diff --git a/content/code-security/dependabot/dependabot-auto-triage-rules/about-dependabot-auto-triage-rules.md b/content/code-security/dependabot/dependabot-auto-triage-rules/about-dependabot-auto-triage-rules.md index 8994a93e7e..9faf73e582 100644 --- a/content/code-security/dependabot/dependabot-auto-triage-rules/about-dependabot-auto-triage-rules.md +++ b/content/code-security/dependabot/dependabot-auto-triage-rules/about-dependabot-auto-triage-rules.md @@ -1,6 +1,6 @@ --- title: About Dependabot auto-triage rules -intro: '{% data variables.dependabot.auto_triage_rules %} are a powerful tool to help you better manage your security alerts at scale. {% data variables.product.prodname_dependabot %}''s default rules are curated for you and filter out a substantial amount of false positives. {% data variables.dependabot.custom_rules_caps %} provide control over which alerts are ignored, snoozed, or trigger a {% data variables.product.prodname_dependabot %} security update to resolve the alert.' +intro: '{% data variables.dependabot.auto_triage_rules %} are a powerful tool to help you better manage your security alerts at scale. {% data variables.dependabot.github_presets %} are rules curated by {% data variables.product.company_short %} that you can use to filter out a substantial amount of false positives. {% data variables.dependabot.custom_rules_caps %} provide control over which alerts are ignored, snoozed, or trigger a {% data variables.product.prodname_dependabot %} security update to resolve the alert.' permissions: 'People with write permissions can view {% data variables.dependabot.auto_triage_rules %} for the repository. People with admin permissions to a repository can enable or disable {% data variables.dependabot.auto_triage_rules_short %} for the repository, as well as create {% data variables.dependabot.custom_rules %}. Additionally, organization owners and security managers can set {% data variables.dependabot.auto_triage_rules_short %} at the organization-level and optionally choose to enforce rules for repositories in the organization.' versions: feature: dependabot-auto-triage-rules @@ -25,18 +25,18 @@ redirect_from: There are two types of {% data variables.dependabot.auto_triage_rules %}: -- {% data variables.dependabot.default_rules %} +- {% data variables.dependabot.github_presets %} - {% data variables.dependabot.custom_rules_caps %} -### About {% data variables.dependabot.default_rules %} +### About {% data variables.dependabot.github_presets %} {% note %} -{% data reusables.dependabot.dependabot-default-auto-triage-rules %} +{% data reusables.dependabot.dependabot-github-preset-auto-triage-rules %} {% endnote %} -{% data reusables.dependabot.dismiss-low-impact-rule %} +{% data variables.dependabot.github_presets %} are rules curated by {% data variables.product.company_short %}. {% data reusables.dependabot.dismiss-low-impact-rule %} ### About {% data variables.dependabot.custom_rules %} @@ -60,5 +60,5 @@ Auto-dismissed alerts are defined by the `resolution:auto-dismiss` close reason. ## Further reading -- [AUTOTITLE](/code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts) +- [AUTOTITLE](/code-security/dependabot/dependabot-auto-triage-rules/using-github-preset-rules-to-prioritize-dependabot-alerts) - [AUTOTITLE](/code-security/dependabot/dependabot-auto-triage-rules/customizing-auto-triage-rules-to-prioritize-dependabot-alerts) diff --git a/content/code-security/dependabot/dependabot-auto-triage-rules/index.md b/content/code-security/dependabot/dependabot-auto-triage-rules/index.md index 594b637b60..76ac8b6cf8 100644 --- a/content/code-security/dependabot/dependabot-auto-triage-rules/index.md +++ b/content/code-security/dependabot/dependabot-auto-triage-rules/index.md @@ -13,7 +13,7 @@ topics: - Dependencies children: - /about-dependabot-auto-triage-rules - - /using-github-curated-default-rules-to-prioritize-dependabot-alerts + - /using-github-preset-rules-to-prioritize-dependabot-alerts - /customizing-auto-triage-rules-to-prioritize-dependabot-alerts - /managing-automatically-dismissed-alerts redirect_from: diff --git a/content/code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts.md