how do I use with gradle and a github maven repository?

[xenoterracide]

What would you like help with?

I would like help with my configuration

How are you running Renovate?

Mend Renovate hosted app on github.com

If you're self-hosting Renovate, tell us which platform (GitHub, GitLab, etc) and which version of Renovate.

No response

Please tell us more about your question or problem

for a github maven repository you need to use the actor/token github creates with the job in download scenario. It's still a "public" repository, they just force you to use credentials, but one should be able to pull with any github account. In order to use these credentials I then have to map them into a username password that gradle understands. I do this in my github jobs as follows.

    env:
      ORG_GRADLE_PROJECT_ghUsername: ${{ secrets.GITHUB_ACTOR }}
      ORG_GRADLE_PROJECT_ghPassword: ${{ secrets.GITHUB_TOKEN }}

Renovate does run, but if it's actually capable of updating locks it can't because of the failure. It just fails like dependabot does, with missing credentials, and/or inability to proceed due to a mismatch on the locks.

How can I configure these? do I need to use the github action? if so, does this require that I use a config.js and script the environment access?

Logs (if relevant)

No response

[RahulGautamSingh]

IIUC, you need to pass the ORG_GRADLE_PROJECT_ghUsername and ORG_GRADLE_PROJECT_ghPassword to Renovate, which it should use when updating the lockfile.

For this, you could make use of the env config option.

But, I think the Mend administrator needs to allow the ORG_GRADLE_PROJECT_ghUsername and ORG_GRADLE_PROJECT_ghPassword variable names first in the backend.

[rarkins]

I don't know what "as an open source developer" has to do with this.

[xenoterracide]

well the default is "set up github app" there's no "administrator" I haven't seen any locations to get a token. I'm struggling to figure out how to get from A -> B since I don't have an enterprise account.

[rarkins]

Sorry but I still don't understand what you're trying to tell or ask me here.

[xenoterracide]

nevermind then. I don't know how it's even possible for someone not paying for the product to do this, so I assume it's not possible.

[xenoterracide]

ok, I decided to come back to this with an example. xenoterracide/gradle-convention#53 you'll notice the renovate artifacts are red because of the credentials issue. Now in this case that's fine because I happen to know there's no locks for settings plugins. I've looked at making my own github workflow, but that requires an API key (from what I can tell), that isn't given to free users. You'll also note that the artifacts that are fetched are accessible by any github user, they just require credentials because github has credentialed its own package storage. In my own scripts I still have to export the environment variables because they aren't exported automatically (afaik, maybe I'm wrong) https://github.com/xenoterracide/gradle-convention/blob/main/.github/workflows/update-java.yml#L22-L23

Perhaps I don't understand the solution you're suggesting.