Octomerger Bot
@@ -42,8 +42,11 @@ After you configure {% data variables.location.product_location %} to use {% dat
|
||||
|
||||
Any VM that you use for {% data variables.product.prodname_dependabot %} runners must meet the requirements for self-hosted runners. In addition, they must meet the following requirements.
|
||||
|
||||
- Linux operating system{% ifversion ghes < 3.5 %}
|
||||
- Git installed{% endif %}
|
||||
- Linux operating system
|
||||
- x64 architecture
|
||||
{%- ifversion ghes < 3.5 %}
|
||||
- Git installed
|
||||
{%- endif %}
|
||||
- Docker installed with access for the runner users:
|
||||
- We recommend installing Docker in rootless mode and configuring the runners to access Docker without `root` privileges.
|
||||
- Alternatively, install Docker and give the runner users raised privileges to run Docker.
|
||||
|
||||
@@ -50,6 +50,8 @@ You can enable a related feature, {% data variables.product.prodname_dependabot_
|
||||
|
||||
{% data reusables.dependabot.dependabot-updates-and-actions %}
|
||||
|
||||
{% data reusables.dependabot.dependabot-actions-support %}
|
||||
|
||||
## About pull requests for security updates
|
||||
|
||||
Each pull request contains everything you need to quickly and safely review and merge a proposed fix into your project. This includes information about the vulnerability like release notes, changelog entries, and commit details. Details of which vulnerability a pull request resolves are hidden from anyone who does not have access to {% data variables.product.prodname_dependabot_alerts %} for the repository.
|
||||
|
||||
@@ -841,6 +841,27 @@ registries:
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{% ifversion dependabot-hex-self-hosted-support %}
|
||||
### `hex-repository`
|
||||
|
||||
The `hex-repository` type supports an authentication key.
|
||||
|
||||
`repo` is a required field, which must match the name of the repository used in your dependency declaration.
|
||||
|
||||
The `public-key-fingerprint` is an optional configuration field, representing the fingerprint of the public key for the Hex repository. `public-key-fingerprint` is used by Hex to establish trust with the private repository. The `public-key-fingerprint` field can be either listed in plaintext or stored as a {% data variables.product.prodname_dependabot %} secret.
|
||||
|
||||
{% raw %}
|
||||
```yaml
|
||||
registries:
|
||||
github-hex-repository:
|
||||
type: hex-repository
|
||||
repo: private-repo
|
||||
url: https://private-repo.example.com
|
||||
auth-key: ${{secrets.MY_AUTH_KEY}}
|
||||
public-key-fingerprint: ${{secrets.MY_PUBLIC_KEY_FINGERPRINT}}
|
||||
```
|
||||
{% endraw %}{% endif %}
|
||||
|
||||
### `maven-repository`
|
||||
|
||||
The `maven-repository` type supports username and password.
|
||||
|
||||
@@ -30,6 +30,8 @@ If a contributor bypasses a push protection block for a secret, {% data variable
|
||||
- adds the bypass event to the audit log.{% ifversion secret-scanning-push-protection-email %}
|
||||
- sends an email alert to organization owners, security managers, and repository administrators, with a link to the related secret and the reason why it was allowed.{% endif %}
|
||||
|
||||
{% data reusables.secret-scanning.bypass-reasons-and-alerts %}
|
||||
|
||||
For information on the secrets and service providers supported for push protection, see "[{% data variables.product.prodname_secret_scanning_caps %} patterns](/code-security/secret-scanning/secret-scanning-patterns#supported-secrets-for-push-protection)."
|
||||
|
||||
## Enabling {% data variables.product.prodname_secret_scanning %} as a push protection
|
||||
|
||||
@@ -1,6 +1,6 @@
|
||||
---
|
||||
title: À propos de la sécurité de la chaîne d’approvisionnement
|
||||
intro: '{% data variables.product.product_name %} vous aide à sécuriser votre chaîne d’approvisionnement, en comprenant les dépendances de votre environnement et en connaissant les vulnérabilités de ces dépendances{% ifversion fpt or ghec or ghes %}, puis en les corrigeant{% endif %}.'
|
||||
title: About supply chain security
|
||||
intro: '{% data variables.product.product_name %} helps you secure your supply chain, from understanding the dependencies in your environment, to knowing about vulnerabilities in those dependencies{% ifversion fpt or ghec or ghes %}, and patching them{% endif %}.'
|
||||
miniTocMaxHeadingLevel: 3
|
||||
shortTitle: Supply chain security
|
||||
redirect_from:
|
||||
@@ -19,151 +19,160 @@ topics:
|
||||
- Dependencies
|
||||
- Pull requests
|
||||
- Repositories
|
||||
ms.openlocfilehash: 7c059876a27969b4664d5c8d94dec357a135c2de
|
||||
ms.sourcegitcommit: f638d569cd4f0dd6d0fb967818267992c0499110
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: fr-FR
|
||||
ms.lasthandoff: 10/25/2022
|
||||
ms.locfileid: '148106500'
|
||||
---
|
||||
## À propos de la sécurité de la chaîne d’approvisionnement chez GitHub
|
||||
|
||||
Avec l’utilisation accélérée de l’open source, la plupart des projets dépendent de centaines de dépendances open source. Cela pose un problème de sécurité : que se passe-t-il si les dépendances que vous utilisez sont vulnérables ? Vous pourriez faire courir à vos utilisateurs le risque d’une attaque de chaîne d’approvisionnement. L’une des choses les plus importantes que vous puissiez faire pour protéger votre chaîne d’approvisionnement est de corriger vos dépendances vulnérables{% ifversion GH-advisory-db-supports-malware %} et de remplacer tout logiciel malveillant{% endif %}.
|
||||
## About supply chain security at GitHub
|
||||
|
||||
Vous ajoutez les dépendances directement à votre chaîne d’approvisionnement quand vous les spécifiez dans un fichier manifeste ou un fichier de verrouillage. Les dépendances peuvent également être incluses transitivement ; même si vous ne spécifiez pas une dépendance particulière, mais qu’une de vos dépendances l’utilise, vous êtes également dépendant de cette dépendance.
|
||||
With the accelerated use of open source, most projects depend on hundreds of open-source dependencies. This poses a security problem: what if the dependencies you're using are vulnerable? You could be putting your users at risk of a supply chain attack. One of the most important things you can do to protect your supply chain is to patch your vulnerable dependencies{% ifversion GH-advisory-db-supports-malware %} and replace any malware{% endif %}.
|
||||
|
||||
{% data variables.product.product_name %} offre une gamme de fonctionnalités pour vous aider à comprendre les dépendances dans votre environnement{% ifversion ghae %} et à connaître les vulnérabilités dans ces dépendances{% endif %}{% ifversion fpt or ghec or ghes %}, à connaître les vulnérabilités dans ces dépendances et à les corriger{% endif %}.
|
||||
You add dependencies directly to your supply chain when you specify them in a manifest file or a lockfile. Dependencies can also be included transitively, that is, even if you don’t specify a particular dependency, but a dependency of yours uses it, then you’re also dependent on that dependency.
|
||||
|
||||
Les fonctionnalités de la chaîne d’approvisionnement sur {% data variables.product.product_name %} sont les suivantes :
|
||||
- **Graphe de dépendances**
|
||||
- **Vérification des dépendances**
|
||||
- **{% data variables.product.prodname_dependabot_alerts %} ** {% ifversion fpt or ghec or ghes %}- **{% data variables.product.prodname_dependabot_updates %}**
|
||||
{% data variables.product.product_name %} offers a range of features to help you understand the dependencies in your environment{% ifversion ghae %} and know about vulnerabilities in those dependencies{% endif %}{% ifversion fpt or ghec or ghes %}, know about vulnerabilities in those dependencies, and patch them{% endif %}.
|
||||
|
||||
The supply chain features on {% data variables.product.product_name %} are:
|
||||
- **Dependency graph**
|
||||
- **Dependency review**
|
||||
- **{% data variables.product.prodname_dependabot_alerts %} **
|
||||
{% ifversion fpt or ghec or ghes %}- **{% data variables.product.prodname_dependabot_updates %}**
|
||||
- **{% data variables.product.prodname_dependabot_security_updates %}**
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}** {% endif %}
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}**{% endif %}
|
||||
|
||||
Le graphe de dépendances joue un rôle essentiel pour la sécurité de la chaîne d’approvisionnement. Le graphe de dépendances identifie toutes les dépendances en amont et les éléments dépendants en aval publics d’un dépôt ou d’un package. Vous pouvez voir les dépendances de votre dépôt et certaines de leurs propriétés, telles que les informations sur les vulnérabilités, sur le graphe de dépendances du dépôt.
|
||||
The dependency graph is central to supply chain security. The dependency graph identifies all upstream dependencies and public downstream dependents of a repository or package. You can see your repository’s dependencies and some of their properties, like vulnerability information, on the dependency graph for the repository.
|
||||
|
||||
D’autres fonctionnalités de chaîne d’approvisionnement sur {% data variables.product.prodname_dotcom %} reposent sur les informations fournies par le graphe de dépendances.
|
||||
Other supply chain features on {% data variables.product.prodname_dotcom %} rely on the information provided by the dependency graph.
|
||||
|
||||
- La révision des dépendances utilise le graphe de dépendances pour identifier les modifications de dépendance et vous aider à comprendre l’impact de ces modifications sur la sécurité quand vous passez en revue les demandes de tirage (pull request).
|
||||
- {% data variables.product.prodname_dependabot %} croise les données de dépendance fournies par le graphe de dépendances avec la liste des vulnérabilités connues publiées dans la {% data variables.product.prodname_advisory_database %}, analyse vos dépendances et génère des {% data variables.product.prodname_dependabot_alerts %} lors de la détection d’une vulnérabilité potentielle{% ifversion GH-advisory-db-supports-malware %} ou d’un logiciel malveillant{% endif %}.
|
||||
{% ifversion fpt or ghec or ghes %}- Les {% data variables.product.prodname_dependabot_security_updates %} utilisent le graphe de dépendances et les {% data variables.product.prodname_dependabot_alerts %} pour vous aider à mettre à jour les dépendances ayant des vulnérabilités connues dans votre dépôt.
|
||||
- Dependency review uses the dependency graph to identify dependency changes and help you understand the security impact of these changes when you review pull requests.
|
||||
- {% data variables.product.prodname_dependabot %} cross-references dependency data provided by the dependency graph with the list of advisories published in the {% data variables.product.prodname_advisory_database %}, scans your dependencies and generates {% data variables.product.prodname_dependabot_alerts %} when a potential vulnerability {% ifversion GH-advisory-db-supports-malware %}or malware{% endif %} is detected.
|
||||
{% ifversion fpt or ghec or ghes %}- {% data variables.product.prodname_dependabot_security_updates %} use the dependency graph and {% data variables.product.prodname_dependabot_alerts %} to help you update dependencies with known vulnerabilities in your repository.
|
||||
|
||||
Les {% data variables.product.prodname_dependabot_version_updates %} n’utilisent pas le graphe de dépendances et s’appuient plutôt sur le versioning sémantique des dépendances. Les {% data variables.product.prodname_dependabot_version_updates %} vous aident à maintenir vos dépendances mises à jour, même quand elles n’ont pas de vulnérabilités.
|
||||
{% data variables.product.prodname_dependabot_version_updates %} don't use the dependency graph and rely on the semantic versioning of dependencies instead. {% data variables.product.prodname_dependabot_version_updates %} help you keep your dependencies updated, even when they don’t have any vulnerabilities.
|
||||
{% endif %}
|
||||
|
||||
{% ifversion fpt or ghec or ghes %} Pour obtenir des guides de bonnes pratiques sur la sécurité de la chaîne d’approvisionnement de bout en bout, y compris la protection des comptes personnels, du code et des processus de génération, consultez « [Sécurisation de votre chaîne d’approvisionnement de bout en bout](/code-security/supply-chain-security/end-to-end-supply-chain/end-to-end-supply-chain-overview) ».
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
For best practice guides on end-to-end supply chain security including the protection of personal accounts, code, and build processes, see "[Securing your end-to-end supply chain](/code-security/supply-chain-security/end-to-end-supply-chain/end-to-end-supply-chain-overview)."
|
||||
{% endif %}
|
||||
|
||||
## Présentation des fonctionnalités
|
||||
## Feature overview
|
||||
|
||||
### Qu’est-ce que le graphe de dépendances ?
|
||||
### What is the dependency graph
|
||||
|
||||
Pour générer le graphe de dépendances, {% data variables.product.company_short %} examine les dépendances explicites d’un dépôt déclarées dans le manifeste et les fichiers de verrouillage. Quand il est activé, le graphe de dépendances analyse automatiquement tous les fichiers manifestes de package connus dans le dépôt, puis, à partir des informations recueillies, construit un graphe avec les noms et les versions de dépendances connues.
|
||||
To generate the dependency graph, {% data variables.product.company_short %} looks at a repository’s explicit dependencies declared in the manifest and lockfiles. When enabled, the dependency graph automatically parses all known package manifest files in the repository, and uses this to construct a graph with known dependency names and versions.
|
||||
|
||||
- Le graphe de dépendances inclut des informations sur vos dépendances _directes_ et vos dépendances _transitives_.
|
||||
- Le graphe de dépendances est automatiquement mis à jour quand vous poussez (push) un commit vers {% data variables.product.company_short %} qui change ou ajoute un manifeste ou un fichier de verrouillage pris en charge à la branche par défaut et quand toute personne pousse une modification vers le dépôt de l’une de vos dépendances.
|
||||
- Vous pouvez voir le graphe de dépendances en ouvrant la page principale du dépôt sur {% data variables.product.product_name %}, puis en accédant à l’onglet **Insights**.
|
||||
- The dependency graph includes information on your _direct_ dependencies and _transitive_ dependencies.
|
||||
- The dependency graph is automatically updated when you push a commit to {% data variables.product.company_short %} that changes or adds a supported manifest or lock file to the default branch, and when anyone pushes a change to the repository of one of your dependencies.
|
||||
- You can see the dependency graph by opening the repository's main page on {% data variables.product.product_name %}, and navigating to the **Insights** tab.
|
||||
|
||||
{% ifversion dependency-submission-api %} {% data reusables.dependency-submission.dependency-submission-link %} {% endif %}
|
||||
{% ifversion dependency-submission-api %}
|
||||
{% data reusables.dependency-submission.dependency-submission-link %}
|
||||
{% endif %}
|
||||
|
||||
Pour plus d’informations sur le graphe de dépendances, consultez « [À propos du graphe de dépendances](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph) ».
|
||||
For more information about the dependency graph, see "[About the dependency graph](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph)."
|
||||
|
||||
### Qu’est-ce que la révision des dépendances ?
|
||||
### What is dependency review
|
||||
|
||||
La révision des dépendances aide les réviseurs et les contributeurs à comprendre les modifications de dépendance et leur impact sur la sécurité dans chaque demande de tirage.
|
||||
Dependency review helps reviewers and contributors understand dependency changes and their security impact in every pull request.
|
||||
|
||||
- La révision des dépendances vous indique quelles dépendances ont été ajoutées, supprimées ou mises à jour, dans une demande de tirage. Vous pouvez utiliser les dates de publication, la popularité des dépendances et les informations de vulnérabilité pour vous aider à décider s’il faut accepter la modification.
|
||||
- Vous pouvez voir la révision des dépendances pour une demande de tirage en affichant la différence enrichie sous l’onglet **Fichiers modifiés**.
|
||||
- Dependency review tells you which dependencies were added, removed, or updated, in a pull request. You can use the release dates, popularity of dependencies, and vulnerability information to help you decide whether to accept the change.
|
||||
- You can see the dependency review for a pull request by showing the rich diff on the **Files Changed** tab.
|
||||
|
||||
Pour plus d’informations sur la révision des dépendances, consultez « [À propos de la révision des dépendances](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review) ».
|
||||
For more information about dependency review, see "[About dependency review](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review)."
|
||||
|
||||
### Qu’est-ce que Dependabot ?
|
||||
### What is Dependabot
|
||||
|
||||
{% data variables.product.prodname_dependabot %} maintient vos dépendances à jour en vous informant des vulnérabilités de sécurité dans vos dépendances{% ifversion fpt or ghec or ghes %} et ouvre automatiquement les demandes de tirage pour mettre à niveau vos dépendances vers la prochaine version sécurisée disponible quand une alerte {% data variables.product.prodname_dependabot %} est déclenchée, ou vers la dernière version quand une mise en production est publiée{% else %} afin que vous puissiez mettre à jour cette dépendance{% endif %}.
|
||||
{% data variables.product.prodname_dependabot %} keeps your dependencies up to date by informing you of any security vulnerabilities in your dependencies{% ifversion fpt or ghec or ghes %}, and automatically opens pull requests to upgrade your dependencies to the next available secure version when a {% data variables.product.prodname_dependabot %} alert is triggered, or to the latest version when a release is published{% else %} so that you can update that dependency{% endif %}.
|
||||
|
||||
{% ifversion fpt or ghec or ghes %} Le terme « {% data variables.product.prodname_dependabot %} » englobe les fonctionnalités suivantes :
|
||||
- {% data variables.product.prodname_dependabot_alerts %} : notification affichée sous l’onglet **Sécurité** du dépôt et dans le graphe de dépendances du dépôt. L’alerte contient un lien vers le fichier affecté dans le projet et des informations sur une version corrigée.
|
||||
- {% data variables.product.prodname_dependabot_updates %} :
|
||||
- {% data variables.product.prodname_dependabot_security_updates %} : mises à jour déclenchées pour mettre à niveau vos dépendances vers une version sécurisée quand une alerte est déclenchée.
|
||||
- {% data variables.product.prodname_dependabot_version_updates %} : mises à jour planifiées pour maintenir vos dépendances à jour avec la dernière version.
