry; replace PRIVATE_REGISTRY_PAT with the name of the secret variable you created in the previous step.

This workflow step must run before any other workflow step that invokes vcpkg.

YAML

  - name: Authenticate private registries
    shell: bash
    run: git config --global credential.PRIVATE_REPO_URL.helper '!f() { echo username=unused; echo password=${{secrets.PRIVATE_REGISTRY_PAT }}; }; f'

Example with multiple private repositories

The following example shows how to provide Git credentials for multiple private repositories using the credential.<url>.helper pattern.

YAML

    - name: Authenticate private registries
      shell: bash
      run: |
          git config --global credential.https://github.com/vcpkg/private_registry.helper '!f() { echo username=unused; echo password=${{secrets.private_registry_pat}}; }; f'
          git config --global credential.https://github.com/vcpkg/secret_registry.helper `!f() { echo username=unused; echo password=${{secrets.secret_registry_pat}}; }; f'