Skip to content

Commit 98f5c4b

Browse files
authored
Support for Dependabot private registry hex-organization (github#18793)
1 parent 95a4a12 commit 98f5c4b

File tree

1 file changed

+15
-0
lines changed

1 file changed

+15
-0
lines changed

content/code-security/supply-chain-security/configuration-options-for-dependency-updates.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -731,6 +731,7 @@ You use the following options to specify access settings. Registry settings must
731731
| `url` | The URL to use to access the dependencies in this registry. The protocol is optional. If not specified, `https://` is assumed. {% data variables.product.prodname_dependabot %} adds or ignores trailing slashes as required. |
732732
| `username` | The username that {% data variables.product.prodname_dependabot %} uses to access the registry. |
733733
| `password` | A reference to a {% data variables.product.prodname_dependabot %} secret containing the password for the specified user. For more information, see "[Managing encrypted secrets for Dependabot](/github/administering-a-repository/managing-encrypted-secrets-for-dependabot)." |
734+
| `key` | A reference to a {% data variables.product.prodname_dependabot %} secret containing an access key for this registry. For more information, see "[Managing encrypted secrets for Dependabot](/github/administering-a-repository/managing-encrypted-secrets-for-dependabot)." |
734735
| `token` | A reference to a {% data variables.product.prodname_dependabot %} secret containing an access token for this registry. For more information, see "[Managing encrypted secrets for Dependabot](/github/administering-a-repository/managing-encrypted-secrets-for-dependabot)." |
735736
| `replaces-base` | For registries with `type: python-index`, if the boolean value is `true`, pip resolves dependencies by using the specified URL rather than the base URL of the Python Package Index (by default `https://pypi.org/simple`). |
736737

@@ -795,6 +796,20 @@ registries:
795796
```
796797
{% endraw %}
797798

799+
#### `hex-organization`
800+
801+
The `hex-organization` type supports organization and key.
802+
803+
{% raw %}
804+
```yaml
805+
registries:
806+
github-hex-org:
807+
type: hex-organization
808+
organization: github
809+
key: ${{secrets.MY_HEX_ORGANIZATION_KEY}}
810+
```
811+
{% endraw %}
812+
798813
#### `maven-repository`
799814

800815
The `maven-repository` type supports username and password, or token.

0 commit comments

Comments
 (0)