Skip to content

Support allow-listing by git link prefix #697

Open
@jgpaiva

Description

Is your feature request related to a problem? Please describe.
My org heavily depends on git dependencies. Using licenses.private, I can set ignore = true and use registries = ["my-registry"] to ignore all dependencies from a specific registry, but I couldn't find a way to do the same for a specific git repo. I found I can do ignore-sources = ["git+ssh://[email protected]/team1/repo1git", "git+ssh://[email protected]/team1/repo2git"], but that's very tedious for our large projects and causes frequent breakage.

Describe the solution you'd like
In an ideal world, I'd be able to specify something like ignore-git = [ "git+ssh://[email protected]" ] and everything from that source would be ignored.

Describe alternatives you've considered
The only alternative I could find was to explicitly name very single transitive internal dependency of my project, and keep that list up-to-date as it changes upstream.

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions