Skip to content

Commit 558aa64

Browse files
Update content/code-security/dependabot/working-with-dependabot/guidance-for-the-configuration-of-private-registries-for-dependabot.md
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
1 parent 3b8a1bd commit 558aa64

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

content/code-security/dependabot/working-with-dependabot/guidance-for-the-configuration-of-private-registries-for-dependabot.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -274,7 +274,7 @@ This feature enables unified dependency management for both public and private G
274274

275275
**Private Proxy Serving All Modules**: All module requests go through your proxy first. For public modules fetching failures, your proxy returns 404/410 and Go falls back to direct version control system(VCS) access, but for private modules for example published to only a private repository like JFrog Artifactory. The VCS fall back will not work since they are only accessible through the proxy.
276276

277-
**Private Proxy Serving Private Modules**: add a go.env to your repository root, and set up a GONOSUMDB matching the private modules pattern(eg. `GONOSUMDB=my-company.com/*`. For all private modules starting with my-company.com/). This will disable the public checksum validation of your private modules. Because the public checksum does not have your private modules.
277+
**Private Proxy Serving Private Modules**: add a go.env to your repository root, and set up a GONOSUMDB matching the private modules pattern (e.g., `GONOSUMDB=my-company.com/*` for all private modules starting with my-company.com/). This will disable the public checksum validation of your private modules because the public checksum database does not have your private modules.
278278

279279
**Direct Access to Private Modules**: Set `GOPRIVATE=my-company.com/*` to bypass proxies and fetch directly from VCS. This only works if private modules are properly published with semantic version tags in your source control.
280280

0 commit comments

Comments
 (0)