From 9e1ccfc52bf581021303b9a82ff47bfa58940b7f Mon Sep 17 00:00:00 2001 From: SurefireStudios <123013554+SurefireStudios@users.noreply.github.com> Date: Tue, 15 Sep 2026 08:24:42 -0700 Subject: [PATCH] Correct language tags on five non-YAML code examples Five blocks in "Remove access to public registries" are tagged `yaml copy` but contain other formats: two yarn.lock excerpts, a pip.conf INI section, a Pipfile TOML section, and a pyproject.toml TOML section. None parse as YAML, and each is highlighted with the wrong grammar. Retagged as `text`, which is already used elsewhere in content/ for formats without a dedicated tag. The seven genuine dependabot.yml examples in this article are unchanged. --- .../remove-access-to-public-registries.md | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/remove-access-to-public-registries.md b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/remove-access-to-public-registries.md index c9f1c8d50c8a..6278f26838dc 100644 --- a/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/remove-access-to-public-registries.md +++ b/content/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/remove-access-to-public-registries.md @@ -164,7 +164,7 @@ Define the private registry configuration in a `dependabot.yml` file. For more i To ensure the private registry is listed as the dependency source in the project's `yarn.lock` file, run `yarn install` on a machine with private registry access. Yarn should update the `resolved` field to include the private registry URL. -```yaml copy +```text copy encoding@^0.1.11: version "0.1.13" resolved "https://private_registry_url/encoding/-/encoding-0.1.13.tgz#56574afdd791f54a8e9b2785c0582a2d26210fa9" @@ -205,7 +205,7 @@ To ensure the private registry is listed as the dependency source in the project {% raw %} -```yaml copy +```text copy encoding@^0.1.11: version "0.1.13" resolved "https://private_registry_url/encoding/-/encoding-0.1.13.tgz#56574afdd791f54a8e9b2785c0582a2d26210fa9" @@ -298,7 +298,7 @@ Define the private registry configuration in a `dependabot.yml` file. For more i Add the private registry URL to the `[global]` section of the `pip.conf` file and check the file into the repository. - ```yaml copy + ```text copy [global] timeout = 60 index-url = https://private_registry_url @@ -338,7 +338,7 @@ To configure Pipenv to only access private registries, remove `replaces-base` fr Add the private registry URL to the `[[source]]` section of the `Pipfile` file and check the file into the repository. -```yaml copy +```text copy [[source]] url = "https://private_registry_url" verify_ssl = true @@ -351,7 +351,7 @@ To configure Poetry to only access private registries, set `replaces-base: true` Add the private registry url to the `[[tool.poetry.source]]` section of the `pyproject.toml` file and checked it in the repository. -```yaml copy +```text copy [[tool.poetry.source]] name = "private" url = "https://private_registry_url"