A Private Artifact Repository for CircleCI

version: 2.1

jobs:
  build-and-publish:
    docker:
      - image: cimg/python:3.13
    steps:
      - checkout
      - restore_cache:
          keys:
            - pip-{{ checksum "requirements.txt" }}

      # Configure pip for CloudRepo
      - run:
          name: Configure pip
          command: |
            # pip reads the login for the host from ~/.netrc, so the index URL carries none
            # you@example.com is the email address of the account that created the token
            (umask 077 && printf 'machine your-org.mycloudrepo.io\nlogin you@example.com\npassword %s\n' "$CLOUDREPO_TOKEN" >> ~/.netrc)

      # Install public dependencies from PyPI, then private packages from CloudRepo alone
      - run: pip install -r requirements.txt
      - run: pip install --index-url https://your-org.mycloudrepo.io/repositories/your-repo/simple/ my-private-package

      # Run tests
      - run: pytest

      # Build and publish to CloudRepo
      - run:
          name: Publish to CloudRepo
          command: |
            pip wheel . --no-deps -w dist
            pip install twine
            # twine reads its login from these two variables, so the command line carries none
            export TWINE_USERNAME=you@example.com
            export TWINE_PASSWORD="$CLOUDREPO_TOKEN"
            twine upload --non-interactive --repository-url https://your-org.mycloudrepo.io/repositories/your-repo dist/*

      - save_cache:
          paths:
            - ~/.cache/pip
          key: pip-{{ checksum "requirements.txt" }}

workflows:
  version: 2
  build-deploy:
    jobs:
      - build-and-publish:
          context: cloudrepo

version: 2.1

jobs:
  build-and-publish:
    docker:
      - image: cimg/node:lts
    steps:
      - checkout
      - restore_cache:
          keys:
            - node-{{ checksum "package-lock.json" }}

      # Configure npm for CloudRepo
      - run:
          name: Configure npm
          command: |
            # Only your scope comes from CloudRepo; every other package still comes from the public npm registry
            # Add your token to the context a second time, named NPM_TOKEN
            # npm fills in ${NPM_TOKEN} from the job's environment when it runs, so ~/.npmrc holds no token
            echo '@yourscope:registry=https://your-org.mycloudrepo.io/repositories/your-repo/' > ~/.npmrc
            echo '//your-org.mycloudrepo.io/repositories/your-repo/:_authToken=${NPM_TOKEN}' >> ~/.npmrc

      # Install dependencies
      - run: npm ci

      # Run tests
      - run: npm test

      # Build and publish to CloudRepo
      - run:
          name: Publish to CloudRepo
          command: |
            npm run build
            npm publish --registry https://your-org.mycloudrepo.io/repositories/your-repo/

      - save_cache:
          paths:
            - ~/.npm
            - node_modules
          key: node-{{ checksum "package-lock.json" }}

workflows:
  version: 2
  build-deploy:
    jobs:
      - build-and-publish:
          context: cloudrepo