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
The term "{% data variables.product.prodname_dependabot %}" encompasses the following features:
|
||||
- {% data variables.product.prodname_dependabot_alerts %}—Displayed notification on the **Security** tab for the repository, and in the repository's dependency graph. The alert includes a link to the affected file in the project, and information about a fixed version.
|
||||
- {% data variables.product.prodname_dependabot_updates %}:
|
||||
- {% data variables.product.prodname_dependabot_security_updates %}—Triggered updates to upgrade your dependencies to a secure version when an alert is triggered.
|
||||
- {% data variables.product.prodname_dependabot_version_updates %}—Scheduled updates to keep your dependencies up to date with the latest version.
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion fpt or ghec %}
|
||||
|
||||
Les {% data variables.product.prodname_dependabot_alerts %}, les {% data variables.product.prodname_dependabot_security_updates %} et les {% data variables.product.prodname_dependabot_version_updates %} n’utilisent pas {% data variables.product.prodname_actions %} quand elles s’exécutent sur {% data variables.product.product_name %}. Toutefois, les demandes de tirage ouvertes par {% data variables.product.prodname_dependabot %} peuvent déclencher des workflows qui exécutent des actions. Pour plus d’informations, consultez « [Automatisation de {% data variables.product.prodname_dependabot %} avec {% data variables.product.prodname_actions %}](/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions) ».
|
||||
{% data variables.product.prodname_dependabot_alerts %}, {% data variables.product.prodname_dependabot_security_updates %}, and {% data variables.product.prodname_dependabot_version_updates %} do not use {% data variables.product.prodname_actions %} when they run on {% data variables.product.product_name %}. However, pull requests opened by {% data variables.product.prodname_dependabot %} can trigger workflows that run actions. For more information, see "[Automating {% data variables.product.prodname_dependabot %} with {% data variables.product.prodname_actions %}](/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions)."
|
||||
|
||||
{% elsif ghes %}
|
||||
|
||||
Les {% data variables.product.prodname_dependabot_security_updates %} et les {% data variables.product.prodname_dependabot_version_updates %} nécessitent que {% data variables.product.prodname_actions %} s’exécute sur {% data variables.product.product_name %}. Les {% data variables.product.prodname_dependabot_alerts %} ne nécessitent pas {% data variables.product.prodname_actions %}. Pour plus d’informations, consultez « [Activation de {% data variables.product.prodname_dependabot %} pour votre entreprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise) ».
|
||||
{% data variables.product.prodname_dependabot_security_updates %} and {% data variables.product.prodname_dependabot_version_updates %} require {% data variables.product.prodname_actions %} to run on {% data variables.product.product_name %}. {% data variables.product.prodname_dependabot_alerts %} do not require {% data variables.product.prodname_actions %}. For more information, see "[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
|
||||
|
||||
{% elsif ghae %}
|
||||
|
||||
{% data variables.product.prodname_actions %} n’est pas nécessaire pour que les {% data variables.product.prodname_dependabot_alerts %} s’exécutent sur {% data variables.product.product_name %}.
|
||||
{% data variables.product.prodname_actions %} is not required for {% data variables.product.prodname_dependabot_alerts %} to run on {% data variables.product.product_name %}.
|
||||
|
||||
{% endif %}
|
||||
|
||||
#### Qu’est-ce que les alertes Dependabot ?
|
||||
{% ifversion dependabot-actions-support %}
|
||||
|
||||
Les {% data variables.product.prodname_dependabot_alerts %} mettent en évidence les dépôts affectés par une vulnérabilité nouvellement découverte en fonction du graphe de dépendances et de la {% data variables.product.prodname_advisory_database %}, qui contient les versions sur les listes de vulnérabilités{% ifversion GH-advisory-db-supports-malware %} et programmes malveillants{% endif %}.
|
||||
{% data reusables.dependabot.dependabot-actions-support %} For more information, see "[About {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates)."
|
||||
|
||||
- {% data variables.product.prodname_dependabot %} effectue une analyse pour détecter les dépendances non sécurisées et émet des {% data variables.product.prodname_dependabot_alerts %} quand :{% ifversion fpt or ghec %}
|
||||
- Un nouvel avis est ajouté à la {% data variables.product.prodname_advisory_database %}.{% else %}
|
||||
- Les nouvelles données d’avis sont synchronisées sur {% data variables.location.product_location %} toutes les heures à partir de {% data variables.product.prodname_dotcom_the_website %}. {% data reusables.security-advisory.link-browsing-advisory-db %}{% endif %}
|
||||
- Le graphe de dépendances d’un dépôt change.
|
||||
- Les {% data variables.product.prodname_dependabot_alerts %} sont affichées {% ifversion fpt or ghec or ghes %} sous l’onglet **Sécurité** du dépôt et{% endif %} dans le graphe de dépendances du dépôt. L’alerte inclut {% ifversion fpt or ghec or ghes %}un lien vers le fichier affecté dans le projet et {% endif %}des informations sur une version corrigée.
|
||||
{% endif %}
|
||||
|
||||
Pour plus d’informations, consultez « [À propos des {% data variables.product.prodname_dependabot_alerts %}](/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-alerts-for-vulnerable-dependencies) ».
|
||||
#### What are Dependabot alerts
|
||||
|
||||
{% data variables.product.prodname_dependabot_alerts %} highlight repositories affected by a newly discovered vulnerability based on the dependency graph and the {% data variables.product.prodname_advisory_database %}, which contains advisories for known vulnerabilities{% ifversion GH-advisory-db-supports-malware %} and malware{% endif %}.
|
||||
|
||||
- {% data variables.product.prodname_dependabot %} performs a scan to detect insecure dependencies and sends {% data variables.product.prodname_dependabot_alerts %} when:
|
||||
{% ifversion fpt or ghec %}
|
||||
- A new advisory is added to the {% data variables.product.prodname_advisory_database %}.{% else %}
|
||||
- New advisory data is synchronized to {% data variables.location.product_location %} each hour from {% data variables.product.prodname_dotcom_the_website %}. {% data reusables.security-advisory.link-browsing-advisory-db %}{% endif %}
|
||||
- The dependency graph for the repository changes.
|
||||
- {% data variables.product.prodname_dependabot_alerts %} are displayed {% ifversion fpt or ghec or ghes %} on the **Security** tab for the repository and{% endif %} in the repository's dependency graph. The alert includes {% ifversion fpt or ghec or ghes %}a link to the affected file in the project, and {% endif %}information about a fixed version.
|
||||
|
||||
For more information, see "[About {% data variables.product.prodname_dependabot_alerts %}](/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-alerts-for-vulnerable-dependencies)."
|
||||
|
||||
{% ifversion fpt or ghec or ghes %}
|
||||
#### Qu’est-ce que les mises à jour Dependabot ?
|
||||
#### What are Dependabot updates
|
||||
|
||||
Il existe deux types de {% data variables.product.prodname_dependabot_updates %} : les mises à jour de _version_ et les mises à jour de _sécurité_ {% data variables.product.prodname_dependabot %}. {% data variables.product.prodname_dependabot %} génère des demandes de tirage automatiques pour mettre à jour vos dépendances dans les deux cas, mais il existe plusieurs différences.
|
||||
There are two types of {% data variables.product.prodname_dependabot_updates %}: {% data variables.product.prodname_dependabot %} _security_ updates and _version_ updates. {% data variables.product.prodname_dependabot %} generates automatic pull requests to update your dependencies in both cases, but there are several differences.
|
||||
|
||||
{% data variables.product.prodname_dependabot_security_updates %} :
|
||||
- Déclenchées par une alerte {% data variables.product.prodname_dependabot %}
|
||||
- Mettent à jour les dépendances vers la version minimale qui résout une vulnérabilité connue
|
||||
- Prises en charge pour les écosystèmes pris en charge par le graphe de dépendances
|
||||
- Ne nécessite pas de fichier de configuration, mais vous pouvez en utiliser un pour remplacer le comportement par défaut
|
||||
{% data variables.product.prodname_dependabot_security_updates %}:
|
||||
- Triggered by a {% data variables.product.prodname_dependabot %} alert
|
||||
- Update dependencies to the minimum version that resolves a known vulnerability
|
||||
- Supported for ecosystems the dependency graph supports
|
||||
- Does not require a configuration file, but you can use one to override the default behavior
|
||||
|
||||
{% data variables.product.prodname_dependabot_version_updates %} :
|
||||
- Requiert un fichier de configuration
|
||||
- Exécutées selon une planification que vous configurez
|
||||
- Mettent à jour les dépendances vers la dernière version qui correspond à la configuration
|
||||
- Prises en charge pour un autre groupe d’écosystèmes
|
||||
{% data variables.product.prodname_dependabot_version_updates %}:
|
||||
- Requires a configuration file
|
||||
- Run on a schedule you configure
|
||||
- Update dependencies to the latest version that matches the configuration
|
||||
- Supported for a different group of ecosystems
|
||||
|
||||
Pour plus d’informations sur les {% data variables.product.prodname_dependabot_updates %}, consultez « [À propos des {% data variables.product.prodname_dependabot_security_updates %}](/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-dependabot-security-updates) » et « [À propos des {% data variables.product.prodname_dependabot_version_updates %}](/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates) ».
|
||||
For more information about {% data variables.product.prodname_dependabot_updates %}, see "[About {% data variables.product.prodname_dependabot_security_updates %}](/code-security/supply-chain-security/managing-vulnerabilities-in-your-projects-dependencies/about-dependabot-security-updates)" and "[About {% data variables.product.prodname_dependabot_version_updates %}](/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates)."
|
||||
{% endif %}
|
||||
|
||||
## Disponibilité des fonctionnalités
|
||||
## Feature availability
|
||||
|
||||
{% ifversion fpt or ghec %}
|
||||
|
||||
Dépôts publics :
|
||||
- **Graphe de dépendances** : activé par défaut et ne peut pas être désactivé.
|
||||
- **Révision des dépendances** : activée par défaut et ne peut pas être désactivée.
|
||||
- **{% data variables.product.prodname_dependabot_alerts %}** : non activées par défaut. {% data variables.product.prodname_dotcom %} détecte les dépendances non sécurisées et affiche des informations dans le graphe de dépendances, mais ne génère pas d’{% data variables.product.prodname_dependabot_alerts %} par défaut. Les propriétaires de dépôts ou les personnes disposant d’un accès administrateur peuvent activer les {% data variables.product.prodname_dependabot_alerts %}.
|
||||
Vous pouvez également activer ou désactiver les alertes Dependabot pour tous les dépôts appartenant à votre compte d’utilisateur ou organisation. Pour plus d’informations, consultez « [Gestion des paramètres de sécurité et d’analyse pour votre compte d’utilisateur](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/managing-security-and-analysis-settings-for-your-personal-account) » ou « [Gestion des paramètres de sécurité et d’analyse pour votre organisation](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization) ».
|
||||
Public repositories:
|
||||
- **Dependency graph**—enabled by default and cannot be disabled.
|
||||
- **Dependency review**—enabled by default and cannot be disabled.
|
||||
- **{% data variables.product.prodname_dependabot_alerts %}**—not enabled by default. {% data variables.product.prodname_dotcom %} detects insecure dependencies and displays information in the dependency graph, but does not generate {% data variables.product.prodname_dependabot_alerts %} by default. Repository owners or people with admin access can enable {% data variables.product.prodname_dependabot_alerts %}.
|
||||
You can also enable or disable Dependabot alerts for all repositories owned by your user account or organization. For more information, see "[Managing security and analysis settings for your user account](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/managing-security-and-analysis-settings-for-your-personal-account)" or "[Managing security and analysis settings for your organization](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization)."
|
||||
|
||||
Dépôts privés :
|
||||
- **Graphe de dépendances** : non activé par défaut. La fonctionnalité peut être activée par les administrateurs de dépôt. Pour plus d’informations, consultez « [Exploration des dépendances d’un dépôt](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository#enabling-and-disabling-the-dependency-graph-for-a-private-repository) ».
|
||||
Private repositories:
|
||||
- **Dependency graph**—not enabled by default. The feature can be enabled by repository administrators. For more information, see "[Exploring the dependencies of a repository](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository#enabling-and-disabling-the-dependency-graph-for-a-private-repository)."
|
||||
{% ifversion fpt %}
|
||||
- **Révision des dépendances** : disponible dans les dépôts privés appartenant aux organisations qui utilisent {% data variables.product.prodname_ghe_cloud %} et qui disposent d’une licence pour {% data variables.product.prodname_GH_advanced_security %}. Pour plus d’informations, consultez la [documentation {% data variables.product.prodname_ghe_cloud %}](/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).
|
||||
- **Dependency review**—available in private repositories owned by organizations that use {% data variables.product.prodname_ghe_cloud %} and have a license for {% data variables.product.prodname_GH_advanced_security %}. For more information, see the [{% data variables.product.prodname_ghe_cloud %} documentation](/enterprise-cloud@latest/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).
|
||||
{% elsif ghec %}
|
||||
- **Révision des dépendances** : disponible dans les dépôts privés appartenant aux organisations, sous réserve que vous disposiez d’une licence pour {% data variables.product.prodname_GH_advanced_security %} et que le graphe de dépendances soit activé. Pour plus d’informations, consultez « [À propos de {% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security) » et « [Exploration des dépendances d’un dépôt](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository#enabling-and-disabling-the-dependency-graph-for-a-private-repository) ». {% endif %}
|
||||
- **{% data variables.product.prodname_dependabot_alerts %}** : non activées par défaut. Les propriétaires de dépôts privés ou les personnes disposant d’un accès administrateur peuvent activer les {% data variables.product.prodname_dependabot_alerts %} en activant le graphe de dépendances et les {% data variables.product.prodname_dependabot_alerts %} pour leurs dépôts.
|
||||
Vous pouvez également activer ou désactiver les alertes Dependabot pour tous les dépôts appartenant à votre compte d’utilisateur ou organisation. Pour plus d’informations, consultez « [Gestion des paramètres de sécurité et d’analyse pour votre compte d’utilisateur](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/managing-security-and-analysis-settings-for-your-personal-account) » ou « [Gestion des paramètres de sécurité et d’analyse pour votre organisation](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization) ».
|
||||
- **Dependency review**—available in private repositories owned by organizations provided you have a license for {% data variables.product.prodname_GH_advanced_security %} and the dependency graph enabled. For more information, see "[About {% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security)" and "[Exploring the dependencies of a repository](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository#enabling-and-disabling-the-dependency-graph-for-a-private-repository)."
|
||||
{% endif %}
|
||||
- **{% data variables.product.prodname_dependabot_alerts %}**—not enabled by default. Owners of private repositories, or people with admin access, can enable {% data variables.product.prodname_dependabot_alerts %} by enabling the dependency graph and {% data variables.product.prodname_dependabot_alerts %} for their repositories.
|
||||
You can also enable or disable Dependabot alerts for all repositories owned by your user account or organization. For more information, see "[Managing security and analysis settings for your user account](/account-and-profile/setting-up-and-managing-your-personal-account-on-github/managing-personal-account-settings/managing-security-and-analysis-settings-for-your-personal-account)" or "[Managing security and analysis settings for your organization](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization)."
|
||||
|
||||
Tout type de dépôt :
|
||||
- **{% data variables.product.prodname_dependabot_security_updates %}** : non activées par défaut. Vous pouvez activer les {% data variables.product.prodname_dependabot_security_updates %} pour n’importe quel dépôt qui utilise les {% data variables.product.prodname_dependabot_alerts %} et le graphe de dépendances. Pour plus d’informations sur l’activation des mises à jour de sécurité, consultez « [Configuration des {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates) ».
