jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-21 02:46:50 -05:00
Code Issues Projects Releases Wiki Activity

Group user docs on code security into a new "product" (#18196)

Browse Source
This commit is contained in:
Felicity Chapman
2021-03-16 17:25:29 +00:00
committed by GitHub
parent 8f63a4450c
commit 024014740b
96 changed files with 2747 additions and 129 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
content/github/visualizing-repository-data-with-graphs/about-the-dependency-graph.md
View File

@@ -2,8 +2,7 @@
title: About the dependency graph
intro: 'Detailed information about the dependency graph, the ecosystems it supports, and how it determines which packages a repository depends on.'
versions:
free-pro-team: '*'
enterprise-server: '*'
enterprise-server: '<=2.22'
---
### Dependency graph availability
@@ -45,7 +44,7 @@ You can use the dependency graph to:
- Explore the repositories your code depends on{% if currentVersion == "free-pro-team@latest" %}, and those that depend on it{% endif %}. For more information, see "[Exploring the dependencies of a repository](/github/visualizing-repository-data-with-graphs/exploring-the-dependencies-of-a-repository)." {% if currentVersion == "free-pro-team@latest" %}
- View a summary of the dependencies used in your organization's repositories in a single dashboard. For more information, see "[Viewing insights for your organization](/articles/viewing-insights-for-your-organization#viewing-organization-dependency-insights)."{% endif %}
- View and update vulnerable dependencies for your repository. For more information, see "[About alerts for vulnerable dependencies](/github/managing-security-vulnerabilities/about-alerts-for-vulnerable-dependencies)."{% if currentVersion == "free-pro-team@latest" %}
- View and update vulnerable dependencies for your repository. For more information, see "[About alerts for vulnerable dependencies](/code-security/supply-chain-security/about-alerts-for-vulnerable-dependencies)."{% if currentVersion == "free-pro-team@latest" %}
- See information about vulnerable dependencies in pull requests. For more information, see "[Reviewing dependency changes in a pull request](/github/collaborating-with-issues-and-pull-requests/reviewing-dependency-changes-in-a-pull-request)."{% endif %}
### Enabling the dependency graph

3
content/github/visualizing-repository-data-with-graphs/exploring-the-dependencies-of-a-repository.md
View File

@@ -8,8 +8,7 @@ redirect_from:
- /github/visualizing-repository-data-with-graphs/listing-the-projects-that-depend-on-a-repository
- /github/visualizing-repository-data-with-graphs/exploring-the-dependencies-and-dependents-of-a-repository
versions:
free-pro-team: '*'
enterprise-server: '*'
enterprise-server: '<=2.22'
---
### Viewing the dependency graph

5
content/github/visualizing-repository-data-with-graphs/index.md
View File

@@ -25,5 +25,6 @@ versions:
{% topic_link_in_list /understanding-connections-between-repositories %}
{% link_in_list /viewing-a-repositorys-network %}
{% link_in_list /listing-the-forks-of-a-repository %}
{% link_in_list /about-the-dependency-graph %}
{% link_in_list /exploring-the-dependencies-of-a-repository %}
{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@2.22" %}{% link_in_list /viewing-the-dependencies-of-a-repository %}{% endif %}
{% if currentVersion ver_lt "enterprise-server@3.0" %}{% link_in_list /about-the-dependency-graph %}
{% link_in_list /exploring-the-dependencies-of-a-repository %}{% endif %}

13
content/github/visualizing-repository-data-with-graphs/viewing-the-dependencies-of-a-repository.md Normal file
View File

@@ -0,0 +1,13 @@
---
title: Viewing the dependencies of a repository
intro: 'You can use the dependency graph to explore the code your repository depends on.'
versions:
free-pro-team: '*'
enterprise-server: '>=3.0'
---
Almost all software relies on code developed and maintained by other developers, often known as a supply chain. For example, utilities, libraries, and frameworks. These dependencies are an integral part of your code and any bugs or vulnerabilities in them may affect your code. It's important to review and maintain these dependencies.
The dependency graph provides a great way to visualize and explore the dependencies for a repository. For more information, see "[About the dependency graph](/code-security/supply-chain-security/about-the-dependency-graph)" and "[Exploring the dependencies of a repository](/code-security/supply-chain-security/exploring-the-dependencies-of-a-repository)."
You can also set up your repository so that {% data variables.product.company_short %} alerts you automatically whenever a security vulnerability is found in one of your dependencies. For more information, see "[About alerts for vulnerable dependencies](/github/managing-security-vulnerabilities/about-alerts-for-vulnerable-dependencies)."