Working with Private Packages on Craft Cloud

Craft Cloud supports private Composer packages with all the native authentication methods.

Read about Composer’s authentication system in the official documentation.

When you deploy a site that requires private packages, Cloud will use credentials provided via the project’s SettingsComposer Auth section.

Once you’ve added a username, password, or token, it cannot be retrieved—the values are only decrypted in our build pipeline when installing dependencies.

Auth Methods #

We currently support the following authentication methods:

  • GitHub Token
  • HTTP Basic
  • Gitlab Token
  • Gitlab OAuth
  • Bitbucket OAuth
  • HTTP Bearer

Applies to Craft Cloud.