dependabot/dependabot-script

Dependabot ignores user .npmrc

georg-eckert-zeiss opened this issue · 0 comments

Hi there,
I try to run the script for an NPM package.json. It contains some feeds which need authentication, so I put an .npmrc containing that information into the container with

docker cp C:\<Path to my local>\.npmrc <name of created container>:/home/dependabot/

But I get the following error:

/home/dependabot/dependabot-script/.bundle/gems/dependabot-npm_and_yarn-0.209.0/
  lib/dependabot/npm_and_yarn/update_checker/latest_version_finder.rb:319:
    in 'check_npm_response':
    The following source could not be reached as it requires authentication
    (and any provided details were invalid or lacked the required permissions):
    pkgs.dev.azure.com/<<redacted>>/npm/registry
    (Dependabot::PrivateSourceAuthenticationFailure)

How can I make it use that file?

Best regards.