Description
What article on docs.github.com is affected?
What part(s) of the article would you like to see updated?
Terraform section.
Additional information
Terraform supports the following sources:
- Local paths
- Terraform Registry
- GitHub
- Bitbucket
- Generic Git, Mercurial repositories
- HTTP URLs
- S3 buckets
- GCS buckets
- Modules in Package Sub-directories
Out of these, it is very unclear which all are supported by Dependabot.
Update following discussion below
Answer
For anyone else with the same question, the answer was:
Dependabot can be used to manage version updates for dependencies that are stored in GitHub for all the supported package managers. In addition, for some package managers, you can include a
registries
section in your configuration file to allow access to private registries. This is supported for Terraform, see Configuration options for private registries.
If you need to access dependencies in git hosted by other services, like GitLab and BitBucket, you can add the
git
option to yourregistries
section. See Configuration options for dependency updates.
Content design plan
"Supported repositories and ecosystems" section of About Dependabot version updates
- Update the introduction to mention that dependencies in private registeries are also supported (similar to the mention of vendored dependencies).
- Update the link to the article with configuration options - link to both the
#vendor
anchor and also the#registries
anchor.
"package-ecosystem
" section of Configuration options for dependency updates
- Add a brief sentence, similar to that for
vendor
mentioning private registries and linking toregistries
.
"Configuration options for private registries" section of Configuration options for dependency updates
- Add a brief sentence to the first paragraph, mentioning that you can give Dependabot access to private package registries hosted by GitLab or Bitbucket by specifying a
type
ofgit
and linking togit
.