Skip to content

feat(sbom): download dependencies from private repositoies - #296

Draft
nervgh wants to merge 2 commits into
mainfrom
feat/sbom/download-dependencies-from-private-repo
Draft

nervgh wants to merge 2 commits into
mainfrom
feat/sbom/download-dependencies-from-private-repo

Conversation

@nervgh

@nervgh nervgh commented Sep 8, 2026

Copy link
Copy Markdown

No description provided.

Record the request to support private GitLab dependencies in `sbom
packages`
while preserving explicit `werf.yaml` configuration and secret handling.
No
implementation or configuration shape is selected yet.

Signed-off-by: Alexandr Zaytsev <alexandr.zaytsev@flant.com>
Replace the exploratory intake with testable requirements for opt-in
GitLab credentials, multi-host support, and credential isolation while
preserving public dependency workflows.

Signed-off-by: Alexandr Zaytsev <alexandr.zaytsev@flant.com>
@nervgh
nervgh force-pushed the feat/sbom/download-dependencies-from-private-repo branch from a09bbd9 to a20726a Compare September 9, 2026 14:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant