cloudposse
diff --git a/‎internal/exec/go_getter_utils.go
+9-2 b/‎internal/exec/go_getter_utils.go
+9-2
diff --git a/‎internal/exec/go_getter_utils_test.go
+34 b/‎internal/exec/go_getter_utils_test.go
+34
diff --git a/‎internal/exec/vendor_component_utils.go
+14-1 b/‎internal/exec/vendor_component_utils.go
+14-1
diff --git a/‎internal/exec/vendor_model.go
+68-3 b/‎internal/exec/vendor_model.go
+68-3
diff --git a/‎tests/fixtures/scenarios/vendor-creds-sanitize/atmos.yaml
+1-2 b/‎tests/fixtures/scenarios/vendor-creds-sanitize/atmos.yaml
+1-2
diff --git a/‎tests/fixtures/scenarios/vendor-creds-sanitize/vendor.yaml
+23-5 b/‎tests/fixtures/scenarios/vendor-creds-sanitize/vendor.yaml
+23-5
diff --git a/‎tests/fixtures/scenarios/vendor-pulls-ssh/atmos.yaml
+1-1 b/‎tests/fixtures/scenarios/vendor-pulls-ssh/atmos.yaml
+1-1
diff --git a/‎tests/fixtures/scenarios/vendor-pulls-ssh/vendor.yaml
+1-1 b/‎tests/fixtures/scenarios/vendor-pulls-ssh/vendor.yaml
+1-1
diff --git a/‎tests/fixtures/scenarios/vendoring-dry-run/atmos.yaml
+19 b/‎tests/fixtures/scenarios/vendoring-dry-run/atmos.yaml
+19
diff --git a/‎tests/fixtures/scenarios/vendoring-dry-run/components/terraform/ipinfo/component.yaml
+17 b/‎tests/fixtures/scenarios/vendoring-dry-run/components/terraform/ipinfo/component.yaml
+17
diff --git a/‎tests/snapshots/TestCLICommands_atmos_vendor_pull_component_using_SSH.stderr.golden
+22 b/‎tests/snapshots/TestCLICommands_atmos_vendor_pull_component_using_SSH.stderr.golden
+22
diff --git a/‎tests/snapshots/TestCLICommands_atmos_vendor_pull_component_using_SSH.stdout.golden b/‎tests/snapshots/TestCLICommands_atmos_vendor_pull_component_using_SSH.stdout.golden
@@ -95,13 +95,21 @@ func (d *CustomGitDetector) Detect(src, _ string) (string, bool, error) {
 		return "", false, fmt.Errorf("failed to parse URL %q: %w", maskedSrc, err)
 	}
 
+	// If no host is detected, this is likely a local file path.
+	// Skip custom processing so that go getter handles it as is.
+	if parsedURL.Host == "" {
+		log.Debug("No host detected in URL, skipping custom git detection", keyURL, src)
+		return "", false, nil
+	}
+
 	// Normalize the path.
 	d.normalizePath(parsedURL)
 
 	// Adjust host check to support GitHub, Bitbucket, GitLab, etc.
 	host := strings.ToLower(parsedURL.Host)
 	if host != hostGitHub && host != hostBitbucket && host != hostGitLab {
-		log.Debug("Skipping token injection for a unsupported host", "host", parsedURL.Host)
+		log.Debug("Skipping token injection for an unsupported host", "host", parsedURL.Host)
+		return "", false, nil
 	}
 
 	log.Debug("Reading config param", "InjectGithubToken", d.AtmosConfig.Settings.InjectGithubToken)
@@ -263,7 +271,6 @@ func getDefaultUsername(host string) string {
 				return "x-token-auth"
 			}
 		}
-		log.Debug("Using Bitbucket username", "username", defaultUsername)
 		return defaultUsername
 	default:
 		return "x-access-token"
 
@@ -267,6 +267,40 @@ func TestNormalizePath_ErrorHandling(t *testing.T) {
 	}
 }
 
+func TestDetect_LocalFilePath(t *testing.T) {
+	// This tests the branch when the input is a local file path (no host).
+	config := fakeAtmosConfig(false)
+	detector := &CustomGitDetector{AtmosConfig: config, source: "/home/user/repo"}
+	localFile := "/home/user/repo/README.md"
+	result, ok, err := detector.Detect(localFile, "")
+	if err != nil {
+		t.Fatalf("Expected no error for local file path, got: %v", err)
+	}
+	if ok != false {
+		t.Errorf("Expected ok to be false for local file path, got true")
+	}
+	if result != "" {
+		t.Errorf("Expected result to be empty for local file path, got: %s", result)
+	}
+}
+
+func TestDetect_UnsupportedHost(t *testing.T) {
+	// This tests the branch when the URL host is not supported (not GitHub, GitLab, or Bitbucket)
+	config := fakeAtmosConfig(false)
+	detector := &CustomGitDetector{AtmosConfig: config, source: "repo.git"}
+	unsupportedURL := "https://example.com/repo.git"
+	result, ok, err := detector.Detect(unsupportedURL, "")
+	if err != nil {
+		t.Fatalf("Expected no error for unsupported host, got: %v", err)
+	}
+	if ok != false {
+		t.Errorf("Expected ok to be false for unsupported host, got true")
+	}
+	if result != "" {
+		t.Errorf("Expected result to be empty for unsupported host, got: %s", result)
+	}
+}
+
 func TestMain(m *testing.M) {
 	code := m.Run()
 	getter.Detectors = originalDetectors
 
