To secure composer credentials you want to remove the auth.json file from the project repository.
How do you do that?
A. The build phase runs on a separate server and variables are not available there, you must keep the credentials in the auth.json file, but you can replace the password with its hash
B. Add the env:COMPOSER_AUTH variable on the project level and make it visible on the build phase
C. Put the composer credentials into /mnt/build/.config/composer/auth.json
D. Add the COMPOSER_AUTH variable with the sensitive option enabled
B
Ans: B
https://experienceleague.adobe.com/docs/commerce-cloud-service/user-guide/develop/authentication-keys.html?lang=en
Correct Ans: B
Create a env:COMPOSER_AUTH variable.