Code of Conduct
What article on docs.github.com is affected?
https://docs.github.com/en/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories
What part(s) of the article would you like to see updated?
Dependabot sometimes cannot resolve private dependencies for some ecosystems (e.g. Nix, currently)
However, this is expressed in 3 different expressions:
- Private Registries
- Private Dependencies
- Private Repositories
Those can be misleading
For example:
I personally thought dependabot was completely not working for some ecosystems independently of private dependencies when the dependabot.yml file was inside of a private repository
Additional information
No response
Code of Conduct
What article on docs.github.com is affected?
https://docs.github.com/en/code-security/reference/supply-chain-security/supported-ecosystems-and-repositories
What part(s) of the article would you like to see updated?
Dependabot sometimes cannot resolve private dependencies for some ecosystems (e.g. Nix, currently)
However, this is expressed in 3 different expressions:
Those can be misleading
For example:
I personally thought dependabot was completely not working for some ecosystems independently of private dependencies when the
dependabot.ymlfile was inside of a private repositoryAdditional information
No response