From 2320fa5a0d0cab42480f3f6de91f42ca1bd65ee2 Mon Sep 17 00:00:00 2001 From: "Brett V. Forsgren" Date: Mon, 22 Jun 2026 11:39:16 -0600 Subject: [PATCH] only promote azure cred metadata for cargo ecosystem --- cmd/dependabot/internal/cmd/update.go | 14 ++++++++------ 1 file changed, 8 insertions(+), 6 deletions(-) diff --git a/cmd/dependabot/internal/cmd/update.go b/cmd/dependabot/internal/cmd/update.go index 626d8a38..a197483f 100644 --- a/cmd/dependabot/internal/cmd/update.go +++ b/cmd/dependabot/internal/cmd/update.go @@ -403,7 +403,7 @@ func processInput(input *model.Input, flags *UpdateFlags) { if hasLocalAzureToken && azureRepo != nil { // Add the Azure Artifacts credentials for each host if the package manager is supported. - if _, ok := azureArtifactsPackageManagerCredentialType[input.Job.PackageManager]; ok { + if credType, ok := azureArtifactsPackageManagerCredentialType[input.Job.PackageManager]; ok { // All Azure Artifacts hosts azureArtifactsHosts := []string{ "pkgs.dev.azure.com", @@ -411,15 +411,17 @@ func processInput(input *model.Input, flags *UpdateFlags) { } for _, host := range azureArtifactsHosts { input.Credentials = append(input.Credentials, model.Credential{ - "type": azureArtifactsPackageManagerCredentialType[input.Job.PackageManager], + "type": credType, "host": host, "username": "x-access-token", "password": "$LOCAL_AZURE_ACCESS_TOKEN", }) - input.Job.CredentialsMetadata = append(input.Job.CredentialsMetadata, model.Credential{ - "type": azureArtifactsPackageManagerCredentialType[input.Job.PackageManager], - "host": host, - }) + if input.Job.PackageManager == "cargo" { + input.Job.CredentialsMetadata = append(input.Job.CredentialsMetadata, model.Credential{ + "type": credType, + "host": host, + }) + } } } else { log.Printf("Skipping Azure Artifacts credentials for %s package manager.", input.Job.PackageManager)