diff --git a/assets/images/help/security/enable-ghas-private-repo.png b/assets/images/help/security/enable-ghas-private-repo.png new file mode 100644 index 0000000000..6922b633dd Binary files /dev/null and b/assets/images/help/security/enable-ghas-private-repo.png differ diff --git a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md index d5c6d729a9..9a8151339a 100644 --- a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md +++ b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md @@ -33,6 +33,8 @@ Dependency review is available in all public repositories in all products and ca Dependency review is included in {% data variables.product.product_name %} for public repositories. To use dependency review in private repositories owned by organizations, you must have a license for [{% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security) and have the dependency graph enabled. For more information, see "[Exploring the dependencies of a repository](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository)." {% data reusables.dependabot.enabling-disabling-dependency-graph-private-repo %} +5. If "{% data variables.product.prodname_GH_advanced_security %}" is not enabled, click **Enable**. + ![Screenshot of GitHub Advanced Security feature with "Enable" button emphasized](/assets/images/help/security/enable-ghas-private-repo.png) {% elsif ghes or ghae %} Dependency review is available when dependency graph is enabled for {% data variables.product.product_location %} and {% data variables.product.prodname_advanced_security %} is enabled for the organization or repository. For more information, see "[Enabling {% data variables.product.prodname_GH_advanced_security %} for your enterprise](/admin/code-security/managing-github-advanced-security-for-your-enterprise/enabling-github-advanced-security-for-your-enterprise)." diff --git a/data/reusables/dependabot/enabling-disabling-dependency-graph-private-repo.md b/data/reusables/dependabot/enabling-disabling-dependency-graph-private-repo.md index a3e1f20f63..910bc0aea9 100644 --- a/data/reusables/dependabot/enabling-disabling-dependency-graph-private-repo.md +++ b/data/reusables/dependabot/enabling-disabling-dependency-graph-private-repo.md @@ -7,5 +7,5 @@ You can also enable or disable the dependency graph for all repositories owned b {% data reusables.repositories.navigate-to-code-security-and-analysis %} 4. Read the message about granting {% data variables.product.product_name %} read-only access to the repository data to enable the dependency graph, then next to "Dependency Graph", click **Enable**. !["Enable" button for the dependency graph](/assets/images/help/repository/dependency-graph-enable-button.png) - -You can disable the dependency graph at any time by clicking **Disable** next to "Dependency Graph" on the Security & analysis tab. \ No newline at end of file + + You can disable the dependency graph at any time by clicking **Disable** next to "Dependency Graph" on the Code security and analysis tab. \ No newline at end of file