dependabot-core icon indicating copy to clipboard operation
dependabot-core copied to clipboard
verified publisher icon dependabot

Allow specifying a custom GOPRIVATE in dependabot.yml

Open itaischwartz opened this issue 2 years ago • 4 comments

Is there an existing issue for this?

  • [X] I have searched the existing issues

Feature description

Dependabot should allow providing custom GOPRIVATE. In my case, go modules are named go.company.com/<packageName> but hosted at github.com/company/ So I need a way to configure GOPRIVATE=go.company.com,github.com/company

suggested here: https://github.com/dependabot/dependabot-core/issues/1437#issuecomment-1020449381

itaischwartz avatar May 08 '23 08:05 itaischwartz

Any plans to support this in the near future? I'm trying to decide if we should migrate our go modules back to GitHub :(

itaischwartz avatar May 17 '23 11:05 itaischwartz

The workaround suggested here https://github.com/dependabot/dependabot-core/issues/1437#issuecomment-1020449381 doesn't work for me.

itaischwartz avatar May 22 '23 10:05 itaischwartz

We would be very interested in this as well!

blackfyre avatar Jan 15 '25 11:01 blackfyre

Adding Yahoo who is interested in this feature and also tagged as Blocker - https://github.com/githubcustomers/Yahoo-Inc/issues/103

syegappan avatar Jun 17 '25 19:06 syegappan

You can now commit a go.env file and Dependabot will use it during the update. This allows you to set any environment variables needed such as GOPRIVATE.

jakecoffman avatar Oct 24 '25 13:10 jakecoffman