Skip to content

Commit ce3d134

Browse files
Dependabot security updates will reference private registries even if a target-branch is specified - [GA] (#49494)
Co-authored-by: Siara <[email protected]>
1 parent 3346b3e commit ce3d134

File tree

2 files changed

+9
-0
lines changed

2 files changed

+9
-0
lines changed

content/code-security/dependabot/working-with-dependabot/guidance-for-the-configuration-of-private-registries-for-dependabot.md

+3
Original file line numberDiff line numberDiff line change
@@ -576,10 +576,13 @@ If you use the `replace-base` setting, you should also configure a remote reposi
576576

577577
You can use a virtual registry to group together all private and public dependencies under a single domain. For more information, see [npm Registry](https://jfrog.com/help/r/jfrog-artifactory-documentation/npm-registry) in the JFrog Artifactory documentation.
578578

579+
{% ifversion dependabot-updates-reference-private-registries %}{% else %}
580+
579581
#### Limitations and workarounds
580582

581583
The `target branch` setting does not work with {% data variables.product.prodname_dependabot_security_updates %}
582584
on Artifactory. If you get a 401 authentication error, you need to remove the `target-branch` property from your `dependabot.yml` file. For more information, see [ARTIFACTORY: Why GitHub Dependabot security updates are failing with 401 Authentication error, when it initiates a connection with Artifactory npm private registry for security updates](https://jfrog.com/help/r/artifactory-why-github-dependabot-security-updates-are-failing-with-401-authentication-error-when-it-initiates-a-connection-with-artifactory-npm-private-registry-for-security-updates/issue-description) in the JFrog Artifactory documentation.
585+
{% endif %}
583586

584587
### Azure Artifacts
585588

Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
# Reference: #13873
2+
# Dependabot security updates will reference private registries even if a target-branch is specified - [GA]
3+
versions:
4+
fpt: '*'
5+
ghec: '*'
6+
ghes: '> 3.12'

0 commit comments

Comments
 (0)