diff --git a/lib/manager/composer/artifacts.js b/lib/manager/composer/artifacts.js
index 9cefb21a3aaecfd6a0f2f0a82bc22992b8837b65..2936a58006c82bfbbdf450258d83980e5d68bac4 100644
--- a/lib/manager/composer/artifacts.js
+++ b/lib/manager/composer/artifacts.js
@@ -39,17 +39,25 @@ async function getArtifacts(
     if (!config.gitFs) {
       await fs.outputFile(localLockFileName, existingLockFileContent);
     }
-    let authJson;
-    const credentials = hostRules.find({
+    let authJson = {};
+    let credentials = hostRules.find({
       platform: 'github',
       host: 'api.github.com',
     });
     // istanbul ignore if
     if (credentials && credentials.token) {
-      authJson = {
-        'github-oauth': {
-          'github.com': credentials.token,
-        },
+      authJson['github-oauth'] = {
+        'github.com': credentials.token,
+      };
+    }
+    credentials = hostRules.find({
+      platform: 'gitlab',
+      host: 'gitlab.com',
+    });
+    // istanbul ignore if
+    if (credentials && credentials.token) {
+      authJson['gitlab-token'] = {
+        'gitlab.com': credentials.token,
       };
     }
     try {