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}** : non activées par défaut. Les personnes disposant d’autorisations d’écriture sur un dépôt peuvent activer les {% data variables.product.prodname_dependabot_version_updates %}. Pour obtenir des informations sur l’activation des mises à jour de version, consultez « [Configuration de {% data variables.product.prodname_dependabot_version_updates %}](/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates) ».
|
||||
Any repository type:
|
||||
- **{% data variables.product.prodname_dependabot_security_updates %}**—not enabled by default. You can enable {% data variables.product.prodname_dependabot_security_updates %} for any repository that uses {% data variables.product.prodname_dependabot_alerts %} and the dependency graph. For information about enabling security updates, see "[Configuring {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates)."
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}**—not enabled by default. People with write permissions to a repository can enable {% data variables.product.prodname_dependabot_version_updates %}. For information about enabling version updates, see "[Configuring {% data variables.product.prodname_dependabot_version_updates %}](/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates)."
|
||||
{% endif %}
|
||||
|
||||
{% ifversion ghes or ghae %}
|
||||
- **Graphe de dépendances** et **{% data variables.product.prodname_dependabot_alerts %}** : non activés par défaut. Les deux fonctionnalités sont configurées au niveau de l’entreprise par le propriétaire de l’entreprise. Pour plus d’informations, consultez {% ifversion ghes %}« [Activation du graphe de dépendances pour votre entreprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise) » et {% endif %}« [Activation de {% data variables.product.prodname_dependabot %} pour votre entreprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise) ».
|
||||
- **Révision des dépendances** : disponible quand le graphe de dépendances est activé pour {% data variables.location.product_location %} et qu’{% data variables.product.prodname_advanced_security %} est activé pour l’organisation ou le dépôt. Pour plus d’informations, consultez « [À propos de {% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security) ».
|
||||
{% endif %} {% ifversion ghes %}
|
||||
- **{% data variables.product.prodname_dependabot_security_updates %}** : non activées par défaut. Vous pouvez activer les {% data variables.product.prodname_dependabot_security_updates %} pour n’importe quel dépôt qui utilise les {% data variables.product.prodname_dependabot_alerts %} et le graphe de dépendances. Pour plus d’informations sur l’activation des mises à jour de sécurité, consultez « [Configuration des {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates) ».
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}** : non activées par défaut. Les personnes disposant d’autorisations d’écriture sur un dépôt peuvent activer les {% data variables.product.prodname_dependabot_version_updates %}. Pour obtenir des informations sur l’activation des mises à jour de version, consultez « [Configuration de {% data variables.product.prodname_dependabot_version_updates %}](/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates) ».
|
||||
- **Dependency graph** and **{% data variables.product.prodname_dependabot_alerts %}**—not enabled by default. Both features are configured at an enterprise level by the enterprise owner. For more information, see {% ifversion ghes %}"[Enabling the dependency graph for your enterprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise)" and {% endif %}"[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
|
||||
- **Dependency review**—available when dependency graph is enabled for {% data variables.location.product_location %} and {% data variables.product.prodname_advanced_security %} is enabled for the organization or repository. For more information, see "[About {% data variables.product.prodname_GH_advanced_security %}](/get-started/learning-about-github/about-github-advanced-security)."
|
||||
{% endif %}
|
||||
{% ifversion ghes %}
|
||||
- **{% data variables.product.prodname_dependabot_security_updates %}**—not enabled by default. You can enable {% data variables.product.prodname_dependabot_security_updates %} for any repository that uses {% data variables.product.prodname_dependabot_alerts %} and the dependency graph. For information about enabling security updates, see "[Configuring {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates)."
|
||||
- **{% data variables.product.prodname_dependabot_version_updates %}**—not enabled by default. People with write permissions to a repository can enable {% data variables.product.prodname_dependabot_version_updates %}. For information about enabling version updates, see "[Configuring {% data variables.product.prodname_dependabot_version_updates %}](/code-security/dependabot/dependabot-version-updates/configuring-dependabot-version-updates)."
|
||||
{% endif %}
|
||||
|
||||
@@ -46,15 +46,15 @@ To set up a `www` or custom subdomain, such as `www.example.com` or `blog.exampl
|
||||
{% data reusables.repositories.sidebar-settings %}
|
||||
{% data reusables.pages.sidebar-pages %}
|
||||
4. Under "Custom domain", type your custom domain, then click **Save**. If you are publishing your site from a branch, this will create a commit that adds a `CNAME` file to the root of your source branch. If you are publishing your site with a custom {% data variables.product.prodname_actions %} workflow , no `CNAME` file is created. For more information about your publishing source, see "[Configuring a publishing source for your GitHub Pages site](/pages/getting-started-with-github-pages/configuring-a-publishing-source-for-your-github-pages-site)."
|
||||
|
||||
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
|
||||
5. Navigate to your DNS provider and create a `CNAME` record that points your subdomain to the default domain for your site. For example, if you want to use the subdomain `www.example.com` for your user site, create a `CNAME` record that points `www.example.com` to `<user>.github.io`. If you want to use the subdomain `another.example.com` for your organization site, create a `CNAME` record that points `another.example.com` to `<organization>.github.io`. The `CNAME` record should always point to `<user>.github.io` or `<organization>.github.io`, excluding the repository name. {% data reusables.pages.contact-dns-provider %} {% data reusables.pages.default-domain-information %}
|
||||
|
||||
|
||||
@@ -6,6 +6,7 @@ intro: 'L’API OIDC {% data variables.product.prodname_actions %} vous permet d
|
||||
topics:
|
||||
- API
|
||||
versions:
|
||||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '>=3.7'
|
||||
ms.openlocfilehash: 6857081d29bd89e59c4f6c7ff458fd0afc2cf6ef
|
||||
|
||||
@@ -21,6 +21,6 @@ When you create a new repository on {% ifversion ghae %}{% data variables.produc
|
||||
|
||||
You can use this custom media type when getting a gitignore template.
|
||||
|
||||
application/vnd.github.VERSION.raw
|
||||
application/vnd.github.raw
|
||||
|
||||
For more information, see "[Media types](/rest/overview/media-types)."
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Commentaires de revues de demande de tirage
|
||||
title: Pull request review comments
|
||||
shortTitle: Review comments
|
||||
intro: ''
|
||||
versions:
|
||||
@@ -11,24 +11,10 @@ topics:
|
||||
- API
|
||||
miniTocMaxHeadingLevel: 3
|
||||
allowTitleToDifferFromFilename: true
|
||||
ms.openlocfilehash: 6d49aa3d5bca7f74a21c1cce32cecd38abe9366d
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: fr-FR
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: '147067729'
|
||||
---
|
||||
## À propos de l’API Pull request review comments
|
||||
|
||||
Les commentaires de révision de demande de tirage sont des commentaires sur une partie de la différence unifiée effectuée pendant une révision de demande de tirage. Les commentaires de commit et les commentaires de problème sont différents des commentaires de révision de demande de tirage. Vous appliquez des commentaires de commit directement à un commit et vous appliquez des commentaires de problème sans référencer une partie de la différence unifiée. Pour plus d’informations, consultez « [Créer un commentaire de commit](/rest/reference/commits#create-a-commit-comment) » et « [Créer un commentaire de problème](/rest/reference/issues#create-an-issue-comment) ».
|
||||
## About the Pull request review comments API
|
||||
|
||||
### Types de médias personnalisés pour les commentaires de révision de demande de tirage
|
||||
Pull request review comments are comments on a portion of the unified diff made during a pull request review. Commit comments and issue comments are different from pull request review comments. You apply commit comments directly to a commit and you apply issue comments without referencing a portion of the unified diff. For more information, see "[Create a commit comment](/rest/reference/commits#create-a-commit-comment)" and "[Create an issue comment](/rest/reference/issues#create-an-issue-comment)."
|
||||
|
||||
Il s’agit des types de médias pris en charge pour les commentaires de révision de demande de tirage.
|
||||
|
||||
application/vnd.github.VERSION.raw+json
|
||||
application/vnd.github.VERSION.text+json
|
||||
application/vnd.github.VERSION.html+json
|
||||
application/vnd.github.VERSION.full+json
|
||||
|
||||
Pour plus d’informations, consultez « [Types de médias personnalisés](/rest/overview/media-types) ».
|
||||
{% data reusables.pull_requests.issues-media-types %}
|
||||
|
||||
@@ -64,6 +64,8 @@ Dynatrace | Dynatrace Internal Token | dynatrace_internal_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
EasyPost | EasyPost Test API Key | easypost_test_api_key
|
||||
Fastly | Fastly API Token | fastly_api_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Finicity | Finicity App Key | finicity_app_key
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Flutterwave | Flutterwave Test API Secret Key | flutterwave_test_api_secret_key
|
||||
@@ -91,7 +93,12 @@ Google | Google OAuth Access Token | google_oauth_access_token{% endif %}
|
||||
Google | Google OAuth Client ID with Google OAuth Client Secret | google_oauth_client_id </br>google_oauth_client_secret{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Google | Google OAuth Refresh Token | google_oauth_refresh_token{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Grafana | Grafana API Key | grafana_api_key
|
||||
Grafana | Grafana Cloud API Key | grafana_cloud_api_key
|
||||
Grafana | Grafana Cloud API Token | grafana_cloud_api_token
|
||||
Grafana | Grafana Project API Key | grafana_project_api_key
|
||||
Grafana | Grafana Project Service Account Token | grafana_project_service_account_token{% endif %}
|
||||
HashiCorp | Terraform Cloud / Enterprise API Token | terraform_api_token
|
||||
HashiCorp | HashiCorp Vault Batch Token | hashicorp_vault_batch_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.8 or ghae > 3.8 %}
|
||||
@@ -198,6 +205,8 @@ Stripe | Stripe Webhook Signing Secret | stripe_webhook_signing_secret
|
||||
Supabase | Supabase Service Key | supabase_service_key{% endif %}
|
||||
Tableau | Tableau {% data variables.product.pat_generic_title_case %} | tableau_personal_access_token
|
||||
Telegram | Telegram Bot Token | telegram_bot_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Telnyx | Telnyx API V2 Key | telnyx_api_v2_key{% endif %}
|
||||
Tencent Cloud | Tencent Cloud Secret ID | tencent_cloud_secret_id
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Twilio | Twilio Access Token | twilio_access_token{% endif %}
|
||||
|
||||
@@ -1,130 +1,127 @@
|
||||
---
|
||||
ms.openlocfilehash: cd91a98e6cb0da73a24f7f6e682b67ec25b406d4
|
||||
ms.sourcegitcommit: 24427fe609677b2c58137b1d9d63869d0872daf4
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: fr-FR
|
||||
ms.lasthandoff: 11/04/2022
|
||||
ms.locfileid: "148134791"
|
||||
---
|
||||
Partenaire | Secret pris en charge
|
||||
Partner | Supported secret
|
||||
--- | ---
|
||||
E/S Adafruit | Clé d’E/S Adafruit
|
||||
Adobe | Jeton d’appareil Adobe
|
||||
Adobe | Jeton de service Adobe
|
||||
Adobe | Jeton d’accès courte durée Adobe
|
||||
Adobe | Jeton web JSON Adobe
|
||||
Alibaba Cloud | ID de clé d’accès et paire de clé d’accès-secret Alibaba Cloud
|
||||
Amazon Web Services (AWS) | ID de clé d’accès et paire de clé d’accès-secret Amazon AWS
|
||||
Atlassian | Jeton d’API Atlassian
|
||||
Atlassian | Jeton web JSON Atlassian
|
||||
Azure | Secret d’application Azure Active Directory
|
||||
Azure | Clé Azure Batch identifiable
|
||||
Azure | Clé Azure CosmosDB identifiable
|
||||
Azure | {% data variables.product.pat_generic_title_case %} Azure DevOps
|
||||
Azure | Clé du service web Azure ML Studio (classique)
|
||||
Azure | Jeton SAP Azure
|
||||
Azure | Certificat Azure Service Management
|
||||
Azure | Chaîne de connexion Azure SQL
|
||||
Azure | Clé du compte de Stockage Azure
|
||||
Checkout.com | Clé secrète de production Checkout.com
|
||||
Checkout.com | Clé secrète de test Checkout.com
|
||||
Chief | Jeton Chief Tools
|
||||
Clojars | Jeton de déploiement Clojars
|
||||
CloudBees CodeShip | Informations d’identification CloudBees CodeShip
|
||||
Contributed Systems | Informations d’identification Contributed Systems
|
||||
Databricks | Jeton d’accès Databricks
|
||||
Datadog | Clé API Datadog
|
||||
DevCycle | Clé API client DevCycle
|
||||
DevCycle | Clé API serveur DevCycle
|
||||
DigitalOcean | {% data variables.product.pat_generic_title_case %} DigitalOcean
|
||||
DigitalOcean | Jeton OAuth DigitalOcean
|
||||
DigitalOcean | Jeton d’actualisation DigitalOcean
|
||||
DigitalOcean | Jeton système DigitalOcean
|
||||
Discord | Jeton de bot Discord
|
||||
Doppler | Jeton personnel Doppler
|
||||
Doppler | Jeton de service Doppler
|
||||
Doppler | Jeton CLI Doppler
|
||||
Doppler | Jeton SCIM Doppler
|
||||
Doppler | Jeton d’audit Doppler
|
||||
Dropbox | Jeton d’accès Dropbox
|
||||
Dropbox | Jeton d’accès courte durée Dropbox
|
||||
Dynatrace | Jeton d’accès Dynatrace
|
||||
Dynatrace | Jeton interne Dynatrace
|
||||
Finicity | Clé d’application Finicity
|
||||
Frame.io | Jeton web JSON Frame.io
|
||||
Frame.io| Jeton de développeur Frame.io
|
||||
Fullstory| Clé API FullStory
|
||||
GitHub | {% data variables.product.pat_generic_title_case %} GitHub
|
||||
GitHub | Jeton d’accès OAuth GitHub
|
||||
GitHub | Jeton d’actualisation GitHub
