flatt-security/Setup Takumi Guard Packagist Registry
Authenticate to the Takumi byGMO Guard Packagist registry via OIDC. Works with Composer.
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Stale
- License
- None
Inputs
| name | description | required | default |
|---|---|---|---|
| bot-id | Bot ID from Shisho Cloud byGMO console. Omit for anonymous mode (Tier A blocking only). | no | "" |
| sts-url | STS service URL | no | https://sts.cloud.shisho.dev |
| registry-url | Packagist registry URL | no | https://packagist.flatt.tech |
| expires-in | Token expiration in seconds (max 86400) | no | 1800 |
| set-repository | Configure the global Composer repository to route through the proxy. Set to false if you manage repositories yourself. | no | true |
| fail-closed | When true, set policy.ignore-unreachable=false so composer install/update FAIL if the Guard proxy is unreachable (instead of proceeding unblocked). Recommended for CI that must never install while the proxy is down. Requires Composer 2.10+. | no | false |
Outputs
| name | description |
|---|---|
| token-expires-at | ISO 8601 timestamp when the token expires |