How to handle private dependencies for python apps?

[TurqayUmudzade]

Summary

I am deploying a FastAPI application into vercel, but one of the dependencies is a custom package from a private github repository, I could not find a easy way to handle this.

vercel.json:

{
    "$schema": "https://openapi.vercel.sh/vercel.json",
    "builds": [
        {
            "src": "app/main.py",
            "use": "@vercel/python"
        }
    ],
    "routes": [
        {
            "src": "/(.*)",
            "dest": "main.py"
        }
    ]
}

snippet of requirements.txt

alembic
fastapi
<private-repo> @ git+https://${GITHUB_TOKEN}@github.com/<org>/<private-repo>[email protected]

Additional information

No response

Example

No response

[SametDulger]

Hi @TurqayUmudzade,

To handle private Python dependencies (e.g., from private GitHub repos) in deployments like Vercel, you can do the following:

Use a Personal Access Token (PAT) in your requirements.txt
Your example with

<private-repo> @ git+https://${GITHUB_TOKEN}@github.com/<org>/<private-repo>[email protected]

is correct, but you need to make sure GITHUB_TOKEN is set as an environment variable in Vercel.

Set environment variables securely
Add GITHUB_TOKEN as a secret environment variable in your Vercel project settings so the build process can access it.

Use a .netrc file or SSH keys (optional)
Alternatively, you can configure .netrc with GitHub credentials or use SSH keys for authentication, but environment variables are usually simpler.

Make sure the token has repo read access
Your GitHub token must have permission to read the private repo.

Double-check URL formatting
Make sure your URL in requirements.txt is correct and properly URL-encoded if necessary.

With this setup, Vercel’s build should be able to clone your private package during installation.

Let me know if you want help with Vercel environment variable setup or troubleshooting!