|
||||
GitHub | Jeton d’accès d’installation d’application GitHub
|
||||
GitHub | Clé privée SSH GitHub
|
||||
GoCardless | Jeton d’accès dynamique GoCardless
|
||||
GoCardless | Jeton d’accès de bac à sable GoCardless
|
||||
Google Cloud | Clé API Google
|
||||
Google Cloud | ID de clé privée Google Cloud
|
||||
HashiCorp Terraform | Jeton d’API Cloud / Entreprise Terraform
|
||||
Hubspot | Clé API Hubspot
|
||||
Ionic | {% data variables.product.pat_generic_title_case %} Ionic
|
||||
Ionic | Jeton d’actualisation Ionic
|
||||
JD Cloud | Clé d’accès JD Cloud
|
||||
Linéaire | Clé API Linear
|
||||
Linéaire | Jeton d’accès OAuth Linear
|
||||
MailChimp | Clé API Mailchimp
|
||||
MailChimp | Clé API Mandrill
|
||||
Mailgun | Clé API Mailgun
|
||||
MessageBird | Clé API MessageBird
|
||||
Meta | Jeton d’accès Facebook
|
||||
npm | Jeton d’accès npm
|
||||
NuGet | Clé API NuGet
|
||||
Octopus Deploy | Clé API Octopus Deploy
|
||||
OpenAI | Clé API OpenAI
|
||||
Palantir | Jeton web JSON Palantir
|
||||
PlanetScale | Mot de passe de base de données PlanetScale
|
||||
PlanetScale | Jeton OAuth PlanetScale
|
||||
PlanetScale | Jeton de service PlanetScale
|
||||
Plivo | ID et jeton d’authentification Plivo
|
||||
postman | Clé API Postman
|
||||
Prefect | Clé API du serveur Prefect
|
||||
Prefect | Jeton d’API utilisateur Prefect
|
||||
Proctorio | Clé de consommateur Proctorio
|
||||
Proctorio | Clé de liaison Proctorio
|
||||
Proctorio | Clé d’inscription proctorio
|
||||
Proctorio | Clé secrète Proctorio
|
||||
Pulumi | Jeton d’accès Pulumi
|
||||
PyPI | Jeton d’API PyPI
|
||||
ReadMe | Clé d’accès de l’API ReadMe
|
||||
Adafruit IO | Adafruit IO Key
|
||||
Adobe | Adobe Device Token
|
||||
Adobe | Adobe Service Token
|
||||
Adobe | Adobe Short-Lived Access Token
|
||||
Adobe | Adobe JSON Web Token
|
||||
Alibaba Cloud | Alibaba Cloud Access Key ID and Access Key Secret pair
|
||||
Amazon Web Services (AWS) | Amazon AWS Access Key ID and Secret Access Key pair
|
||||
Atlassian | Atlassian API Token
|
||||
Atlassian | Atlassian JSON Web Token
|
||||
Azure | Azure Active Directory Application Secret
|
||||
Azure | Azure Batch Key Identifiable
|
||||
Azure | Azure CosmosDB Key Identifiable
|
||||
Azure | Azure DevOps {% data variables.product.pat_generic_title_case %}
|
||||
Azure | Azure ML Studio (classic) Web Service Key
|
||||
Azure | Azure SAS Token
|
||||
Azure | Azure Search Admin Key
|
||||
Azure | Azure Search Query Key
|
||||
Azure | Azure Service Management Certificate
|
||||
Azure | Azure SQL Connection String
|
||||
Azure | Azure Storage Account Key
|
||||
Checkout.com | Checkout.com Production Secret Key
|
||||
Checkout.com | Checkout.com Test Secret Key
|
||||
Chief | Chief Tools Token
|
||||
Clojars | Clojars Deploy Token
|
||||
CloudBees CodeShip | CloudBees CodeShip Credential
|
||||
Contributed Systems | Contributed Systems Credentials
|
||||
Databricks | Databricks Access Token
|
||||
Datadog | Datadog API Key
|
||||
DevCycle | DevCycle Client API Key
|
||||
DevCycle | DevCycle Server API Key
|
||||
DigitalOcean | DigitalOcean {% data variables.product.pat_generic_title_case %}
|
||||
DigitalOcean | DigitalOcean OAuth Token
|
||||
DigitalOcean | DigitalOcean Refresh Token
|
||||
DigitalOcean | DigitalOcean System Token
|
||||
Discord | Discord Bot Token
|
||||
Doppler | Doppler Personal Token
|
||||
Doppler | Doppler Service Token
|
||||
Doppler | Doppler CLI Token
|
||||
Doppler | Doppler SCIM Token
|
||||
Doppler | Doppler Audit Token
|
||||
Dropbox | Dropbox Access Token
|
||||
Dropbox | Dropbox Short Lived Access Token
|
||||
Dynatrace | Dynatrace Access Token
|
||||
Dynatrace | Dynatrace Internal Token
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %}
|
||||
Finicity | Finicity App Key
|
||||
Frame.io | Frame.io JSON Web Token
|
||||
Frame.io| Frame.io Developer Token
|
||||
FullStory| FullStory API Key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %}
|
||||
GitHub | GitHub OAuth Access Token
|
||||
GitHub | GitHub Refresh Token
|
||||
GitHub | GitHub App Installation Access Token
|
||||
GitHub | GitHub SSH Private Key
|
||||
GoCardless | GoCardless Live Access Token
|
||||
GoCardless | GoCardless Sandbox Access Token
|
||||
Google Cloud | Google API Key
|
||||
Google Cloud | Google Cloud Private Key ID
|
||||
Hashicorp Terraform | Terraform Cloud / Enterprise API Token
|
||||
Hubspot | Hubspot API Key
|
||||
Hubspot | Hubspot API Personal Access Key
|
||||
Ionic | Ionic {% data variables.product.pat_generic_title_case %}
|
||||
Ionic | Ionic Refresh Token
|
||||
JD Cloud | JD Cloud Access Key
|
||||
Linear | Linear API Key
|
||||
Linear | Linear OAuth Access Token
|
||||
Mailchimp | Mailchimp API Key
|
||||
Mailchimp | Mandrill API Key
|
||||
Mailgun | Mailgun API Key
|
||||
MessageBird | MessageBird API Key
|
||||
Meta | Facebook Access Token
|
||||
npm | npm Access Token
|
||||
NuGet | NuGet API Key
|
||||
Octopus Deploy | Octopus Deploy API Key
|
||||
OpenAI | OpenAI API Key
|
||||
Palantir | Palantir JSON Web Token
|
||||
PlanetScale | PlanetScale Database Password
|
||||
PlanetScale | PlanetScale OAuth Token
|
||||
PlanetScale | PlanetScale Service Token
|
||||
Plivo | Plivo Auth ID and Token
|
||||
Postman | Postman API Key
|
||||
Prefect | Prefect Server API Key
|
||||
Prefect | Prefect User API Token
|
||||
Proctorio | Proctorio Consumer Key
|
||||
Proctorio | Proctorio Linkage Key
|
||||
Proctorio | Proctorio Registration Key
|
||||
Proctorio | Proctorio Secret Key
|
||||
Pulumi | Pulumi Access Token
|
||||
PyPI | PyPI API Token
|
||||
ReadMe | ReadMe API Access Key
|
||||
redirect.pizza | redirect.pizza API Token
|
||||
RubyGems | Clé API RubyGems
|
||||
Samsara | Jeton d’API Samsara
|
||||
Samsara | Jeton d’accès OAuth Samsara
|
||||
SendGrid | Clé API SendGrid
|
||||
Sendinblue | Clé API Sendinblue
|
||||
Sendinblue | Clé SMTP Sendinblue
|
||||
Shopify | Secret partagé d’application Shopify
|
||||
Shopify | Jeton d’accès Shopify
|
||||
Shopify | Jeton d’accès d’application personnalisée Shopify
|
||||
Shopify | Mot de passe d’application privée Shopify
|
||||
Slack | Jeton d’API Slack
|
||||
Slack | URL du webhook entrant Slack
|
||||
Slack | URL du webhook de workflow Slack
|
||||
SSLMate | Clé API SSLMate
|
||||
SSLMate | Secret de cluster SSLMate
|
||||
Stripe | Clé secrète d’API dynamique Stripe
|
||||
Stripe | Clé secrète d’API de test Stripe
|
||||
Stripe | Clé restreinte d’API dynamique Stripe
|
||||
Stripe | Clé restreinte d’API de test Stripe
|
||||
Supabase | Clé de service Supabase
|
||||
Tencent Cloud | ID de secret Tencent Cloud
|
||||
Twilio | Identificateur de chaîne de compte Twilio
|
||||
Twilio | Clé API Twilio
|
||||
Typeform | {% data variables.product.pat_generic_title_case %} Typeform
|
||||
Uniwise | Clé API WISEflow
|
||||
Valour | Jeton d’accès Valour
|
||||
Yandex | Clé API Yandex.Cloud
|
||||
Yandex | Cookie IAM Yandex.Cloud
|
||||
Yandex | Jeton Yandex.Cloud
|
||||
Yandex | Clé API Yandex.Dictionary
|
||||
Yandex | Secret d’accès Yandex.Cloud
|
||||
Yandex | Jeton OAuth Yandex.Passport
|
||||
Zuplo | API consommateur Zuplo
|
||||
RubyGems | RubyGems API Key
|
||||
Samsara | Samsara API Token
|
||||
Samsara | Samsara OAuth Access Token
|
||||
SendGrid | SendGrid API Key
|
||||
Sendinblue | Sendinblue API Key
|
||||
Sendinblue | Sendinblue SMTP Key
|
||||
Shopify | Shopify App Shared Secret
|
||||
Shopify | Shopify Access Token
|
||||
Shopify | Shopify Custom App Access Token
|
||||
Shopify | Shopify Private App Password
|
||||
Slack | Slack API Token
|
||||
Slack | Slack Incoming Webhook URL
|
||||
Slack | Slack Workflow Webhook URL
|
||||
SSLMate | SSLMate API Key
|
||||
SSLMate | SSLMate Cluster Secret
|
||||
Stripe | Stripe Live API Secret Key
|
||||
Stripe | Stripe Test API Secret Key
|
||||
Stripe | Stripe Live API Restricted Key
|
||||
Stripe | Stripe Test API Restricted Key
|
||||
Supabase | Supabase Service Key
|
||||
Tencent Cloud | Tencent Cloud Secret ID
|
||||
Tencent WeChat | Tencent WeChat API App ID
|
||||
Twilio | Twilio Account String Identifier
|
||||
Twilio | Twilio API Key
|
||||
Typeform | Typeform {% data variables.product.pat_generic_title_case %}
|
||||
Uniwise | WISEflow API Key
|
||||
Valour | Valour Access Token
|
||||
Yandex | Yandex.Cloud API Key
|
||||
Yandex | Yandex.Cloud IAM Cookie
|
||||
Yandex | Yandex.Cloud IAM Token
|
||||
Yandex | Yandex.Dictionary API Key
|
||||
Yandex | Yandex.Cloud Access Secret
|
||||
Yandex | Yandex.Passport OAuth Token
|
||||
Zuplo | Zuplo Consumer API
|
||||
|
||||
@@ -41,6 +41,8 @@ Doppler | Doppler Audit Token | doppler_audit_token
|
||||
Dropbox | Dropbox Short Lived Access Token | dropbox_short_lived_access_token
|
||||
Duffel | Duffel Live Access Token | duffel_live_access_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Fullstory | FullStory API Key | fullstory_api_key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %} | github_personal_access_token
|
||||
|
||||
@@ -1,19 +1,10 @@
|
||||
---
|
||||
ms.openlocfilehash: 4081194451ae681e3a8208cb0462bd7f7574c3ef
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: fr-FR
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: "145134460"
|
||||
---
|
||||
Si votre demande de support dépasse le cadre de ce que notre équipe peut faire pour vous aider, nous serons peut-être en mesure de vous recommander les étapes à suivre pour résoudre votre problème en dehors du {% data variables.contact.github_support %}. Votre demande de support est peut-être hors de portée du {% data variables.contact.github_support %} si elle porte principalement sur ce qui suit :
|
||||
- Intégrations tierces, telles que Jira{% ifversion ghes %}
|
||||
- Configuration matérielle{% endif %}
|
||||
- CI/CD, par exemple Jenkins
|
||||
- L’écriture de scripts
|
||||
- La configuration de systèmes d’authentification externes, comme des fournisseurs d’identité SAML
|
||||
- Projets open source{% ifversion ghes %}
|
||||
- Conception de cluster LGTM{% endif %}
|
||||
- Écriture ou débogage de nouvelles requêtes pour {% data variables.product.prodname_codeql %}
|
||||
If your support request is outside of the scope of what our team can help you with, we may recommend next steps to resolve your issue outside of {% data variables.contact.github_support %}. Your support request is possibly out of {% data variables.contact.github_support %}'s scope if the request is primarily about:
|
||||
- Third party integrations, such as Jira{% ifversion ghes %}
|
||||
- Hardware setup{% endif %}
|
||||
- CI/CD, such as Jenkins
|
||||
- Writing scripts
|
||||
- Configuration of external authentication systems, such as SAML identity providers
|
||||
- Open source projects
|
||||
- Writing or debugging new queries for {% data variables.product.prodname_codeql %}
|
||||
|
||||
Si vous ne savez pas si tel est le cas, ouvrez un ticket et nous serons ravis de vous aider à déterminer la meilleure façon de procéder.
|
||||
If you're uncertain if the issue is out of scope, open a ticket and we're happy to help you determine the best way to proceed.
|
||||
|
||||
@@ -42,8 +42,11 @@ After you configure {% data variables.location.product_location %} to use {% dat
|
||||
|
||||
Any VM that you use for {% data variables.product.prodname_dependabot %} runners must meet the requirements for self-hosted runners. In addition, they must meet the following requirements.
|
||||
|
||||
- Linux operating system{% ifversion ghes < 3.5 %}
|
||||
- Git installed{% endif %}
|
||||
- Linux operating system
|
||||
- x64 architecture
|
||||
{%- ifversion ghes < 3.5 %}
|
||||
- Git installed
|
||||
{%- endif %}
|
||||
- Docker installed with access for the runner users:
|
||||
- We recommend installing Docker in rootless mode and configuring the runners to access Docker without `root` privileges.
|
||||
- Alternatively, install Docker and give the runner users raised privileges to run Docker.
|
||||
|
||||
@@ -50,6 +50,8 @@ You can enable a related feature, {% data variables.product.prodname_dependabot_
|
||||
|
||||
{% data reusables.dependabot.dependabot-updates-and-actions %}
|
||||
|
||||
{% data reusables.dependabot.dependabot-actions-support %}
|
||||
|
||||
## About pull requests for security updates
|
||||
|
||||
Each pull request contains everything you need to quickly and safely review and merge a proposed fix into your project. This includes information about the vulnerability like release notes, changelog entries, and commit details. Details of which vulnerability a pull request resolves are hidden from anyone who does not have access to {% data variables.product.prodname_dependabot_alerts %} for the repository.
|
||||
|
||||
@@ -841,6 +841,27 @@ registries:
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{% ifversion dependabot-hex-self-hosted-support %}
|
||||
### `hex-repository`
|
||||
|
||||
The `hex-repository` type supports an authentication key.
|
||||
|
||||
`repo` is a required field, which must match the name of the repository used in your dependency declaration.
|
||||
|
||||
The `public-key-fingerprint` is an optional configuration field, representing the fingerprint of the public key for the Hex repository. `public-key-fingerprint` is used by Hex to establish trust with the private repository. The `public-key-fingerprint` field can be either listed in plaintext or stored as a {% data variables.product.prodname_dependabot %} secret.
|
||||
|
||||
{% raw %}
|
||||
```yaml
|
||||
registries:
|
||||
github-hex-repository:
|
||||
type: hex-repository
|
||||
repo: private-repo
|
||||
url: https://private-repo.example.com
|
||||
auth-key: ${{secrets.MY_AUTH_KEY}}
|
||||
public-key-fingerprint: ${{secrets.MY_PUBLIC_KEY_FINGERPRINT}}
|
||||
```
|
||||
{% endraw %}{% endif %}
|
||||
|
||||
### `maven-repository`
|
||||
|
||||
The `maven-repository` type supports username and password.
|
||||
|
||||
@@ -30,6 +30,8 @@ If a contributor bypasses a push protection block for a secret, {% data variable
|
||||
- adds the bypass event to the audit log.{% ifversion secret-scanning-push-protection-email %}
|
||||
- sends an email alert to organization owners, security managers, and repository administrators, with a link to the related secret and the reason why it was allowed.{% endif %}
|
||||
|
||||
{% data reusables.secret-scanning.bypass-reasons-and-alerts %}
|
||||
|
||||
For information on the secrets and service providers supported for push protection, see "[{% data variables.product.prodname_secret_scanning_caps %} patterns](/code-security/secret-scanning/secret-scanning-patterns#supported-secrets-for-push-protection)."
