Configure npm
Point an npm scope at a Clikkle repository without committing the token.
Project configuration
Reference an environment variable for the credential rather than committing the secret itself.
@clikkle:registry=https://packages.clikkle.com/npm/REPOSITORY_ROUTE/
//packages.clikkle.com/npm/REPOSITORY_ROUTE/:_authToken=${CLIKKLE_PACKAGES_TOKEN}Credential rule
- Use a read token for installation.
- Use a publish token only in the release job that needs it.
- Keep both tokens out of Git and customer-visible logs.
Was this page useful?