b/content/code-security/dependabot/dependabot-auto-triage-rules/using-github-preset-rules-to-prioritize-dependabot-alerts.md similarity index 71% rename from content/code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts.md rename to content/code-security/dependabot/dependabot-auto-triage-rules/using-github-preset-rules-to-prioritize-dependabot-alerts.md index cede79f1a8..3b04497c0a 100644 --- a/content/code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts.md +++ b/content/code-security/dependabot/dependabot-auto-triage-rules/using-github-preset-rules-to-prioritize-dependabot-alerts.md @@ -1,7 +1,7 @@ --- -title: Using GitHub-curated default rules to prioritize Dependabot alerts -intro: 'You can use a {% data variables.product.company_short %}-curated default rule to auto-dismiss low impact development alerts for npm dependencies.' -permissions: 'People with write permissions can view {% data variables.dependabot.auto_triage_rules %} for the repository. People with admin permissions to a repository can enable or disable {% data variables.dependabot.default_rules %} for the repository. Organization owners and security managers can enable or disable {% data variables.dependabot.default_rules %} at the organization-level and optionally choose to enforce rules for repositories in the organization.' +title: Using GitHub preset rules to prioritize Dependabot alerts +intro: 'You can use {% data variables.dependabot.github_presets %}, which are rules curated by {% data variables.product.company_short %}, to auto-dismiss low impact development alerts for npm dependencies.' +permissions: 'People with write permissions can view {% data variables.dependabot.auto_triage_rules %} for the repository. People with admin permissions to a repository can enable or disable {% data variables.dependabot.github_presets %} for the repository. Organization owners and security managers can enable or disable {% data variables.dependabot.github_presets %} at the organization-level and optionally choose to enforce rules for repositories in the organization.' versions: feature: dependabot-auto-triage-rules type: how_to @@ -11,16 +11,17 @@ topics: - Vulnerabilities - Repositories - Dependencies -shortTitle: GitHub-curated default rules +shortTitle: GitHub preset rules redirect_from: - /code-security/dependabot/dependabot-alert-rules/using-github-curated-alert-rules-to-prioritize-dependabot-alerts + - /code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts --- {% data reusables.dependabot.dependabot-auto-triage-rules-beta %} -## About {% data variables.dependabot.default_rules %} +## About {% data variables.dependabot.github_presets %} -The {% data variables.product.company_short %}-curated default rule, `Dismiss low impact issues for development-scoped dependencies`, auto-dismisses certain types of vulnerabilities that are found in npm dependencies used in development. These alerts cover cases that feel like false alarms to most developers as the associated vulnerabilities: +The `Dismiss low impact issues for development-scoped dependencies` rule is a {% data variables.product.company_short %} preset that auto-dismisses certain types of vulnerabilities that are found in npm dependencies used in development. These alerts cover cases that feel like false alarms to most developers as the associated vulnerabilities: - Are unlikely to be exploitable in a developer (non-production or runtime) environment. - May relate to resource management, programming and logic, and information disclosure issues. @@ -33,11 +34,11 @@ The {% data variables.product.company_short %}-curated default rule, `Dismiss lo {% endnote %} -The {% data variables.product.company_short %}-curated default rule, `Dismiss low impact issues for development-scoped dependencies`, includes vulnerabilities relating to resource management, programming and logic, and information disclosure issues. For more information, see "[Publicly disclosed CWEs used by the `Dismiss low impact issues for development-scoped dependencies` rule](#publicly-disclosed-cwes-used-by-the-dismiss-low-impact-issues-for-development-scoped-dependencies-rule)." +The `Dismiss low impact issues for