|
||||
|
||||
## Enabling {% data variables.product.prodname_secret_scanning %} as a push protection
|
||||
|
||||
@@ -104,6 +104,12 @@ The term "{% data variables.product.prodname_dependabot %}" encompasses the foll
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion dependabot-actions-support %}
|
||||
|
||||
{% data reusables.dependabot.dependabot-actions-support %} For more information, see "[About {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
#### What are Dependabot alerts
|
||||
|
||||
{% data variables.product.prodname_dependabot_alerts %} highlight repositories affected by a newly discovered vulnerability based on the dependency graph and the {% data variables.product.prodname_advisory_database %}, which contains advisories for known vulnerabilities{% ifversion GH-advisory-db-supports-malware %} and malware{% endif %}.
|
||||
|
||||
@@ -46,15 +46,15 @@ To set up a `www` or custom subdomain, such as `www.example.com` or `blog.exampl
|
||||
{% data reusables.repositories.sidebar-settings %}
|
||||
{% data reusables.pages.sidebar-pages %}
|
||||
4. Under "Custom domain", type your custom domain, then click **Save**. If you are publishing your site from a branch, this will create a commit that adds a `CNAME` file to the root of your source branch. If you are publishing your site with a custom {% data variables.product.prodname_actions %} workflow , no `CNAME` file is created. For more information about your publishing source, see "[Configuring a publishing source for your GitHub Pages site](/pages/getting-started-with-github-pages/configuring-a-publishing-source-for-your-github-pages-site)."
|
||||
|
||||
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
|
||||
5. Navigate to your DNS provider and create a `CNAME` record that points your subdomain to the default domain for your site. For example, if you want to use the subdomain `www.example.com` for your user site, create a `CNAME` record that points `www.example.com` to `<user>.github.io`. If you want to use the subdomain `another.example.com` for your organization site, create a `CNAME` record that points `another.example.com` to `<organization>.github.io`. The `CNAME` record should always point to `<user>.github.io` or `<organization>.github.io`, excluding the repository name. {% data reusables.pages.contact-dns-provider %} {% data reusables.pages.default-domain-information %}
|
||||
|
||||
|
||||
@@ -6,6 +6,7 @@ intro: '{% data variables.product.prodname_actions %} OIDC API를 사용하면 J
|
||||
topics:
|
||||
- API
|
||||
versions:
|
||||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '>=3.7'
|
||||
ms.openlocfilehash: 6857081d29bd89e59c4f6c7ff458fd0afc2cf6ef
|
||||
|
||||
@@ -21,6 +21,6 @@ When you create a new repository on {% ifversion ghae %}{% data variables.produc
|
||||
|
||||
You can use this custom media type when getting a gitignore template.
|
||||
|
||||
application/vnd.github.VERSION.raw
|
||||
application/vnd.github.raw
|
||||
|
||||
For more information, see "[Media types](/rest/overview/media-types)."
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
---
|
||||
title: 끌어오기 요청 검토 설명
|
||||
title: Pull request review comments
|
||||
shortTitle: Review comments
|
||||
intro: ''
|
||||
versions:
|
||||
@@ -11,24 +11,10 @@ topics:
|
||||
- API
|
||||
miniTocMaxHeadingLevel: 3
|
||||
allowTitleToDifferFromFilename: true
|
||||
ms.openlocfilehash: 6d49aa3d5bca7f74a21c1cce32cecd38abe9366d
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: ko-KR
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: '147067732'
|
||||
---
|
||||
## 끌어오기 요청 검토 주석 API 정보
|
||||
|
||||
끌어오기 요청 검토 주석은 끌어오기 요청 검토 중에 만든 통합 차이의 일부에 대한 주석입니다. 주석 커밋 및 주석 발행은 끌어오기 요청 검토 주석과 다릅니다. 커밋에 직접 커밋 주석을 적용하고 통합 차이의 일부를 참조하지 않고 문제 주석을 적용합니다. 자세한 내용은 “[커밋 주석 만들기](/rest/reference/commits#create-a-commit-comment)” 및 “[문제 주석 만들기](/rest/reference/issues#create-an-issue-comment)”를 참조하세요.
|
||||
## About the Pull request review comments API
|
||||
|
||||
### 끌어오기 요청 검토 주석에 대한 사용자 지정 미디어 유형
|
||||
Pull request review comments are comments on a portion of the unified diff made during a pull request review. Commit comments and issue comments are different from pull request review comments. You apply commit comments directly to a commit and you apply issue comments without referencing a portion of the unified diff. For more information, see "[Create a commit comment](/rest/reference/commits#create-a-commit-comment)" and "[Create an issue comment](/rest/reference/issues#create-an-issue-comment)."
|
||||
|
||||
끌어오기 요청 검토 주석에 지원되는 미디어 유형입니다.
|
||||
|
||||
application/vnd.github.VERSION.raw+json
|
||||
application/vnd.github.VERSION.text+json
|
||||
application/vnd.github.VERSION.html+json
|
||||
application/vnd.github.VERSION.full+json
|
||||
|
||||
자세한 내용은 “[사용자 지정 미디어 유형](/rest/overview/media-types)”을 참조하세요.
|
||||
{% data reusables.pull_requests.issues-media-types %}
|
||||
|
||||
@@ -64,6 +64,8 @@ Dynatrace | Dynatrace Internal Token | dynatrace_internal_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
EasyPost | EasyPost Test API Key | easypost_test_api_key
|
||||
Fastly | Fastly API Token | fastly_api_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Finicity | Finicity App Key | finicity_app_key
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Flutterwave | Flutterwave Test API Secret Key | flutterwave_test_api_secret_key
|
||||
@@ -91,7 +93,12 @@ Google | Google OAuth Access Token | google_oauth_access_token{% endif %}
|
||||
Google | Google OAuth Client ID with Google OAuth Client Secret | google_oauth_client_id </br>google_oauth_client_secret{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Google | Google OAuth Refresh Token | google_oauth_refresh_token{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Grafana | Grafana API Key | grafana_api_key
|
||||
Grafana | Grafana Cloud API Key | grafana_cloud_api_key
|
||||
Grafana | Grafana Cloud API Token | grafana_cloud_api_token
|
||||
Grafana | Grafana Project API Key | grafana_project_api_key
|
||||
Grafana | Grafana Project Service Account Token | grafana_project_service_account_token{% endif %}
|
||||
HashiCorp | Terraform Cloud / Enterprise API Token | terraform_api_token
|
||||
HashiCorp | HashiCorp Vault Batch Token | hashicorp_vault_batch_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.8 or ghae > 3.8 %}
|
||||
@@ -198,6 +205,8 @@ Stripe | Stripe Webhook Signing Secret | stripe_webhook_signing_secret
|
||||
Supabase | Supabase Service Key | supabase_service_key{% endif %}
|
||||
Tableau | Tableau {% data variables.product.pat_generic_title_case %} | tableau_personal_access_token
|
||||
Telegram | Telegram Bot Token | telegram_bot_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Telnyx | Telnyx API V2 Key | telnyx_api_v2_key{% endif %}
|
||||
Tencent Cloud | Tencent Cloud Secret ID | tencent_cloud_secret_id
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Twilio | Twilio Access Token | twilio_access_token{% endif %}
|
||||
|
||||
@@ -1,132 +1,127 @@
|
||||
---
|
||||
ms.openlocfilehash: 7843dd2811e3645b6c9ea979fd3cb54a14b151f0
|
||||
ms.sourcegitcommit: 8d6f272d8b5da44e3a29ad8d99013c10a5c91b35
|
||||
ms.translationtype: MT
|
||||
ms.contentlocale: ko-KR
|
||||
ms.lasthandoff: 11/17/2022
|
||||
ms.locfileid: "148172038"
|
||||
---
|
||||
파트너 | 지원되는 비밀
|
||||
Partner | Supported secret
|
||||
--- | ---
|
||||
Adafruit IO | Adafruit IO 키
|
||||
Adobe | Adobe 디바이스 토큰
|
||||
Adobe | Adobe 서비스 토큰
|
||||
Adobe | Adobe 단기 액세스 토큰
|
||||
Adobe | Adobe JSON 웹 토큰
|
||||
Alibaba Cloud | Alibaba Cloud Access 키 ID 및 액세스 키 비밀 쌍
|
||||
Amazon Web Services(AWS) | Amazon AWS 액세스 키 ID 및 비밀 액세스 키 쌍
|
||||
Atlassian | Atlassian API 토큰
|
||||
Atlassian | Atlassian JSON 웹 토큰
|
||||
Azure | Azure Active Directory 애플리케이션 비밀
|
||||
Azure | Azure Batch 키 식별 가능
|
||||
Azure | Azure CosmosDB 키 식별 가능
|
||||
Adafruit IO | Adafruit IO Key
|
||||
Adobe | Adobe Device Token
|
||||
Adobe | Adobe Service Token
|
||||
Adobe | Adobe Short-Lived Access Token
|
||||
Adobe | Adobe JSON Web Token
|
||||
Alibaba Cloud | Alibaba Cloud Access Key ID and Access Key Secret pair
|
||||
Amazon Web Services (AWS) | Amazon AWS Access Key ID and Secret Access Key pair
|
||||
Atlassian | Atlassian API Token
|
||||
Atlassian | Atlassian JSON Web Token
|
||||
Azure | Azure Active Directory Application Secret
|
||||
Azure | Azure Batch Key Identifiable
|
||||
Azure | Azure CosmosDB Key Identifiable
|
||||
Azure | Azure DevOps {% data variables.product.pat_generic_title_case %}
|
||||
Azure | Azure ML Studio(클래식) 웹 서비스 키
|
||||
Azure | Azure SAS 토큰
|
||||
Azure | Azure Search 관리 키
|
||||
Azure | Azure Search 쿼리 키
|
||||
Azure | Azure 서비스 관리 인증서
|
||||
Azure | Azure SQL 연결 문자열
|
||||
Azure | Azure Storage 계정 키
|
||||
Checkout.com | Checkout.com 프로덕션 비밀 키
|
||||
Checkout.com | Checkout.com 테스트 비밀 키
|
||||
Chief | 주요 도구 토큰
|
||||
Clojars | Clojars 배포 토큰
|
||||
CloudBees CodeShip | CloudBees CodeShip 자격 증명
|
||||
기여된 시스템 | 기여된 시스템 자격 증명
|
||||
Databricks | Databricks 액세스 토큰
|
||||
Datadog | Datadog API 키
|
||||
DevCycle | DevCycle 클라이언트 API 키
|
||||
DevCycle | DevCycle Server API 키
|
||||
Azure | Azure ML Studio (classic) Web Service Key
|
||||
Azure | Azure SAS Token
|
||||
Azure | Azure Search Admin Key
|
||||
Azure | Azure Search Query Key
|
||||
Azure | Azure Service Management Certificate
|
||||
Azure | Azure SQL Connection String
|
||||
Azure | Azure Storage Account Key
|
||||
Checkout.com | Checkout.com Production Secret Key
|
||||
Checkout.com | Checkout.com Test Secret Key
|
||||
Chief | Chief Tools Token
|
||||
Clojars | Clojars Deploy Token
|
||||
CloudBees CodeShip | CloudBees CodeShip Credential
|
||||
Contributed Systems | Contributed Systems Credentials
|
||||
Databricks | Databricks Access Token
|
||||
Datadog | Datadog API Key
|
||||
DevCycle | DevCycle Client API Key
|
||||
DevCycle | DevCycle Server API Key
|
||||
DigitalOcean | DigitalOcean {% data variables.product.pat_generic_title_case %}
|
||||
DigitalOcean | DigitalOcean OAuth 토큰
|
||||
DigitalOcean | DigitalOcean 새로 고침 토큰
|
||||
DigitalOcean | DigitalOcean 시스템 토큰
|
||||
Discord | Discord 봇 토큰
|
||||
Doppler | Doppler 개인용 토큰
|
||||
Doppler | Doppler 서비스 토큰
|
||||
Doppler | Doppler CLI 토큰
|
||||
Doppler | Doppler SCIM 토큰
|
||||
Doppler | Doppler 감사 토큰
|
||||
Dropbox | Dropbox 액세스 토큰
|
||||
Dropbox | Dropbox 단기 액세스 토큰
|
||||
Dynatrace | Dynatrace 액세스 토큰
|
||||
Dynatrace | Dynatrace 내부 토큰
|
||||
Finicity | Finicity 앱 키
|
||||
Frame.io | Frame.io JSON 웹 토큰
|
||||
Frame.io| Frame.io 개발자 토큰
|
||||
FullStory| FullStory API 키
|
||||
DigitalOcean | DigitalOcean OAuth Token
|
||||
DigitalOcean | DigitalOcean Refresh Token
|
||||
DigitalOcean | DigitalOcean System Token
|
||||
Discord | Discord Bot Token
|
||||
Doppler | Doppler Personal Token
|
||||
Doppler | Doppler Service Token
|
||||
Doppler | Doppler CLI Token
|
||||
Doppler | Doppler SCIM Token
|
||||
Doppler | Doppler Audit Token
|
||||
Dropbox | Dropbox Access Token
|
||||
Dropbox | Dropbox Short Lived Access Token
|
||||
Dynatrace | Dynatrace Access Token
|
||||
Dynatrace | Dynatrace Internal Token
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %}
|
||||
Finicity | Finicity App Key
|
||||
Frame.io | Frame.io JSON Web Token
|
||||
Frame.io| Frame.io Developer Token
|
||||
FullStory| FullStory API Key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %}
|
||||
GitHub | GitHub OAuth 액세스 토큰
|
||||
GitHub | GitHub 새로 고침 토큰
|
||||
GitHub | GitHub 앱 설치 액세스 토큰
|
||||
GitHub | GitHub SSH 프라이빗 키
|
||||
GoCardless | GoCardless 라이브 액세스 토큰
|
||||
GoCardless | GoCardless 샌드박스 액세스 토큰
|
||||
Google Cloud | Google API 키
|
||||
Google Cloud | Google 클라우드 프라이빗 키 ID
|
||||
Hashicorp Terraform | Terraform Cloud/Enterprise API 토큰
|
||||
Hubspot | Hubspot API 키
|
||||
GitHub | GitHub OAuth Access Token
|
||||
GitHub | GitHub Refresh Token
|
||||
GitHub | GitHub App Installation Access Token
|
||||
GitHub | GitHub SSH Private Key
|
||||
GoCardless | GoCardless Live Access Token
|
||||
GoCardless | GoCardless Sandbox Access Token
|
||||
Google Cloud | Google API Key
|
||||
Google Cloud | Google Cloud Private Key ID
|
||||
Hashicorp Terraform | Terraform Cloud / Enterprise API Token
|
||||
Hubspot | Hubspot API Key
|
||||
Hubspot | Hubspot API Personal Access Key
|
||||
Ionic | Ionic {% data variables.product.pat_generic_title_case %}
|
||||
Ionic | Ionic 새로 고침 토큰
|
||||
JD Cloud | JD Cloud 액세스 키
|
||||
선형 | 선형 API 키
|
||||
선형 | 선형 OAuth 액세스 토큰
|
||||
Mailchimp | Mailchimp API 키
|
||||
Mailchimp | Mandrill API 키
|
||||
Mailgun | Mailgun API 키
|
||||
MessageBird | MessageBird API 키
|
||||
Meta | Facebook 액세스 토큰
|
||||
npm | npm 액세스 토큰
|
||||
NuGet | NuGet API 키
|
||||
Octopus 배포 | Octopus 배포 API 키
|
||||
OpenAI | OpenAI API 키
|
||||
Palantir | Palantir JSON 웹 토큰
|
||||
PlanetScale | PlanetScale 데이터베이스 암호
|
||||
PlanetScale | PlanetScale OAuth 토큰
|
||||
PlanetScale | PlanetScale 서비스 토큰
|
||||
Plivo | Plivo 인증 ID 및 토큰
|
||||
postman | Postman API 키
|
||||
Prefect | Prefect Server API 키
|
||||
Prefect | Prefect User API 토큰
|
||||
Proctorio | Proctorio 소비자 키
|
||||
Proctorio | Proctorio 연결 키
|
||||
Proctorio | Proctorio 등록 키
|
||||
Proctorio | Proctorio 비밀 키
|
||||
Pulumi | Pulumi 액세스 토큰
|
||||
PyPI | PyPI API 토큰
|
||||
ReadMe | ReadMe API 액세스 키
|
||||
redirect.pizza | redirect.pizza API 토큰
|
||||
RubyGems | RubyGems API 키
|
||||
Samsara | Samsara API 토큰
|
||||
Samsara | Samsara OAuth 액세스 토큰
|
||||
SendGrid | SendGrid API 키
|
||||
Sendinblue | Sendinblue API 키
|
||||
Sendinblue | Sendinblue SMTP 키
|
||||
Shopify | Shopify 앱 공유 비밀
|
||||
Shopify | Shopify 액세스 토큰
|
||||
Shopify | Shopify 사용자 지정 앱 액세스 토큰
|
||||
Shopify | Shopify 프라이빗 앱 암호
|
||||
Slack | Slack API 토큰
|
||||
Slack | Slack 들어오는 웹후크 URL
|
||||
Slack | Slack 워크플로 웹후크 URL
|
||||
SSLMate | SSLMate API 키
|
||||
SSLMate | SSLMate 클러스터 비밀
|
||||
Stripe | Stripe 라이브 API 비밀 키
|
||||
Stripe | Stripe 테스트 API 비밀 키
|
||||
Stripe | Stripe 라이브 API 제한 키
|
||||
Stripe | Stripe 테스트 API 제한 키
|
||||
Supabase | Supabase 서비스 키
|
||||
Tencent Cloud | Tencent Cloud 비밀 ID
|
||||
Twilio | Twilio 계정 문자열 식별자
|
||||
Twilio | Twilio API 키
|
||||
Ionic | Ionic Refresh Token
|
||||
JD Cloud | JD Cloud Access Key
|
||||
Linear | Linear API Key
|
||||
Linear | Linear OAuth Access Token
|
||||
Mailchimp | Mailchimp API Key
|
||||
Mailchimp | Mandrill API Key
|
||||
Mailgun | Mailgun API Key
|
||||
MessageBird | MessageBird API Key
|
||||
Meta | Facebook Access Token
|
||||
npm | npm Access Token
|
||||
NuGet | NuGet API Key
|
||||
Octopus Deploy | Octopus Deploy API Key
|
||||
OpenAI | OpenAI API Key
|
||||
Palantir | Palantir JSON Web Token
|
||||
PlanetScale | PlanetScale Database Password
|
||||
PlanetScale | PlanetScale OAuth Token
|
||||
PlanetScale | PlanetScale Service Token
|
||||
Plivo | Plivo Auth ID and Token
|
||||
Postman | Postman API Key
|
||||
Prefect | Prefect Server API Key
|
||||
Prefect | Prefect User API Token
|
||||
Proctorio | Proctorio Consumer Key
|
||||
Proctorio | Proctorio Linkage Key
|
||||
Proctorio | Proctorio Registration Key
|
||||
Proctorio | Proctorio Secret Key
|
