Nuget ecosystem on a repository with private submodules

[serban-seeq]

Hi, I recently broke our dependabot because I added a submodule of a private repo to my main private repo. I really dont want to scan or do anything with the submodule since there is a related dependabot action running on that repo already. Dependabot chokes on the nuget action with:

Cloning into '/home/dependabot/dependabot-updater/repo/deps/privatesubmodule'...
fatal: could not read Username for 'https://github.com/': No such device or address
fatal: clone of 'https://github.com/org/privatesubmodule.git' into submodule path '/home/dependabot/dependabot-updater/repo/deps/privatesubmodule' failed

I tried adding a registry with a PAT that has readonly access to the privatesubmodule repo but its still not working

registries:
  github-octocat:
    type: git
    url: https://github.com
    username: x-access-token
    password: ${{ secrets.MY_PAT}}

Im using /.github/dependabot.yml so no special env/runner/workflow.

 - package-ecosystem: "nuget"
    directory: "/somefolder"
    registries:
      - github-octocat
    schedule:
      interval: "weekly"