Skip to content

Commit 596e626

Browse files
Dependabot org-level private registries (#56714)
Co-authored-by: mc <[email protected]>
1 parent 77744a9 commit 596e626

File tree

2 files changed

+8
-2
lines changed

2 files changed

+8
-2
lines changed

content/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot.md

Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,13 @@ For specific ecosystems, you can configure {% data variables.product.prodname_de
3333

3434
## Configuring private registries
3535

36-
You configure {% data variables.product.prodname_dependabot %}'s access to private registries in the `dependabot.yml` file.
36+
{% ifversion org-private-registry %}
37+
38+
You can configure {% data variables.product.prodname_dependabot %}'s access to private registries at the org-level. For more information on how to configure that, see [AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization/giving-org-access-private-registries).
39+
40+
{% endif %}
41+
42+
You can also configure {% data variables.product.prodname_dependabot %}'s access to private registries in the `dependabot.yml` file.
3743
The top-level `registries` key is optional and specifies authentication details.
3844

3945
{% data reusables.dependabot.dependabot-updates-registries %}

content/code-security/securing-your-organization/enabling-security-features-in-your-organization/giving-org-access-private-registries.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ Any private registries used by the build must also be accessible to the workflow
5959

6060
## {% data variables.product.prodname_dependabot %} updates access to private registries
6161

62-
{% data variables.product.prodname_dependabot %} uses any private registries defined in the `dependabot.yml` file. It does not have access to the organization-level private registries used by {% data variables.product.prodname_code_scanning %} default setup.
62+
{% data variables.product.prodname_dependabot %} can use any of the org-level private registries, as well as uses any private registries defined in the `dependabot.yml` file in the repo.
6363

6464
{% data variables.product.prodname_dependabot %} cannot check for security or version updates for code stored in a private registry unless it can access the registry. If you do not configure access to the private registry, then {% data variables.product.prodname_dependabot %} cannot raise pull requests to update any of the dependencies stored in the registry.
6565

0 commit comments

Comments
 (0)