||||
Pulumi | Pulumi Access Token
|
||||
PyPI | PyPI API Token
|
||||
ReadMe | ReadMe API Access Key
|
||||
redirect.pizza | redirect.pizza API Token
|
||||
RubyGems | RubyGems API Key
|
||||
Samsara | Samsara API Token
|
||||
Samsara | Samsara OAuth Access Token
|
||||
SendGrid | SendGrid API Key
|
||||
Sendinblue | Sendinblue API Key
|
||||
Sendinblue | Sendinblue SMTP Key
|
||||
Shopify | Shopify App Shared Secret
|
||||
Shopify | Shopify Access Token
|
||||
Shopify | Shopify Custom App Access Token
|
||||
Shopify | Shopify Private App Password
|
||||
Slack | Slack API Token
|
||||
Slack | Slack Incoming Webhook URL
|
||||
Slack | Slack Workflow Webhook URL
|
||||
SSLMate | SSLMate API Key
|
||||
SSLMate | SSLMate Cluster Secret
|
||||
Stripe | Stripe Live API Secret Key
|
||||
Stripe | Stripe Test API Secret Key
|
||||
Stripe | Stripe Live API Restricted Key
|
||||
Stripe | Stripe Test API Restricted Key
|
||||
Supabase | Supabase Service Key
|
||||
Tencent Cloud | Tencent Cloud Secret ID
|
||||
Tencent WeChat | Tencent WeChat API App ID
|
||||
Twilio | Twilio Account String Identifier
|
||||
Twilio | Twilio API Key
|
||||
Typeform | Typeform {% data variables.product.pat_generic_title_case %}
|
||||
Uniwise | WISEflow API 키
|
||||
Valour | Valour 액세스 토큰
|
||||
Yandex | API 키 Yandex.Cloud
|
||||
Yandex | Yandex.Cloud IAM 쿠키
|
||||
Yandex | IAM 토큰 Yandex.Cloud
|
||||
Yandex | Yandex.Dictionary API 키
|
||||
Yandex | Yandex.Cloud 액세스 비밀
|
||||
Yandex | Yandex.Passport OAuth 토큰
|
||||
Uniwise | WISEflow API Key
|
||||
Valour | Valour Access Token
|
||||
Yandex | Yandex.Cloud API Key
|
||||
Yandex | Yandex.Cloud IAM Cookie
|
||||
Yandex | Yandex.Cloud IAM Token
|
||||
Yandex | Yandex.Dictionary API Key
|
||||
Yandex | Yandex.Cloud Access Secret
|
||||
Yandex | Yandex.Passport OAuth Token
|
||||
Zuplo | Zuplo Consumer API
|
||||
|
||||
@@ -41,6 +41,8 @@ Doppler | Doppler Audit Token | doppler_audit_token
|
||||
Dropbox | Dropbox Short Lived Access Token | dropbox_short_lived_access_token
|
||||
Duffel | Duffel Live Access Token | duffel_live_access_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Fullstory | FullStory API Key | fullstory_api_key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %} | github_personal_access_token
|
||||
|
||||
@@ -1,19 +1,10 @@
|
||||
---
|
||||
ms.openlocfilehash: 4081194451ae681e3a8208cb0462bd7f7574c3ef
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: ko-KR
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: "145140711"
|
||||
---
|
||||
지원 요청이 팀에서 지원할 수 있는 범위를 벗어나는 경우 {% data variables.contact.github_support %} 외부에서 문제를 해결하는 다음 단계를 사용하는 것이 좋습니다. 지원 요청이 주로 다음과 관련된 경우 {% data variables.contact.github_support %} 범위를 벗어날 수 있습니다.
|
||||
- Jira{% ifversion ghes %}와 같은 타사 통합
|
||||
- 하드웨어 설정{% endif %}
|
||||
- CI/CD(예: Jenkins)
|
||||
- 스크립트 작성
|
||||
- 외부 인증 시스템(예: SAML ID 공급자)의 구성
|
||||
- 오픈 소스 프로젝트{% ifversion ghes %}
|
||||
- LGTM 클러스터 디자인{% endif %}
|
||||
- {% data variables.product.prodname_codeql %}에 대한 새 쿼리 작성 또는 디버깅
|
||||
If your support request is outside of the scope of what our team can help you with, we may recommend next steps to resolve your issue outside of {% data variables.contact.github_support %}. Your support request is possibly out of {% data variables.contact.github_support %}'s scope if the request is primarily about:
|
||||
- Third party integrations, such as Jira{% ifversion ghes %}
|
||||
- Hardware setup{% endif %}
|
||||
- CI/CD, such as Jenkins
|
||||
- Writing scripts
|
||||
- Configuration of external authentication systems, such as SAML identity providers
|
||||
- Open source projects
|
||||
- Writing or debugging new queries for {% data variables.product.prodname_codeql %}
|
||||
|
||||
문제가 범위를 벗어나는지 확실하지 않은 경우 티켓을 열고 진행하는 가장 좋은 방법을 결정하는 데 도움을 드리겠습니다.
|
||||
If you're uncertain if the issue is out of scope, open a ticket and we're happy to help you determine the best way to proceed.
|
||||
|
||||
@@ -745,6 +745,7 @@ translations/fr-FR/content/code-security/security-overview/viewing-the-security-
|
||||
translations/fr-FR/content/code-security/supply-chain-security/end-to-end-supply-chain/securing-accounts.md,rendering error
|
||||
translations/fr-FR/content/code-security/supply-chain-security/end-to-end-supply-chain/securing-code.md,rendering error
|
||||
translations/fr-FR/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review.md,rendering error
|
||||
translations/fr-FR/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-supply-chain-security.md,broken liquid tags
|
||||
translations/fr-FR/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph.md,rendering error
|
||||
translations/fr-FR/content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-the-dependency-graph.md,broken liquid tags
|
||||
translations/fr-FR/content/code-security/supply-chain-security/understanding-your-software-supply-chain/troubleshooting-the-dependency-graph.md,broken liquid tags
|
||||
@@ -892,7 +893,7 @@ translations/fr-FR/content/graphql/reference/unions.md,rendering error
|
||||
translations/fr-FR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/changing-project-board-visibility.md,rendering error
|
||||
translations/fr-FR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/copying-a-project-board.md,rendering error
|
||||
translations/fr-FR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/creating-a-project-board.md,rendering error
|
||||
translations/fr-FR/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,broken liquid tags
|
||||
translations/fr-FR/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,rendering error
|
||||
translations/fr-FR/content/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue.md,rendering error
|
||||
translations/fr-FR/content/organizations/collaborating-with-groups-in-organizations/about-your-organizations-news-feed.md,rendering error
|
||||
translations/fr-FR/content/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch.md,rendering error
|
||||
@@ -1053,6 +1054,7 @@ translations/fr-FR/content/rest/overview/resources-in-the-rest-api.md,rendering
|
||||
translations/fr-FR/content/rest/overview/troubleshooting.md,broken liquid tags
|
||||
translations/fr-FR/content/rest/packages.md,broken liquid tags
|
||||
translations/fr-FR/content/rest/projects/projects.md,broken liquid tags
|
||||
translations/fr-FR/content/rest/pulls/comments.md,broken liquid tags
|
||||
translations/fr-FR/content/rest/quickstart.md,broken liquid tags
|
||||
translations/fr-FR/content/rest/scim.md,rendering error
|
||||
translations/fr-FR/content/rest/teams/team-sync.md,rendering error
|
||||
@@ -1290,6 +1292,7 @@ translations/fr-FR/data/reusables/scim/supported-idps.md,rendering error
|
||||
translations/fr-FR/data/reusables/search/syntax_tips.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/secret-scanning/enterprise-enable-secret-scanning.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/secret-scanning/partner-secret-list-private-repo.md,rendering error
|
||||
translations/fr-FR/data/reusables/secret-scanning/partner-secret-list-public-repo.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/secret-scanning/secret-list-private-push-protection.md,rendering error
|
||||
translations/fr-FR/data/reusables/security-overview/permissions.md,rendering error
|
||||
translations/fr-FR/data/reusables/security/displayed-information.md,broken liquid tags
|
||||
@@ -1299,6 +1302,7 @@ translations/fr-FR/data/reusables/ssh/about-ssh.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/ssh/key-type-support.md,rendering error
|
||||
translations/fr-FR/data/reusables/ssh/rsa-sha-1-connection-failure-criteria.md,rendering error
|
||||
translations/fr-FR/data/reusables/support/help_resources.md,rendering error
|
||||
translations/fr-FR/data/reusables/support/scope-of-support.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/support/submit-a-ticket.md,broken liquid tags
|
||||
translations/fr-FR/data/reusables/user-settings/access_applications.md,rendering error
|
||||
translations/fr-FR/data/reusables/user-settings/account_settings.md,rendering error
|
||||
|
||||
|
@@ -895,7 +895,7 @@ translations/ko-KR/content/graphql/reference/unions.md,rendering error
|
||||
translations/ko-KR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/changing-project-board-visibility.md,rendering error
|
||||
translations/ko-KR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/copying-a-project-board.md,rendering error
|
||||
translations/ko-KR/content/issues/organizing-your-work-with-project-boards/managing-project-boards/creating-a-project-board.md,rendering error
|
||||
translations/ko-KR/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,broken liquid tags
|
||||
translations/ko-KR/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,rendering error
|
||||
translations/ko-KR/content/issues/planning-and-tracking-with-projects/managing-items-in-your-project/adding-items-to-your-project.md,rendering error
|
||||
translations/ko-KR/content/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue.md,rendering error
|
||||
translations/ko-KR/content/organizations/collaborating-with-groups-in-organizations/creating-a-new-organization-from-scratch.md,rendering error
|
||||
@@ -1058,6 +1058,7 @@ translations/ko-KR/content/rest/overview/permissions-required-for-github-apps.md
|
||||
translations/ko-KR/content/rest/overview/resources-in-the-rest-api.md,rendering error
|
||||
translations/ko-KR/content/rest/overview/troubleshooting.md,rendering error
|
||||
translations/ko-KR/content/rest/packages.md,rendering error
|
||||
translations/ko-KR/content/rest/pulls/comments.md,broken liquid tags
|
||||
translations/ko-KR/content/rest/quickstart.md,rendering error
|
||||
translations/ko-KR/content/rest/scim.md,rendering error
|
||||
translations/ko-KR/content/rest/teams/team-sync.md,rendering error
|
||||
@@ -1299,6 +1300,7 @@ translations/ko-KR/data/reusables/scim/supported-idps.md,rendering error
|
||||
translations/ko-KR/data/reusables/search/syntax_tips.md,rendering error
|
||||
translations/ko-KR/data/reusables/secret-scanning/enterprise-enable-secret-scanning.md,rendering error
|
||||
translations/ko-KR/data/reusables/secret-scanning/partner-secret-list-private-repo.md,rendering error
|
||||
translations/ko-KR/data/reusables/secret-scanning/partner-secret-list-public-repo.md,broken liquid tags
|
||||
translations/ko-KR/data/reusables/secret-scanning/secret-list-private-push-protection.md,rendering error
|
||||
translations/ko-KR/data/reusables/security-overview/permissions.md,rendering error
|
||||
translations/ko-KR/data/reusables/security/displayed-information.md,rendering error
|
||||
@@ -1308,6 +1310,7 @@ translations/ko-KR/data/reusables/ssh/about-ssh.md,rendering error
|
||||
translations/ko-KR/data/reusables/ssh/key-type-support.md,rendering error
|
||||
translations/ko-KR/data/reusables/ssh/rsa-sha-1-connection-failure-criteria.md,rendering error
|
||||
translations/ko-KR/data/reusables/support/help_resources.md,rendering error
|
||||
translations/ko-KR/data/reusables/support/scope-of-support.md,broken liquid tags
|
||||
translations/ko-KR/data/reusables/support/submit-a-ticket.md,rendering error
|
||||
translations/ko-KR/data/reusables/user-settings/access_applications.md,rendering error
|
||||
translations/ko-KR/data/reusables/user-settings/account_settings.md,rendering error
|
||||
|
||||
|
@@ -944,7 +944,7 @@ translations/ru-RU/content/issues/organizing-your-work-with-project-boards/manag
|
||||
translations/ru-RU/content/issues/organizing-your-work-with-project-boards/managing-project-boards/copying-a-project-board.md,rendering error
|
||||
translations/ru-RU/content/issues/organizing-your-work-with-project-boards/managing-project-boards/creating-a-project-board.md,rendering error
|
||||
translations/ru-RU/content/issues/planning-and-tracking-with-projects/automating-your-project/archiving-items-automatically.md,rendering error
|
||||
translations/ru-RU/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,broken liquid tags
|
||||
translations/ru-RU/content/issues/planning-and-tracking-with-projects/creating-projects/migrating-from-projects-classic.md,rendering error
|
||||
translations/ru-RU/content/issues/planning-and-tracking-with-projects/customizing-views-in-your-project/customizing-a-view.md,broken liquid tags
|
||||
translations/ru-RU/content/issues/planning-and-tracking-with-projects/managing-items-in-your-project/adding-items-to-your-project.md,rendering error
|
||||
translations/ru-RU/content/issues/tracking-your-work-with-issues/linking-a-pull-request-to-an-issue.md,rendering error
|
||||
@@ -1129,6 +1129,7 @@ translations/ru-RU/content/rest/overview/resources-in-the-rest-api.md,rendering
|
||||
translations/ru-RU/content/rest/overview/troubleshooting.md,rendering error
|
||||
translations/ru-RU/content/rest/packages.md,rendering error
|
||||
translations/ru-RU/content/rest/projects/projects.md,rendering error
|
||||
translations/ru-RU/content/rest/pulls/comments.md,broken liquid tags
|
||||
translations/ru-RU/content/rest/quickstart.md,rendering error
|
||||
translations/ru-RU/content/rest/scim.md,rendering error
|
||||
translations/ru-RU/content/rest/teams/team-sync.md,rendering error
|
||||
@@ -1425,6 +1426,7 @@ translations/ru-RU/data/reusables/search/syntax_tips.md,rendering error
|
||||
translations/ru-RU/data/reusables/secret-scanning/enterprise-enable-secret-scanning.md,rendering error
|
||||
translations/ru-RU/data/reusables/secret-scanning/partner-program-link.md,broken liquid tags
|
||||
translations/ru-RU/data/reusables/secret-scanning/partner-secret-list-private-repo.md,rendering error
|
||||
translations/ru-RU/data/reusables/secret-scanning/partner-secret-list-public-repo.md,broken liquid tags
|
||||
translations/ru-RU/data/reusables/secret-scanning/secret-list-private-push-protection.md,rendering error
|
||||
translations/ru-RU/data/reusables/security-overview/beta-org-risk-coverage.md,rendering error
|
||||
translations/ru-RU/data/reusables/security-overview/permissions.md,rendering error
|
||||
@@ -1434,6 +1436,7 @@ translations/ru-RU/data/reusables/ssh/about-ssh.md,rendering error
|
||||
translations/ru-RU/data/reusables/ssh/key-type-support.md,rendering error
|
||||
translations/ru-RU/data/reusables/ssh/rsa-sha-1-connection-failure-criteria.md,rendering error
|
||||
translations/ru-RU/data/reusables/support/help_resources.md,rendering error
|
||||
translations/ru-RU/data/reusables/support/scope-of-support.md,broken liquid tags
|
||||
translations/ru-RU/data/reusables/support/submit-a-ticket.md,rendering error
|
||||
translations/ru-RU/data/reusables/supported-languages/C.md,broken liquid tags
|
||||
translations/ru-RU/data/reusables/supported-languages/Cpp.md,broken liquid tags
|
||||
|
||||
|
@@ -42,8 +42,11 @@ After you configure {% data variables.location.product_location %} to use {% dat
|
||||
|
||||
Any VM that you use for {% data variables.product.prodname_dependabot %} runners must meet the requirements for self-hosted runners. In addition, they must meet the following requirements.