@@ -386,13 +386,26 @@ func parseMixinURI(mixin *schema.VendorComponentMixins) (string, error) {
 func downloadComponentAndInstall(p *pkgComponentVendor, dryRun bool, atmosConfig *schema.AtmosConfiguration) tea.Cmd {
 	return func() tea.Msg {
 		if dryRun {
-			// Simulate the action
+			if needsCustomDetection(p.uri) {
+				log.Debug("Dry-run mode: custom detection required for component (or mixin) URI", "component", p.name, "uri", p.uri)
+				detector := &CustomGitDetector{AtmosConfig: *atmosConfig, source: ""}
+				_, _, err := detector.Detect(p.uri, "")
+				if err != nil {
+					return installedPkgMsg{
+						err:  fmt.Errorf("dry-run: detection failed for component %s: %w", p.name, err),
+						name: p.name,
+					}
+				}
+			} else {
+				log.Debug("Dry-run mode: skipping custom detection; URI already supported by go-getter", "component", p.name, "uri", p.uri)
+			}
 			time.Sleep(100 * time.Millisecond)
 			return installedPkgMsg{
 				err:  nil,
 				name: p.name,
 			}
 		}
+
 		if p.IsComponent {
 			err := installComponent(p, atmosConfig)
 			if err != nil {
 
@@ -2,6 +2,7 @@ package exec
 
 import (
 	"fmt"
+	"net/url"
 	"os"
 	"path/filepath"
 	"strings"
@@ -18,6 +19,7 @@ import (
 	"github.com/cloudposse/atmos/internal/tui/templates/term"
 	"github.com/cloudposse/atmos/pkg/schema"
 	"github.com/cloudposse/atmos/pkg/ui/theme"
+	u "github.com/cloudposse/atmos/pkg/utils"
 )
 
 type pkgType int
@@ -330,8 +332,9 @@ func max(a, b int) int {
 
 func downloadAndInstall(p *pkgAtmosVendor, dryRun bool, atmosConfig *schema.AtmosConfiguration) tea.Cmd {
 	return func() tea.Msg {
+		log.Debug("Downloading and installing package", "package", p.name)
 		if dryRun {
-			return handleDryRunInstall(p)
+			return handleDryRunInstall(p, atmosConfig)
 		}
 		tempDir, err := createTempDir()
 		if err != nil {
@@ -385,15 +388,77 @@ func (p *pkgAtmosVendor) installer(tempDir *string, atmosConfig *schema.AtmosCon
 	return nil
 }
 
-func handleDryRunInstall(p *pkgAtmosVendor) tea.Msg {
-	// Simulate the action
+func handleDryRunInstall(p *pkgAtmosVendor, atmosConfig *schema.AtmosConfiguration) tea.Msg {
+	log.Debug("Entering dry-run flow for generic (non component/mixin) vendoring ", "package", p.name)
+
+	if needsCustomDetection(p.uri) {
+		log.Debug("Custom detection required for URI", "uri", p.uri)
+		detector := &CustomGitDetector{AtmosConfig: *atmosConfig, source: ""}
+		_, _, err := detector.Detect(p.uri, "")
+		if err != nil {
+			return installedPkgMsg{
+				err:  fmt.Errorf("dry-run: detection failed: %w", err),
+				name: p.name,
+			}
+		}
+	} else {
+		log.Debug("Skipping custom detection; URI already supported by go getter", "uri", p.uri)
+	}
+
 	time.Sleep(500 * time.Millisecond)
 	return installedPkgMsg{
 		err:  nil,
 		name: p.name,
 	}
 }
 
