How to use bake remote definition with private Git repo?

[skycaptain]

The docs mention that's also possible to build bake files directly from a remote Git repository or HTTPS URL: https://docs.docker.com/build/bake/file-definition/#remote-definition.

In my case, I have a private Git repo hosted on Azure DevOps. I have a PAT set up in my ~/.netrc, so I can easily clone the repo via https:

$ git clone https://[email protected]/MyOrg/MyProject/_git/MyRepo
Cloning into 'MyRepo'...
remote: Azure Repos
remote: Found 335 objects to send. (85 ms)
Receiving objects: 100% (335/335), 128.21 KiB | 25.64 MiB/s, done.
Resolving deltas: 100% (196/196), done.

How can I instruct buildx-bake to use this repo? E.g. when I execute:

$ docker buildx bake --print "https://[email protected]/MyOrg/MyProject/_git/MyRepo#main"
[+] Building 0.3s (1/1) FINISHED                                                                                                                   
 => ERROR [internal] load remote build context 0.3s
------
 > [internal] load remote build context:
------
ERROR: failed to solve: failed to load cache key: invalid response status 401

I get an 401 error, so it seems buildx does not use my ~/.netrc file.

• Does this also work with private repositories, or repos in general requiring authorization?
• How does buildx recognize that a given URL is a Git repository? Does is check for .git in the URL? Is it the #
• Can I also use subpaths in the repository?