Yarn: Yarn audit does not work with an external repository

[adamscybot]

Do you want to request a feature or report a bug?
Bug

What is the current behavior?

When running yarn audit with the --registry flag, it uses the main yarn repo anyway.

If the current behavior is a bug, please provide the steps to reproduce.

Execute yarn audit --registry https://registry.npmjs.org/

What is the expected behavior?

Audit calls are made to the defined registry. This is especially important for everyone with third party repo's where the outside world it blocked on CI agents. Or if you're using some kind of proxy.

Please mention your node.js, yarn and operating system version.

Mac Os Mojave
Yarn 1.13.0
Node 10.15.1

[abhisheksoni27]

What exactly is happening on LINE 217 ?
https://github.com/yarnpkg/yarn/blob/0f0520380a60be3ba347774cc6e07fcea443d6d5/src/cli/commands/audit.js#L211-L225

Do you have an endpoint configured that automatically calls npm's audit registry ?

[gaiazov]

@abhisheksoni27 on line 217 the YARN_REGISTRY constant is used, which corresponds to https://registry.yarnpkg.com https://github.com/yarnpkg/yarn/blob/0f0520380a60be3ba347774cc6e07fcea443d6d5/src/constants.js#L21

[pratyushj]

Hey, can I try to solve this bug?

[eugenesimakin]

Hi @pratyushj, the issue already has its PR #7263. Thanks!
In addition to that, it has a duplicate PR #6484