|
||||
|
||||
- Linux operating system{% ifversion ghes < 3.5 %}
|
||||
- Git installed{% endif %}
|
||||
- Linux operating system
|
||||
- x64 architecture
|
||||
{%- ifversion ghes < 3.5 %}
|
||||
- Git installed
|
||||
{%- endif %}
|
||||
- Docker installed with access for the runner users:
|
||||
- We recommend installing Docker in rootless mode and configuring the runners to access Docker without `root` privileges.
|
||||
- Alternatively, install Docker and give the runner users raised privileges to run Docker.
|
||||
|
||||
@@ -50,6 +50,8 @@ You can enable a related feature, {% data variables.product.prodname_dependabot_
|
||||
|
||||
{% data reusables.dependabot.dependabot-updates-and-actions %}
|
||||
|
||||
{% data reusables.dependabot.dependabot-actions-support %}
|
||||
|
||||
## About pull requests for security updates
|
||||
|
||||
Each pull request contains everything you need to quickly and safely review and merge a proposed fix into your project. This includes information about the vulnerability like release notes, changelog entries, and commit details. Details of which vulnerability a pull request resolves are hidden from anyone who does not have access to {% data variables.product.prodname_dependabot_alerts %} for the repository.
|
||||
|
||||
@@ -841,6 +841,27 @@ registries:
|
||||
```
|
||||
{% endraw %}
|
||||
|
||||
{% ifversion dependabot-hex-self-hosted-support %}
|
||||
### `hex-repository`
|
||||
|
||||
The `hex-repository` type supports an authentication key.
|
||||
|
||||
`repo` is a required field, which must match the name of the repository used in your dependency declaration.
|
||||
|
||||
The `public-key-fingerprint` is an optional configuration field, representing the fingerprint of the public key for the Hex repository. `public-key-fingerprint` is used by Hex to establish trust with the private repository. The `public-key-fingerprint` field can be either listed in plaintext or stored as a {% data variables.product.prodname_dependabot %} secret.
|
||||
|
||||
{% raw %}
|
||||
```yaml
|
||||
registries:
|
||||
github-hex-repository:
|
||||
type: hex-repository
|
||||
repo: private-repo
|
||||
url: https://private-repo.example.com
|
||||
auth-key: ${{secrets.MY_AUTH_KEY}}
|
||||
public-key-fingerprint: ${{secrets.MY_PUBLIC_KEY_FINGERPRINT}}
|
||||
```
|
||||
{% endraw %}{% endif %}
|
||||
|
||||
### `maven-repository`
|
||||
|
||||
The `maven-repository` type supports username and password.
|
||||
|
||||
@@ -30,6 +30,8 @@ If a contributor bypasses a push protection block for a secret, {% data variable
|
||||
- adds the bypass event to the audit log.{% ifversion secret-scanning-push-protection-email %}
|
||||
- sends an email alert to organization owners, security managers, and repository administrators, with a link to the related secret and the reason why it was allowed.{% endif %}
|
||||
|
||||
{% data reusables.secret-scanning.bypass-reasons-and-alerts %}
|
||||
|
||||
For information on the secrets and service providers supported for push protection, see "[{% data variables.product.prodname_secret_scanning_caps %} patterns](/code-security/secret-scanning/secret-scanning-patterns#supported-secrets-for-push-protection)."
|
||||
|
||||
## Enabling {% data variables.product.prodname_secret_scanning %} as a push protection
|
||||
|
||||
@@ -104,6 +104,12 @@ The term "{% data variables.product.prodname_dependabot %}" encompasses the foll
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion dependabot-actions-support %}
|
||||
|
||||
{% data reusables.dependabot.dependabot-actions-support %} For more information, see "[About {% data variables.product.prodname_dependabot_security_updates %}](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates)."
|
||||
|
||||
{% endif %}
|
||||
|
||||
#### What are Dependabot alerts
|
||||
|
||||
{% data variables.product.prodname_dependabot_alerts %} highlight repositories affected by a newly discovered vulnerability based on the dependency graph and the {% data variables.product.prodname_advisory_database %}, which contains advisories for known vulnerabilities{% ifversion GH-advisory-db-supports-malware %} and malware{% endif %}.
|
||||
|
||||
@@ -46,15 +46,15 @@ To set up a `www` or custom subdomain, such as `www.example.com` or `blog.exampl
|
||||
{% data reusables.repositories.sidebar-settings %}
|
||||
{% data reusables.pages.sidebar-pages %}
|
||||
4. Under "Custom domain", type your custom domain, then click **Save**. If you are publishing your site from a branch, this will create a commit that adds a `CNAME` file to the root of your source branch. If you are publishing your site with a custom {% data variables.product.prodname_actions %} workflow , no `CNAME` file is created. For more information about your publishing source, see "[Configuring a publishing source for your GitHub Pages site](/pages/getting-started-with-github-pages/configuring-a-publishing-source-for-your-github-pages-site)."
|
||||
|
||||
|
||||
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
{% note %}
|
||||
|
||||
**Note:** If your custom domain is an internationalized domain name, you must enter the Punycode encoded version.
|
||||
|
||||
For more information on Punycodes, see [Internationalized domain name](https://en.wikipedia.org/wiki/Internationalized_domain_name).
|
||||
|
||||
{% endnote %}
|
||||
|
||||
5. Navigate to your DNS provider and create a `CNAME` record that points your subdomain to the default domain for your site. For example, if you want to use the subdomain `www.example.com` for your user site, create a `CNAME` record that points `www.example.com` to `<user>.github.io`. If you want to use the subdomain `another.example.com` for your organization site, create a `CNAME` record that points `another.example.com` to `<organization>.github.io`. The `CNAME` record should always point to `<user>.github.io` or `<organization>.github.io`, excluding the repository name. {% data reusables.pages.contact-dns-provider %} {% data reusables.pages.default-domain-information %}
|
||||
|
||||
|
||||
@@ -6,6 +6,7 @@ intro: 'API OIDC {% data variables.product.prodname_actions %} позволяе
|
||||
topics:
|
||||
- API
|
||||
versions:
|
||||
fpt: '*'
|
||||
ghec: '*'
|
||||
ghes: '>=3.7'
|
||||
ms.openlocfilehash: 6857081d29bd89e59c4f6c7ff458fd0afc2cf6ef
|
||||
|
||||
@@ -21,6 +21,6 @@ When you create a new repository on {% ifversion ghae %}{% data variables.produc
|
||||
|
||||
You can use this custom media type when getting a gitignore template.
|
||||
|
||||
application/vnd.github.VERSION.raw
|
||||
application/vnd.github.raw
|
||||
|
||||
For more information, see "[Media types](/rest/overview/media-types)."
|
||||
|
||||
@@ -1,5 +1,5 @@
|
||||
---
|
||||
title: Комментарии к проверке запроса на вытягивание
|
||||
title: Pull request review comments
|
||||
shortTitle: Review comments
|
||||
intro: ''
|
||||
versions:
|
||||
@@ -11,24 +11,10 @@ topics:
|
||||
- API
|
||||
miniTocMaxHeadingLevel: 3
|
||||
allowTitleToDifferFromFilename: true
|
||||
ms.openlocfilehash: 6d49aa3d5bca7f74a21c1cce32cecd38abe9366d
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: ru-RU
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: '147067733'
|
||||
---
|
||||
## Сведения об API комментариев к проверке запросов на вытягивание
|
||||
|
||||
Комментарии к проверке запросов на вытягивание — это комментарии к части расхождений, оставленные при проверке запроса на вытягивание. Комментарии к фиксациям и проблемам отличаются от комментариев к проверке запросов на вытягивание. Комментарии к фиксациям применяются непосредственно к фиксации, а комментарии к проблемам не включают ссылку на соответствующую часть расхождений. Дополнительные сведения см. в разделах [Создание комментария к фиксации](/rest/reference/commits#create-a-commit-comment) и [Создание комментария к проблеме](/rest/reference/issues#create-an-issue-comment).
|
||||
## About the Pull request review comments API
|
||||
|
||||
### Пользовательские типы носителей для комментариев к проверке запросов на вытягивание
|
||||
Pull request review comments are comments on a portion of the unified diff made during a pull request review. Commit comments and issue comments are different from pull request review comments. You apply commit comments directly to a commit and you apply issue comments without referencing a portion of the unified diff. For more information, see "[Create a commit comment](/rest/reference/commits#create-a-commit-comment)" and "[Create an issue comment](/rest/reference/issues#create-an-issue-comment)."
|
||||
|
||||
Это поддерживаемые типы носителей для комментариев к проверке запросов на вытягивание.
|
||||
|
||||
application/vnd.github.VERSION.raw+json
|
||||
application/vnd.github.VERSION.text+json
|
||||
application/vnd.github.VERSION.html+json
|
||||
application/vnd.github.VERSION.full+json
|
||||
|
||||
Дополнительные сведения см. в статье [Пользовательские типы фиксации](/rest/overview/media-types).
