PREQ-7838 Add Artifactory Env Exports to config-pip

[alex-meseldzija-sonarsource]

Part of RC-16

When using pip, a repo can have a Pipfile which needs to be routed through repox via the env.

Without this change, everywhere we call config-pip we also have to retrieve our own artifactory tokens and export them to the env.

This solves the problem centrally.

[hashicorp-vault-sonar-prod]

PREQ-7838

[Copilot]

Pull request overview

This PR extends the config-pip composite action to export Artifactory authentication variables into the job environment (via GITHUB_ENV) and updates the documentation to reflect the newly exported variables.

Changes:

• Export ARTIFACTORY_URL, ARTIFACTORY_USERNAME, ARTIFACTORY_ACCESS_TOKEN (and deprecated aliases) into GITHUB_ENV from config-pip.
• Document the additional output environment variables for config-pip in the README.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 2 comments.

File	Description
README.md	Documents newly exported Artifactory-related environment variables for config-pip.
config-pip/action.yml	Adds a step to export Artifactory auth environment variables (plus deprecated aliases) into GITHUB_ENV.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Pull request overview

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

Suppressed comments (1)

README.md:1250

• Typo in the example abbreviation: “E.x.” should be “e.g.” (this same typo appears in other duplicated tables in the README, so you may want to update those too for consistency).

| `ARTIFACTORY_URL`             | Artifactory (Repox) URL. E.x.: `https://repox.jfrog.io/artifactory` |

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[gitar-bot]

Code Review ✅ Approved

Adds Artifactory environment exports directly to config-pip to centralize token retrieval. No issues found.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}