AWS Codeartifact support

[jonathanpruvost]

Hi,

We are currently testing the Renovate implementation on the repos of our applications.

Our stack:

• renovate hosted Github app
• pnpm
• lockFileMaintenance: true
• AWS codeartifact

We are having a problem with our private packages.
We use AWS codeartifact for our own npm registry.

We tested adding hostedRules with a hard-written token in the config and it works fine.

The problem is that the maximum duration of an AWS codeartifact token is 12 hours.
We haven't found in the documentation to be able to do this dynamically.

In the self-hosted version it seems possible to run the github action and pass the RENOVATE_HOST_RULES environment variable.

What solution do you recommend?

Thank you

[HonkingGoose]

Related issue:

• Update doc for ecr and codeartifact #13833

[viceice]

hosted app doesn't execute any scripts for security reasons

[rarkins]

In theory we could support having the user configure a long lived credential which is used to retrieve a short lived one at runtime

[jonathanpruvost]

Cool, good news, that would be a good solution.

[D3X]

In theory we could support having the user configure a long lived credential which is used to retrieve a short lived one at runtime

Do you mean a long lived credential for calling a user-defined endpoint/service that returns the short lived credential for CodeArtifact (or any other repository for that matter)? I would love to see that, it would allow us to use the renovate github app instead of self hosting.

[shriyanskapoor]

Could u share your config.json?