search

patrickjahns / dependabot-terraform-action

🔧 Github action for running dependabot on terraform repositories with HCL 2.0
MIT License
22 stars 7 forks source link

Private modules in Terraform Cloud not picked up #35

Open anthonyangel opened 4 years ago

anthonyangel commented 4 years ago

My private modules in Terraform cloud aren't showing up (Terraform Cloud has a connection to GitHub, which is where these are stored)

I've set the github_dependency_token to a token which has read access to all repos, and the action is showing as successful (no errors and it picks up public modules just fine), is there something I'm missing for private ones?

patrickjahns commented 4 years ago

@anthonyangel

I haven't tested using private modules with dependabot. In my use-cases I solely rely on public terraform modules, or modules in version control (i.e. (private) github repositories).

I briefly checked upstream for any information on private repository support. It seems that private modules ( private registries ) are currently not supported: https://github.com/dependabot/feedback/issues/653