Skip to content

fix: 配置 Dependabot 访问组织内私有 NuGet 源#3

Merged
BAKAOLC merged 1 commit into
mainfrom
fix/dependabot-private-registry
Nov 15, 2025
Merged

fix: 配置 Dependabot 访问组织内私有 NuGet 源#3
BAKAOLC merged 1 commit into
mainfrom
fix/dependabot-private-registry

Conversation

@BAKAOLC

@BAKAOLC BAKAOLC commented Nov 15, 2025

Copy link
Copy Markdown
Collaborator

问题描述

修复 Dependabot 无法访问组织内私有 NuGet 源的问题。

更改内容

  • 移除手动 token 配置,依赖组织级别的自动访问权限
  • 配置私有 GitHub Packages NuGet 源
  • 简化配置,利用同一组织下的自动访问机制

注意事项

需要在组织设置中确保 Dependabot 有访问私有包的权限:

  • 组织设置 → Security → Code security and analysis → Dependabot
  • 确保已启用对私有仓库的访问权限

测试

等待 Dependabot 运行后验证是否能正常访问私有包源。

- 移除手动 token 配置,依赖组织级别的自动访问权限
- 配置私有 GitHub Packages NuGet 源
- 解决 Dependabot 无法访问私有包的问题
Copilot AI review requested due to automatic review settings November 15, 2025 15:42

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR configures Dependabot to access the organization's private GitHub Packages NuGet source by removing manual token configuration and relying on organization-level automatic access permissions.

  • Added a registries section to configure the private GitHub Packages NuGet feed
  • Referenced the registry in the nuget package ecosystem updates configuration
  • Simplified authentication by leveraging automatic access within the same organization

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .github/dependabot.yml
@BAKAOLC BAKAOLC merged commit 3cd7db5 into main Nov 15, 2025
7 checks passed
@BAKAOLC BAKAOLC deleted the fix/dependabot-private-registry branch November 15, 2025 15:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants