From 0bc93e8437b91cdde900edc6e1132de8d74b3060 Mon Sep 17 00:00:00 2001
From: Eli Reisman <32776521+elireisman@users.noreply.github.com>
Date: Thu, 21 Jul 2022 11:21:40 -0700
Subject: [PATCH] Update Rust/Cargo Dependency Graph documentation (#28976)
---
.../about-the-dependency-graph.md | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph.md b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph.md
index ed9358a0c2..7d3517de96 100644
--- a/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph.md
+++ b/content/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph.md
@@ -70,7 +70,7 @@ The recommended formats explicitly define which versions are used for all direct
| Package manager | Languages | Recommended formats | All supported formats |
| --- | --- | --- | ---|
{%- ifversion dependency-graph-rust-support %}
-| Cargo[*] | Rust | `Cargo.lock` | `Cargo.toml`, `Cargo.lock` |
+| Cargo{% ifversion ghes = 3.6 or ghae-issue-7563 %}[*]{% endif %} | Rust | `Cargo.lock` | `Cargo.toml`, `Cargo.lock` |
{%- endif %}
| Composer | PHP | `composer.lock` | `composer.json`, `composer.lock` |
| NuGet | .NET languages (C#, F#, VB), C++ | `.csproj`, `.vbproj`, `.nuspec`, `.vcxproj`, `.fsproj` | `.csproj`, `.vbproj`, `.nuspec`, `.vcxproj`, `.fsproj`, `packages.config` |
@@ -91,7 +91,7 @@ The recommended formats explicitly define which versions are used for all direct
| RubyGems | Ruby | `Gemfile.lock` | `Gemfile.lock`, `Gemfile`, `*.gemspec` |
| Yarn | JavaScript | `yarn.lock` | `package.json`, `yarn.lock` |
-{% ifversion dependency-graph-rust-support %}
+{% ifversion ghes = 3.6 or ghae-issue-7563 %}
[*] For the initial release of Rust support, dependency graph does not have the metadata and mappings required to detect transitive dependencies. Dependency graph displays transitive dependencies, one level deep, when they are defined in a `Cargo.lock` file. {% data variables.product.prodname_dependabot_alerts %} and {% data variables.product.prodname_dependabot_security_updates %} are available for vulnerable dependencies defined in the `Cargo.lock` file.
{% endif %}