|
||||
{% data reusables.pull_requests.issues-media-types %}
|
||||
|
||||
@@ -64,6 +64,8 @@ Dynatrace | Dynatrace Internal Token | dynatrace_internal_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
EasyPost | EasyPost Test API Key | easypost_test_api_key
|
||||
Fastly | Fastly API Token | fastly_api_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Finicity | Finicity App Key | finicity_app_key
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Flutterwave | Flutterwave Test API Secret Key | flutterwave_test_api_secret_key
|
||||
@@ -91,7 +93,12 @@ Google | Google OAuth Access Token | google_oauth_access_token{% endif %}
|
||||
Google | Google OAuth Client ID with Google OAuth Client Secret | google_oauth_client_id </br>google_oauth_client_secret{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Google | Google OAuth Refresh Token | google_oauth_refresh_token{% endif %}
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Grafana | Grafana API Key | grafana_api_key
|
||||
Grafana | Grafana Cloud API Key | grafana_cloud_api_key
|
||||
Grafana | Grafana Cloud API Token | grafana_cloud_api_token
|
||||
Grafana | Grafana Project API Key | grafana_project_api_key
|
||||
Grafana | Grafana Project Service Account Token | grafana_project_service_account_token{% endif %}
|
||||
HashiCorp | Terraform Cloud / Enterprise API Token | terraform_api_token
|
||||
HashiCorp | HashiCorp Vault Batch Token | hashicorp_vault_batch_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.8 or ghae > 3.8 %}
|
||||
@@ -198,6 +205,8 @@ Stripe | Stripe Webhook Signing Secret | stripe_webhook_signing_secret
|
||||
Supabase | Supabase Service Key | supabase_service_key{% endif %}
|
||||
Tableau | Tableau {% data variables.product.pat_generic_title_case %} | tableau_personal_access_token
|
||||
Telegram | Telegram Bot Token | telegram_bot_token
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Telnyx | Telnyx API V2 Key | telnyx_api_v2_key{% endif %}
|
||||
Tencent Cloud | Tencent Cloud Secret ID | tencent_cloud_secret_id
|
||||
{%- ifversion fpt or ghec or ghes > 3.3 or ghae > 3.3 %}
|
||||
Twilio | Twilio Access Token | twilio_access_token{% endif %}
|
||||
|
||||
@@ -1,132 +1,127 @@
|
||||
---
|
||||
ms.openlocfilehash: 7843dd2811e3645b6c9ea979fd3cb54a14b151f0
|
||||
ms.sourcegitcommit: 8d6f272d8b5da44e3a29ad8d99013c10a5c91b35
|
||||
ms.translationtype: MT
|
||||
ms.contentlocale: ru-RU
|
||||
ms.lasthandoff: 11/17/2022
|
||||
ms.locfileid: "148172039"
|
||||
---
|
||||
Партнер | Поддерживаемый секрет
|
||||
Partner | Supported secret
|
||||
--- | ---
|
||||
Adafruit IO | Ключ Adafruit IO
|
||||
Adobe | Маркер устройства Adobe
|
||||
Adobe | Маркер службы Adobe
|
||||
Adobe | Краткосрочный маркер доступа Adobe
|
||||
Adafruit IO | Adafruit IO Key
|
||||
Adobe | Adobe Device Token
|
||||
Adobe | Adobe Service Token
|
||||
Adobe | Adobe Short-Lived Access Token
|
||||
Adobe | Adobe JSON Web Token
|
||||
Alibaba Cloud | Пара идентификатора и секрета ключа доступа Alibaba Cloud
|
||||
Amazon Web Services (AWS) | Пара идентификатора и секрета ключа доступа Amazon AWS
|
||||
Atlassian | Маркер Atlassian API
|
||||
Alibaba Cloud | Alibaba Cloud Access Key ID and Access Key Secret pair
|
||||
Amazon Web Services (AWS) | Amazon AWS Access Key ID and Secret Access Key pair
|
||||
Atlassian | Atlassian API Token
|
||||
Atlassian | Atlassian JSON Web Token
|
||||
Azure | Секрет приложения Azure Active Directory
|
||||
Azure | пакетная служба Azure ключ, который можно идентифицировать
|
||||
Azure | Идентифицируемый ключ Azure CosmosDB
|
||||
Azure | Azure Active Directory Application Secret
|
||||
Azure | Azure Batch Key Identifiable
|
||||
Azure | Azure CosmosDB Key Identifiable
|
||||
Azure | Azure DevOps {% data variables.product.pat_generic_title_case %}
|
||||
Azure | Ключ веб-службы Студии машинного обучения Azure (классическая версия)
|
||||
Azure | Маркер Azure SAS
|
||||
Azure | Ключ Администратор поиска Azure
|
||||
Azure | Ключ запроса поиска Azure
|
||||
Azure | Сертификат управления службами Azure
|
||||
Azure | Строка подключения Azure SQL
|
||||
Azure | Ключ учетной записи хранения Azure
|
||||
Checkout.com | Производственный секретный ключ Checkout.com
|
||||
Checkout.com | Тестовый секретный ключ Checkout.com
|
||||
Chief | Токен главных средств
|
||||
Clojars | Маркер развертывания Clojars
|
||||
CloudBees CodeShip | Учетные данные CloudBees CodeShip
|
||||
Contributed Systems | Учетные данные Contributed Systems
|
||||
Databricks | Маркер доступа Databricks
|
||||
Datadog | Ключ API Datadog
|
||||
DevCycle | Ключ API клиента DevCycle
|
||||
DevCycle | Ключ API сервера DevCycle
|
||||
Azure | Azure ML Studio (classic) Web Service Key
|
||||
Azure | Azure SAS Token
|
||||
Azure | Azure Search Admin Key
|
||||
Azure | Azure Search Query Key
|
||||
Azure | Azure Service Management Certificate
|
||||
Azure | Azure SQL Connection String
|
||||
Azure | Azure Storage Account Key
|
||||
Checkout.com | Checkout.com Production Secret Key
|
||||
Checkout.com | Checkout.com Test Secret Key
|
||||
Chief | Chief Tools Token
|
||||
Clojars | Clojars Deploy Token
|
||||
CloudBees CodeShip | CloudBees CodeShip Credential
|
||||
Contributed Systems | Contributed Systems Credentials
|
||||
Databricks | Databricks Access Token
|
||||
Datadog | Datadog API Key
|
||||
DevCycle | DevCycle Client API Key
|
||||
DevCycle | DevCycle Server API Key
|
||||
DigitalOcean | DigitalOcean {% data variables.product.pat_generic_title_case %}
|
||||
DigitalOcean | Маркер OAuth DigitalOcean
|
||||
DigitalOcean | Маркер обновления DigitalOcean
|
||||
DigitalOcean | Маркер системы DigitalOcean
|
||||
Discord | Маркер бота Discord
|
||||
Doppler | Личный маркер Doppler
|
||||
Doppler | Маркер службы Doppler
|
||||
Doppler | Маркер CLI Doppler
|
||||
Doppler | Маркер SCIM Doppler
|
||||
Doppler | Маркер аудита Doppler
|
||||
DropBox | Маркер доступа Dropbox
|
||||
DropBox | Краткосрочный маркер доступа Dropbox
|
||||
Dynatrace | Маркер доступа Dynatrace
|
||||
Dynatrace | Внутренний маркер Dynatrace
|
||||
Finicity | Ключ приложения Finicity
|
||||
DigitalOcean | DigitalOcean OAuth Token
|
||||
DigitalOcean | DigitalOcean Refresh Token
|
||||
DigitalOcean | DigitalOcean System Token
|
||||
Discord | Discord Bot Token
|
||||
Doppler | Doppler Personal Token
|
||||
Doppler | Doppler Service Token
|
||||
Doppler | Doppler CLI Token
|
||||
Doppler | Doppler SCIM Token
|
||||
Doppler | Doppler Audit Token
|
||||
Dropbox | Dropbox Access Token
|
||||
Dropbox | Dropbox Short Lived Access Token
|
||||
Dynatrace | Dynatrace Access Token
|
||||
Dynatrace | Dynatrace Internal Token
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %}
|
||||
Finicity | Finicity App Key
|
||||
Frame.io | Frame.io JSON Web Token
|
||||
Frame.io| Маркер разработчика Frame.io
|
||||
FullStory| Ключ API FullStory
|
||||
Frame.io| Frame.io Developer Token
|
||||
FullStory| FullStory API Key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %}
|
||||
GitHub | Маркер доступа OAuth GitHub
|
||||
GitHub | Маркер обновления GitHub
|
||||
GitHub | Маркер доступа к установке приложений GitHub
|
||||
GitHub | Закрытый ключ SSH GitHub
|
||||
GoCardless | Маркер динамического доступа GoCardless
|
||||
GoCardless | Маркер доступа к песочнице GoCardless
|
||||
Google Cloud | Ключ API Google
|
||||
Google Cloud | Идентификатор закрытого ключа Google Cloud
|
||||
Hashicorp Terraform | Ключ Terraform Cloud / Enterprise API
|
||||
Hubspot | Ключ API Hubspot
|
||||
GitHub | GitHub OAuth Access Token
|
||||
GitHub | GitHub Refresh Token
|
||||
GitHub | GitHub App Installation Access Token
|
||||
GitHub | GitHub SSH Private Key
|
||||
GoCardless | GoCardless Live Access Token
|
||||
GoCardless | GoCardless Sandbox Access Token
|
||||
Google Cloud | Google API Key
|
||||
Google Cloud | Google Cloud Private Key ID
|
||||
Hashicorp Terraform | Terraform Cloud / Enterprise API Token
|
||||
Hubspot | Hubspot API Key
|
||||
Hubspot | Hubspot API Personal Access Key
|
||||
Ionic | Ionic {% data variables.product.pat_generic_title_case %}
|
||||
Ionic | Маркер обновления Ionic
|
||||
JD Cloud | Ключ доступа JD Cloud
|
||||
Линейная | Ключ API Linear
|
||||
Линейная | Маркер доступа OAuth Linear
|
||||
Mailchimp | Ключ API Mailchimp
|
||||
Mailchimp | Ключ API Mandrill
|
||||
Mailgun | Ключ API Mailgun
|
||||
MessageBird | Ключ API MessageBird
|
||||
Meta | Маркер доступа Facebook
|
||||
npm | Маркер доступа npm
|
||||
NuGet | Ключ API NuGet
|
||||
Развертывание Octopus | Ключ API развертывания Octopus
|
||||
OpenAI | Ключ API OpenAI
|
||||
Ionic | Ionic Refresh Token
|
||||
JD Cloud | JD Cloud Access Key
|
||||
Linear | Linear API Key
|
||||
Linear | Linear OAuth Access Token
|
||||
Mailchimp | Mailchimp API Key
|
||||
Mailchimp | Mandrill API Key
|
||||
Mailgun | Mailgun API Key
|
||||
MessageBird | MessageBird API Key
|
||||
Meta | Facebook Access Token
|
||||
npm | npm Access Token
|
||||
NuGet | NuGet API Key
|
||||
Octopus Deploy | Octopus Deploy API Key
|
||||
OpenAI | OpenAI API Key
|
||||
Palantir | Palantir JSON Web Token
|
||||
PlanetScale | Пароль базы данных PlanetScale
|
||||
PlanetScale | Маркер OAuth PlanetScale
|
||||
PlanetScale | Маркер службы PlanetScale
|
||||
Plivo | Идентификатор и маркер Plivo Auth
|
||||
Postman | Ключ API Postman
|
||||
Prefect | Ключ API сервера Prefect
|
||||
Prefect | Токен API пользователя Prefect
|
||||
Proctorio | Ключ потребителя Proctorio
|
||||
Proctorio | Ключ связывания Proctorio
|
||||
Proctorio | Ключ регистрации Proctorio
|
||||
Proctorio | Секретный ключ Proctorio
|
||||
Pulumi | Маркер доступа Pulumi
|
||||
PyPI | Маркер API PyPI
|
||||
ReadMe | Ключ доступа API ReadMe
|
||||
redirect.pizza | Маркер API redirect.pizza
|
||||
RubyGems | Ключ API RubyGems
|
||||
Samsara | Маркер API Samsara
|
||||
Samsara | Маркер доступа OAuth Samsara
|
||||
SendGrid | Ключ API SendGrid
|
||||
Sendinblue | Ключ API Sendinblue
|
||||
Sendinblue | Ключ SMTP Sendinblue
|
||||
Shopify | Общий секрет приложения Shopify
|
||||
Shopify | Маркер доступа Shopify
|
||||
Shopify | Пользовательский маркер доступа к приложению Shopify
|
||||
Shopify | Пароль частного приложения Shopify
|
||||
Slack | Маркер API Slack
|
||||
Slack | URL-адрес входящего веб-перехватчика Slack
|
||||
Slack | URL-адрес веб-перехватчика рабочего процесса Slack
|
||||
SSLMate | Ключ API SSLMate
|
||||
SSLMate | Секрет кластера SSLMate
|
||||
Stripe | Секретный ключ реального API Stripe
|
||||
Stripe | Секретный ключ тестового API Stripe
|
||||
Stripe | Ограниченный ключ реального API Stripe
|
||||
Stripe | Ограниченный ключ тестового API Stripe
|
||||
Supabase | Ключ службы Supabase
|
||||
Tencent Cloud | Идентификатор секрета Tencent Cloud
|
||||
Twilio | Строковый идентификатор учетной записи Twilio
|
||||
Twilio | Ключ API Twilio
|
||||
Typeform | Форма типа {% data variables.product.pat_generic_title_case %}
|
||||
Uniwise | Ключ API WISEflow
|
||||
Valour | Маркер доступа Valour
|
||||
Яндекс | Ключ API Yandex.Cloud
|
||||
Яндекс | Yandex.Cloud IAM Cookie
|
||||
Яндекс | маркер IAM Yandex.Cloud
|
||||
Яндекс | Ключ API "Поиск.Словарь"
|
||||
Яндекс | Секрет доступа Yandex.Cloud
|
||||
Яндекс | Токен OAuth Для гравюр.Passport
|
||||
Zuplo | API потребителя Zuplo
|
||||
PlanetScale | PlanetScale Database Password
|
||||
PlanetScale | PlanetScale OAuth Token
|
||||
PlanetScale | PlanetScale Service Token
|
||||
Plivo | Plivo Auth ID and Token
|
||||
Postman | Postman API Key
|
||||
Prefect | Prefect Server API Key
|
||||
Prefect | Prefect User API Token
|
||||
Proctorio | Proctorio Consumer Key
|
||||
Proctorio | Proctorio Linkage Key
|
||||
Proctorio | Proctorio Registration Key
|
||||
Proctorio | Proctorio Secret Key
|
||||
Pulumi | Pulumi Access Token
|
||||
PyPI | PyPI API Token
|
||||
ReadMe | ReadMe API Access Key
|
||||
redirect.pizza | redirect.pizza API Token
|
||||
RubyGems | RubyGems API Key
|
||||
Samsara | Samsara API Token
|
||||
Samsara | Samsara OAuth Access Token
|
||||
SendGrid | SendGrid API Key
|
||||
Sendinblue | Sendinblue API Key
|
||||
Sendinblue | Sendinblue SMTP Key
|
||||
Shopify | Shopify App Shared Secret
|
||||
Shopify | Shopify Access Token
|
||||
Shopify | Shopify Custom App Access Token
|
||||
Shopify | Shopify Private App Password
|
||||
Slack | Slack API Token
|
||||
Slack | Slack Incoming Webhook URL
|
||||
Slack | Slack Workflow Webhook URL
|
||||
SSLMate | SSLMate API Key
|
||||
SSLMate | SSLMate Cluster Secret
|
||||
Stripe | Stripe Live API Secret Key
|
||||
Stripe | Stripe Test API Secret Key
|
||||
Stripe | Stripe Live API Restricted Key
|
||||
Stripe | Stripe Test API Restricted Key
|
||||
Supabase | Supabase Service Key
|
||||
Tencent Cloud | Tencent Cloud Secret ID
|
||||
Tencent WeChat | Tencent WeChat API App ID
|
||||
Twilio | Twilio Account String Identifier
|
||||
Twilio | Twilio API Key
|
||||
Typeform | Typeform {% data variables.product.pat_generic_title_case %}
|
||||
Uniwise | WISEflow API Key
|
||||
Valour | Valour Access Token
|
||||
Yandex | Yandex.Cloud API Key
|
||||
Yandex | Yandex.Cloud IAM Cookie
|
||||
Yandex | Yandex.Cloud IAM Token
|
||||
Yandex | Yandex.Dictionary API Key
|
||||
Yandex | Yandex.Cloud Access Secret
|
||||
Yandex | Yandex.Passport OAuth Token
|
||||
Zuplo | Zuplo Consumer API
|
||||
|
||||
@@ -41,6 +41,8 @@ Doppler | Doppler Audit Token | doppler_audit_token
|
||||
Dropbox | Dropbox Short Lived Access Token | dropbox_short_lived_access_token
|
||||
Duffel | Duffel Live Access Token | duffel_live_access_token
|
||||
EasyPost | EasyPost Production API Key | easypost_production_api_key
|
||||
{%- ifversion fpt or ghec or ghes > 3.7 or ghae > 3.7 %}
|
||||
Figma | Figma {% data variables.product.pat_generic_title_case %} | figma_pat{% endif %}
|
||||
Flutterwave | Flutterwave Live API Secret Key | flutterwave_live_api_secret_key
|
||||
Fullstory | FullStory API Key | fullstory_api_key
|
||||
GitHub | GitHub {% data variables.product.pat_generic_title_case %} | github_personal_access_token
|
||||
|
||||
@@ -1,19 +1,10 @@
|
||||
---
|
||||
ms.openlocfilehash: 4081194451ae681e3a8208cb0462bd7f7574c3ef
|
||||
ms.sourcegitcommit: 47bd0e48c7dba1dde49baff60bc1eddc91ab10c5
|
||||
ms.translationtype: HT
|
||||
ms.contentlocale: ru-RU
|
||||
ms.lasthandoff: 09/05/2022
|
||||
ms.locfileid: "145140710"
|
||||
---
|
||||
Если ваш запрос на поддержку не входит в сферу компетенции нашей команды, рекомендуем выполнить следующие действия по устранению проблемы за пределами {% data variables.contact.github_support %}. Ваш запрос на поддержку может не входить в сферу компетенции команды {% data variables.contact.github_support %}, если он в основном касается следующего:
|
||||
- Сторонние интеграции, такие как Jira{% ifversion ghes %}
|
||||
- Настройка оборудования{% endif %}
|
||||
- CI/CD, например Jenkins.
|
||||
- Написание скриптов.
|
||||
- Настройка внешних систем проверки подлинности, таких как поставщики удостоверений SAML.
|
||||
- Проекты с открытым кодом{% ifversion ghes %}
|
||||
- Проектирование кластера LGTM{% endif %}
|
||||
- Написание или отладка новых запросов для {% data variables.product.prodname_codeql %}
|
||||
If your support request is outside of the scope of what our team can help you with, we may recommend next steps to resolve your issue outside of {% data variables.contact.github_support %}. Your support request is possibly out of {% data variables.contact.github_support %}'s scope if the request is primarily about:
|
||||
- Third party integrations, such as Jira{% ifversion ghes %}
|
||||
- Hardware setup{% endif %}
|
||||
- CI/CD, such as Jenkins
|
||||
- Writing scripts
|
||||
- Configuration of external authentication systems, such as SAML identity providers
|
||||
- Open source projects
|
||||
- Writing or debugging new queries for {% data variables.product.prodname_codeql %}
|
||||
|
||||
Если вы не знаете, входит ли ваша проблема в сферу компетенции нашей команды, создайте запрос в службу поддержки, и мы поможем вам определить оптимальный путь решения.
|
||||
If you're uncertain if the issue is out of scope, open a ticket and we're happy to help you determine the best way to proceed.
|
||||
|
||||
Reference in New Issue
Block a user