Support for cargo dependencies using ssh://git@github.com

dependabot / dependabot-core

🤖 Dependabot's core logic for creating update PRs.

https://docs.github.com/en/code-security/dependabot

MIT License

4.72k stars 1.02k forks source link

Support for cargo dependencies using ssh://git@github.com #7079

Open pocesar opened 1 year ago

pocesar commented 1 year ago

Is there an existing issue for this?

[X] I have searched the existing issues

Feature description

Having this inside .cargo/config:

# .cargo/config
[net]
git-fetch-with-cli = true

makes currently impossible to have a dependency as:

# Cargo.toml
[dependencies]
some_dependency = { tag = "0.0.1", git = "ssh://git@github.com/org/repo.git" }

The current flow works fine with Docker, local dev and github actions (with webfactory/ssh-agent), only missing dependabot ability to do so

AdamLeyshon commented 3 months ago

I know this is a year old now but I hope this can be added soon. We have many internal crates that we use via Git+SSH that we would like dependabot to work with.