Install script is failing

Thijs's Avatar

Thijs

06 May, 2015 11:24 PM

I'm trying to add a nuget source using an install script as described here: http://www.appveyor.com/docs/nuget#configuring-external-private-nuget-feed-for-your-builds

I'm trying to get this project running: https://ci.appveyor.com/project/ThijsBorst/dd4t-2-templates
But this isn't working for me somehow. I've done this for another project here: https://ci.appveyor.com/project/ThijsBorst/dd4t-2-net and for this project it does work. Can you tell me how this is possible? I've tried to recreate the project, to copy past it from my other project. Nothing works... Is it a bug or a typo? Please tell me, I've tried everything it seems...

  1. Support Staff 1 Posted by Feodor Fitsner on 07 May, 2015 01:37 AM

    Feodor Fitsner's Avatar

    Secure variables are not decoded during PR builds - this is by design as someone could submit a PR with altered build script and grab the value of this variable.

    For private repositories with trusted teams secure vars on PR builds can be enabled.

  2. 2 Posted by Thijs on 07 May, 2015 07:44 AM

    Thijs's Avatar

    There is no other way to make this work? I would like to see the Pull Requests tested and not give up a password to the private nuget repository.

  3. Support Staff 3 Posted by Feodor Fitsner on 07 May, 2015 04:36 PM

    Feodor Fitsner's Avatar

    With the way NuGet stores credentials to private feeds there is no way to hide the password. Right now it's either clear-text password or DPAPI-encrypted password. Whenever someone has full access to the machine with that nuget.config it's absolutely easy to retrieve that password. With PRs enabled on public project it's like you are giving everyone access to your build server.

  4. 4 Posted by Thom on 06 Sep, 2015 11:16 AM

    Thom's Avatar

    I have similar problem with my repro. It will not decode the secret key for a git push.
    See artical git psuh.
    and my appveyor project https://ci.appveyor.com/project/Anderman/mvc-jquery-datatables.
    * There is no message why the secure var is not decoded. * Searching with google give me no clue. * I think i do push request to my repro and not pull request so i should work

  5. Ilya Finkelshteyn closed this discussion on 25 Aug, 2018 01:59 AM.

Comments are currently closed for this discussion. You can start a new one.

Keyboard shortcuts

Generic

? Show this help
ESC Blurs the current field

Comment Form

r Focus the comment reply box
^ + ↩ Submit the comment

You can use Command ⌘ instead of Control ^ on Mac