Our documentation recommends using the [dsim.repos](https://github.com/ToyotaResearchInstitute/dsim-repos-index/blob/master/dsim.repos) to [update the workspace](https://github.com/ToyotaResearchInstitute/dsim-repos-index#update-your-workspace), but our GitHub actions CI workflows using a mix of [actions/checkout@v2 to clone private dependencies](https://github.com/ToyotaResearchInstitute/dsim-repos-index/blob/master/.github/workflows/build.yml#L35-L101) (using the `MALIPUT_TOKEN` secret) and [vcstool to clone public dependencies](https://github.com/ToyotaResearchInstitute/dsim-repos-index/blob/master/.github/workflows/build.yml#L121-L125) listed in [.github/dependencies.repos](https://github.com/ToyotaResearchInstitute/dsim-repos-index/blob/master/.github/dependencies.repos). It would be useful to use the `dsim.repos` file to avoid mistakes like https://github.com/ToyotaResearchInstitute/dsim-repos-index/pull/158#issuecomment-749695557. Challenges: * `vcstool` doesn't currently support https authentication with tokens, though an open pull request proposes support for it in https://github.com/dirk-thomas/vcstool/pull/128. * perhaps the only alternative is adding an ssh key as a secret in this repository (since [dsim.repos](https://github.com/ToyotaResearchInstitute/dsim-repos-index/blob/master/dsim.repos) uses ssh URL's)
Our documentation recommends using the dsim.repos to update the workspace, but our GitHub actions CI workflows using a mix of actions/checkout@v2 to clone private dependencies (using the
MALIPUT_TOKENsecret) and vcstool to clone public dependencies listed in .github/dependencies.repos. It would be useful to use thedsim.reposfile to avoid mistakes like #158 (comment).Challenges:
vcstooldoesn't currently support https authentication with tokens, though an open pull request proposes support for it in Support authentication dirk-thomas/vcstool#128.