Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Dependabot ignores user .npmrc #943

Open
georg-eckert-zeiss opened this issue Jun 28, 2024 · 0 comments
Open

Dependabot ignores user .npmrc #943

georg-eckert-zeiss opened this issue Jun 28, 2024 · 0 comments

Comments

@georg-eckert-zeiss
Copy link

georg-eckert-zeiss commented Jun 28, 2024

Hi there,
I try to run the script for an NPM package.json. It contains some feeds which need authentication, so I put an .npmrc containing that information into the container with

docker cp C:\<Path to my local>\.npmrc <name of created container>:/home/dependabot/

But I get the following error:

/home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.209.0/
  lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:319:
    in 'check_npm_response':
    The following source could not be reached as it requires authentication
    (and any provided details were invalid or lacked the required permissions):
    pkgs.dev.azure.com/<<redacted>>/npm/registry
    (Dependabot::PrivateSourceAuthenticationFailure)

How can I make it use that file?

Best regards.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant