Skip to content

Packages from Private GitHub package repos are being reported with nuget.org Fake URLs #55

@stunney

Description

@stunney

Describe the bug
We have proprietary packages in nuget.pkg.github.com/MYCORP. When generating our FOSS list with your tool all packages are output to the readme.md with https://www.nuget.org/packages/MYPACKAGE/VERSION which doesn't exist. No license information is gathered either. Right now this scenario only pertains to NUGET but it might very likely pertain to NPM in the future for us. My GitHub PAT has access to these repositories as well for the restore and also has package:read permissions in the PAT as well. No errors are reported during the runtime of the tool.

To Reproduce
Create a CSPROJ with a private package coming from GitHub.

Expected behavior
The proper URL and other things such as licensing should be output.

Environment

  • OS: MacOS 13.3.1
  • .net framework version: 6.0.100

Thank you :)

Metadata

Metadata

Assignees

Labels

No labels
No labels

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions