Uploaded image for project: 'Red Hat Internal Developer Platform'
  1. Red Hat Internal Developer Platform
  2. RHIDP-8391

[workspaces/backstage] cannot fetch GendocuPublicApis dependency with hermeto (git protocol not supported)

      2025-08-02 01:54:25,261 INFO Processing the request using yarn@4.8.1
      2025-08-02 01:54:27,509 ERROR cachi2 does not support Git or Exec dependencies for Yarn Berry: GendocuPublicApis@https://git.gendocu.com/gendocu/GendocuPublicApis.git#commit=6e8d4c1d2342556a2e8e719f19385b266001ebae
      2025-08-02 01:54:28,088 ERROR UnsupportedFeature: Found 1 unsupported dependencies, more details in the logs.
      Error: UnsupportedFeature: Found 1 unsupported dependencies, more details in the logs.
        If you need cachi2 to support this feature, please contact the maintainers.
      

      and

      Hermeto currently supports all standard Yarn protocols except for

      • Exec protocol
      • Git/GitHub protocol

      Due to the nature of how the two protocols above work, mainly related to potentially executing arbitrary code, adding support for them with future releases of Hermeto is unlikely.

      https://github.com/hermetoproject/hermeto/blob/main/docs/yarn.md#hermetos-yarn-support-scope (emphasis added)

              Unassigned Unassigned
              nickboldt Nick Boldt
              RHIDP - Cope
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: