You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/dependabot/maintain-dependencies/removing-dependabot-access-to-public-registries.md
+9-9Lines changed: 9 additions & 9 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ You can configure {% data variables.product.prodname_dependabot %} to access _on
33
33
34
34
## Bundler
35
35
36
-
To configure the Bundler ecosystem to only access private registries, you can set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#rubygems-server).
36
+
To configure the Bundler ecosystem to only access private registries, you can set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#rubygems-server).
37
37
38
38
The Bundler ecosystem additionally requires a `Gemfile` file with the private registry URL to be checked into the repository.
39
39
@@ -72,7 +72,7 @@ In the `Dockerfile` file, add the image name in the format of `IMAGE[:TAG]`, whe
72
72
73
73
**Option 2**
74
74
75
-
Set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#docker-registry). The registry configured with the `replaces-base` can be used as a mirror or a pull through cache. For further details, see [Registry as a pull through cache](https://docs.docker.com/registry/recipes/mirror/) in the Docker documentation.
75
+
Set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#docker-registry). The registry configured with the `replaces-base` can be used as a mirror or a pull through cache. For further details, see [Registry as a pull through cache](https://docs.docker.com/registry/recipes/mirror/) in the Docker documentation.
76
76
77
77
## Gradle
78
78
@@ -81,7 +81,7 @@ To configure the Gradle ecosystem to only access private registries, you can use
81
81
Define the private registry configuration in a `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#maven-repository).
82
82
83
83
> [!NOTE]
84
-
> Remove replaces-base: true from the configuration file.
84
+
> Remove `replaces-base: true` from the configuration file.
85
85
86
86
Additionally, you also need to specify the private registry URL in the `repositories` section of the `build.gradle` file.
87
87
@@ -101,7 +101,7 @@ To configure the Maven ecosystem to only access private registries, you can use
101
101
102
102
**Option 1**
103
103
104
-
Set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#maven-repository).
104
+
Set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#maven-repository).
105
105
106
106
**Option 2**
107
107
@@ -141,7 +141,7 @@ The npm ecosystem additionally requires a `.npmrc` file with the private registr
141
141
142
142
**Option 2**
143
143
144
-
If there is no global registry defined in an `.npmrc` file, you can set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#npm-registry).
144
+
If there is no global registry defined in an `.npmrc` file, you can set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#npm-registry).
145
145
146
146
> [!NOTE]
147
147
> For scoped dependencies (`@my-org/my-dep`), {% data variables.product.prodname_dependabot %} requires that the private registry is defined in the project's `.npmrc` file. To define private registries for individual scopes, use `@myscope:registry=https://private_registry_url`.
@@ -184,7 +184,7 @@ If the `yarn.lock` file doesn't list the private registry as the dependency sour
184
184
185
185
**Option 3**
186
186
187
-
If there is no global registry defined in a `.yarnrc` file, you can set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#npm-registry).
187
+
If there is no global registry defined in a `.yarnrc` file, you can set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#npm-registry).
188
188
189
189
> [!NOTE]
190
190
> For scoped dependencies (`@my-org/my-dep`), {% data variables.product.prodname_dependabot %} requires that the private registry is defined in the project's `.npmrc` file. To define private registries for individual scopes, use `@myscope:registry=https://private_registry_url`.
@@ -305,15 +305,15 @@ Add the private registry URL to the `[global]` section of the `pip.conf` file an
305
305
306
306
**Option 2**
307
307
308
-
Set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
308
+
Set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
309
309
310
310
### Pip-compile
311
311
312
312
To configure the Pip-compile ecosystem to only access private registries, you can use these configuration methods.
313
313
314
314
**Option 1**
315
315
316
-
Set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
316
+
Set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
317
317
318
318
**Option 2**
319
319
@@ -346,7 +346,7 @@ name = "pypi"
346
346
347
347
### Poetry
348
348
349
-
To configure Poetry to only access private registries, set `replaces-base` as `true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
349
+
To configure Poetry to only access private registries, set `replaces-base: true` in the `dependabot.yml` file. For more information, see [AUTOTITLE](/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot#python-index).
350
350
351
351
Add the private registry url to the `[[tool.poetry.source]]` section of the `pyproject.toml` file and checked it in the repository.
0 commit comments