jprdonnelly/docs
1
0
Fork 0
mirror of synced 2025-12-19 18:10:59 -05:00
Code Issues Projects Releases Wiki Activity

Mention GHAS (Code Security in fact) is required for the Dependabot Metrics Dashboard (#56642)

Browse Source 
Co-authored-by: Kevin Heis <heiskr@users.noreply.github.com>
This commit is contained in:
mc
2025-07-17 18:24:39 +01:00
committed by GitHub
parent 2e975708e1
commit 53931ebb3f
3 changed files with 7 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
content/code-security/securing-your-organization/understanding-your-organizations-exposure-to-vulnerabilities/prioritizing-dependabot-alerts-using-metrics.md
View File

@@ -3,6 +3,7 @@ title: Prioritizing Dependabot alerts using metrics
shortTitle: Prioritize Dependabot alerts using metrics
intro: 'You can prioritize {% data variables.product.prodname_dependabot_alerts %} in your organization by analyzing the provided metrics. Using this approach, you can tell your developers to focus on the most important vulnerabilities first.'
allowTitleToDifferFromFilename: true
product: '{% data reusables.gated-features.security-overview-fpt-cs-only %}'
permissions: '{% data reusables.permissions.security-org-enable %}'
versions:
feature: dependabot-metrics
@@ -30,6 +31,8 @@ Application Security (AppSec) managers often face a flood of {% data variables.p
* **Alerts closed in the last 30 days, including the number of alerts fixed by {% data variables.product.prodname_dependabot %}, manually dismissed, and auto dismissed**: Tracks alert resolution progress. Illustrates how {% data variables.product.prodname_GH_code_security %} can help you detect vulnerabilities early.
* **Table showing the total number of open alerts for each repository, as well as severity and expoitability data**: Allows you to dig deeper at the repository level.
For more information about these metrics, see [AUTOTITLE](/code-security/security-overview/viewing-metrics-for-dependabot-alerts).
Additionally, you can specify complex filters, which are combinations of the individual filters that are available. For more information about filters, see [{% data variables.product.prodname_dependabot %} dashboard view filters](/code-security/security-overview/filtering-alerts-in-security-overview#dependabot-dashboard-view-filters).
## Steps to prioritize alerts

6
content/code-security/security-overview/filtering-alerts-in-security-overview.md
View File

@@ -158,7 +158,7 @@ You can also filter the "Overview" view by properties of alerts.
| `severity` | Display data only for alerts of a specific severity (`critical`, `high`, `medium`, or `low`).
| `third-party.rule`| Display data only for {% data variables.product.prodname_code_scanning %} identified by a specific rule for a tool developed by a third party. For example, `third-party.rule:CVE-2021-26291-maven-artifact` shows only results for the `CVE-2021-26291-maven-artifact` rule of a third-party {% data variables.product.prodname_code_scanning %} tool.
### {% data variables.product.prodname_dependabot %} alert view filters
## {% data variables.product.prodname_dependabot %} alert view filters
You can filter the view to show {% data variables.product.prodname_dependabot_alerts %} that are ready to fix or where additional information about exposure is available. You can click any result to see full details of the alert.
@@ -174,7 +174,7 @@ You can filter the view to show {% data variables.product.prodname_dependabot_al
{% ifversion dependabot-metrics %}
### {% data variables.product.prodname_dependabot %} dashboard filters
## {% data variables.product.prodname_dependabot %} dashboard filters
You can filter the "{% data variables.product.prodname_dependabot %} dashboard" view using these filters.
@@ -184,7 +184,7 @@ Alternatively, you can use complex filters by clicking **{% octicon "filter" ari
{% endif %}
### {% data variables.product.prodname_code_scanning_caps %} alert view filters
## {% data variables.product.prodname_code_scanning_caps %} alert view filters
All {% data variables.product.prodname_code_scanning %} alerts have one of the categories shown below. You can click any result to see full details of the relevant query and the line of code that triggered the alert.

4
data/reusables/gated-features/security-overview-fpt-cs-only.md
View File

@@ -1,3 +1 @@
{% ifversion fpt %}
Organizations owned by a {% data variables.product.prodname_team %} account with {% data variables.product.prodname_GH_code_security %}, or owned by a {% data variables.product.prodname_enterprise %} account
{% endif %}
Organizations owned by a {% data variables.product.prodname_team %} account with {% data variables.product.prodname_GH_code_security %}, or owned by a {% data variables.product.prodname_enterprise %} account with {% data variables.product.prodname_GH_code_security %}