anchor.diff:        name: "sample-image:latest"
     source:
       git:
  -      uri: "https://github.com/user/app.git" <1>
  +      uri: "https://github.com/user/app.git"
       sourceSecret:
         name: "basicsecret"
       type: "Git"
  
positive.code: 
  // end::using-a-proxy-for-git-cloning-1[]
  
  [[trusted-certificate-authorities]]
  ==== Trusted Certificate Authorities
  
  The set of TLS certificate authorities that are trusted during a `git clone`
  operation are built into the {product-title} infrastructure images.  If your Git
  server uses a self-signed certificate or one signed by an authority not trusted
  by the image, you can disable TLS  verification by setting the
  `*GIT_SSL_NO_VERIFY*` environment variable to *true* in the appropriate strategy
  section of your build configuration. You can use the
  xref:../dev_guide/environment_variables.adoc#overview[`oc set env`] command to
  manage `*BuildConfig*` environment variables.
  
  [[using-private-repositories-for-builds]]
  ==== Using Private Repositories for Builds
  
  Supply valid credentials to build an application from a private repository.
  
  Currently two types of authentication are supported: basic username-password
  and SSH key based authentication.
  
  [[basic-authentication]]
  ===== Basic Authentication
  
  Basic authentication requires either a combination of `username` and `password`,
  or a `token` to authenticate against the SCM server. A `CA certificate` file,
  or a `.gitconfig` file can be attached.
  
  A xref:../dev_guide/secrets.adoc#dev-guide-secrets[`*secret*`] is used to store your keys.
  
  . Create the `*secret*` first before using the username and password to access
  the private repository:
  +
  ====
  ----
  $ oc secrets new-basicauth basicsecret --username=USERNAME --password=PASSWORD
  ----
  ====
  
  .. To create a Basic Authentication Secret with a token:
  +
  ====
  ----
  $ oc secrets new-basicauth basicsecret --password=TOKEN
  ----
  ====
  
  .. To create a Basic Authentication Secret with a CA certificate file:
  +
  ====
  ----
  $ oc secrets new-basicauth basicsecret --username=USERNAME --password=PASSWORD --ca-cert=FILENAME
  ----
  ====
  
  .. To create a Basic Authentication Secret with a `.gitconfig` file:
  +
  ====
  ----
  $ oc secrets new-basicauth basicsecret --username=USERNAME --password=PASSWORD --gitconfig=FILENAME
  ----
  ====
  
  . Add the `*secret*` to the builder service account. Each build is run with
  the `builder` role, so you need to give it access your secret with the
  following command:
  +
  ====
  
negative.code: ====
  
  . Add a `*sourceSecret*` field to the `*source*` section inside the
  `*BuildConfig*` and set it to the name of the `*secret*` that you created,
  which in this case is `*basicsecret*`.
  +
  ====
  [source,yaml]
  