development-scoped dependencies` rule includes vulnerabilities relating to resource management, programming and logic, and information disclosure issues. For more information, see "[Publicly disclosed CWEs used by the `Dismiss low impact issues for development-scoped dependencies` rule](#publicly-disclosed-cwes-used-by-the-dismiss-low-impact-issues-for-development-scoped-dependencies-rule)." Filtering out these low impact alerts allows you to focus on alerts that matter to you, without having to worry about missing potentially high-risk development-scoped alerts. -The {% data variables.product.company_short %}-curated default rule, `Dismiss low impact issues for development-scoped dependencies`, is enabled by default on public repositories and disabled for private repositories. Administrators of private repositories can opt in by enabling the rule for their repository. +The `Dismiss low impact issues for development-scoped dependencies` rule is enabled by default on public repositories and disabled for private repositories. Administrators of private repositories can opt in by enabling the rule for their repository. ## Enabling the `Dismiss low impact issues for development-scoped dependencies` rule for your private repository diff --git a/data/reusables/dependabot/dependabot-default-auto-triage-rules.md b/data/reusables/dependabot/dependabot-default-auto-triage-rules.md deleted file mode 100644 index 353ef19f7e..0000000000 --- a/data/reusables/dependabot/dependabot-default-auto-triage-rules.md +++ /dev/null @@ -1 +0,0 @@ -{% data variables.dependabot.default_rules%} for {% data variables.product.prodname_dependabot_alerts %} are available for all repositories. diff --git a/data/reusables/dependabot/dependabot-github-preset-auto-triage-rules.md b/data/reusables/dependabot/dependabot-github-preset-auto-triage-rules.md new file mode 100644 index 0000000000..7627e36d84 --- /dev/null +++ b/data/reusables/dependabot/dependabot-github-preset-auto-triage-rules.md @@ -0,0 +1 @@ +{% data variables.dependabot.github_presets %} for {% data variables.product.prodname_dependabot_alerts %} are rules that are available for all repositories. diff --git a/data/reusables/dependabot/dismiss-low-impact-rule.md b/data/reusables/dependabot/dismiss-low-impact-rule.md index 87d8a039b0..0d5b682192 100644 --- a/data/reusables/dependabot/dismiss-low-impact-rule.md +++ b/data/reusables/dependabot/dismiss-low-impact-rule.md @@ -1 +1 @@ -The {% data variables.product.company_short %}-curated default rule, `Dismiss low impact issues for development-scoped dependencies`, auto-dismisses certain types of vulnerabilities that are found in npm dependencies used in development. The rule has been curated to reduce false positives and reduce alert fatigue. The rule is enabled by default for public repositories and can be opted into for private repositories. However, you cannot modify {% data variables.dependabot.default_rules %}. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-auto-triage-rules/using-github-curated-default-rules-to-prioritize-dependabot-alerts)." +The `Dismiss low impact issues for development-scoped dependencies` is a {% data variables.product.company_short %} preset rule. This rule auto-dismisses certain types of vulnerabilities that are found in npm dependencies used in development. The rule has been curated to reduce false positives and reduce alert fatigue. The rule is enabled by default for public repositories and can be opted into for private repositories. However, you cannot modify {% data variables.dependabot.github_presets %}. For more information, see "[AUTOTITLE](/code-security/dependabot/dependabot-auto-triage-rules/using-github-preset-rules-to-prioritize-dependabot-alerts)." diff --git a/data/variables/dependabot.yml b/data/variables/dependabot.yml index 4847ef6f92..a18ff6bb2b 100644 --- a/data/variables/dependabot.yml +++ b/data/variables/dependabot.yml @@ -2,6 +2,6 @@ auto_triage_rules: 'Dependabot auto-triage rules' auto_triage_rules_short: 'auto-triage rules' -default_rules: 'GitHub-curated default rules' +github_presets: 'GitHub presets' custom_rules_caps: 'Custom auto-triage rules' custom_rules: 'custom auto-triage rules'