+// Thie is a replica of getForce method from go getter library, had to make it as it is not exported.
+// The idea is to call Detect method in dry run only for those links where go getter does this.
+// Otherwise, Detect is run for every link being vendored which isn't correct.
+func needsCustomDetection(src string) bool {
+	_, getSrc := "", src
+	if idx := strings.Index(src, "::"); idx >= 0 {
+		_, getSrc = src[:idx], src[idx+2:]
+	}
+
+	getSrc, _ = getter.SourceDirSubdir(getSrc)
+
+	if absPath, err := filepath.Abs(getSrc); err == nil {
+		if u.FileExists(absPath) {
+			return false
+		}
+		isDir, err := u.IsDirectory(absPath)
+		if err == nil && isDir {
+			return false
+		}
+	}
+
+	parsed, err := url.Parse(getSrc)
+	if err != nil || parsed.Scheme == "" {
+		return true
+	}
+
+	supportedSchemes := map[string]bool{
+		"http":      true,
+		"https":     true,
+		"git":       true,
+		"hg":        true,
+		"s3":        true,
+		"gcs":       true,
+		"file":      true,
+		"oci":       true,
+		"ssh":       true,
+		"git+ssh":   true,
+		"git+https": true,
+	}
+
+	if _, ok := supportedSchemes[parsed.Scheme]; ok {
+		return false
+	}
+
+	return true
+}
+
 func createTempDir() (string, error) {
 	// Create temp directory
 	tempDir, err := os.MkdirTemp("", "atmos-vendor")
 
@@ -1,4 +1,3 @@
-
 base_path: "./"
 settings:
   inject_github_token: true
@@ -17,4 +16,4 @@ stacks:
     - "deploy/**/*"
   excluded_paths:
     - "**/_defaults.yaml"
-  name_pattern: "{stage}"
+  name_pattern: "{stage}"
@@ -7,16 +7,16 @@ spec:
   imports: []
 
   sources:
-    # Basic HTTPS default (token injection expected)
+    # GitHub - Basic HTTPS default (token injection expected)
     - component: "terraform-null-label-basic"
       source: "github.com/cloudposse/terraform-null-label.git?ref={{ .Version }}"
       version: "0.25.0"
       targets:
         - "library/basic/{{ .Component }}"
       tags:
         - demo
-    
-    # Direct credentials provided in the URL (token injection should be skipped)
+
+    # GitHub - Direct credentials provided in the URL (token injection should be skipped)
     - component: "terraform-null-label-direct"
       source: "https://myuser:[email protected]/cloudposse/terraform-null-label.git?ref={{ .Version }}"
       version: "0.25.0"
@@ -25,11 +25,29 @@ spec:
       tags:
         - demo
 
-    # HTTPS with pre-existing credentials (token injection skipped)
+    # GitHub - HTTPS with pre-existing credentials (token injection skipped)
     - component: "terraform-null-label-cred"
       source: "https://[email protected]/cloudposse/terraform-null-label.git?ref={{ .Version }}"
       version: "0.25.0"
       targets:
         - "library/cred/{{ .Component }}"
       tags:
-        - demo
+        - demo
+
+    # GitLab - Public Terraform module (token injection expected)
+    - component: "terraform-gitlab-vpc"
+      source: "gitlab.com/gitlab-org/ci-cd/deploy-stage/environments-group/examples/gitlab-terraform-aws.git?ref={{ .Version }}"
+      version: "master"
+      targets:
+        - "library/gitlab/{{ .Component }}"
+      tags:
+        - demo
+
+    # Bitbucket - Public DevOps module (token injection expected)
+    - component: "terraform-bitbucket-deploy-jenkins"
+      source: "bitbucket.org/blainethemono/terraform-deploy_jenkins_to_k8s_using_terraform.git?ref=master"
+      version: "master"
+      targets:
+        - "library/bitbucket/{{ .Component }}"
+      tags:
+        - demo
@@ -17,4 +17,4 @@ stacks:
   name_pattern: "{stage}"
 logs:
   file: "/dev/stderr"
-  level: Info
+  level: Info
@@ -21,4 +21,4 @@ spec:
       targets:
         - "library/basic/{{ .Component }}"
       tags:
-        - demo
+        - demo
@@ -0,0 +1,19 @@
+base_path: "./"
+settings:
+  inject_github_token: true
+components:
+  terraform:
+    base_path: "components/terraform"
+    apply_auto_approve: false
+    deploy_run_init: true
+    init_run_reconfigure: true
+    auto_generate_backend_file: false
+stacks:
+  base_path: "stacks"
+  included_paths:
+    - "deploy/**/*"
+  excluded_paths:
+    - "**/_defaults.yaml"
+  name_pattern: "{stage}"
+  
+
@@ -0,0 +1,17 @@
+apiVersion: atmos/v1
+kind: ComponentVendorConfig
+metadata:
+  name: ipinfo
+  description: Vendor configuration for the ipinfo component
+spec:
+  source:
+    uri: "git::[email protected]:cloudposse/atmos.git//examples/demo-library/ipinfo?ref=main"
+    version: "main"
+    included_paths:
+      - "**/*.tf"
+      - "**/*.tfvars"
+      - "**/*.md"
+  targets:
+    - "components/terraform/ipinfo/main"
+  tags:
+    - demo