diff --git a/assets/images/help/repository/security-and-analysis-disable-or-enable-fpt-private.png b/assets/images/help/repository/security-and-analysis-disable-or-enable-fpt-private.png index faf253379f..6df7098c7d 100644 Binary files a/assets/images/help/repository/security-and-analysis-disable-or-enable-fpt-private.png and b/assets/images/help/repository/security-and-analysis-disable-or-enable-fpt-private.png differ diff --git a/content/get-started/privacy-on-github/about-githubs-use-of-your-data.md b/content/get-started/privacy-on-github/about-githubs-use-of-your-data.md index fc87f2d848..8fc907b365 100644 --- a/content/get-started/privacy-on-github/about-githubs-use-of-your-data.md +++ b/content/get-started/privacy-on-github/about-githubs-use-of-your-data.md @@ -16,14 +16,14 @@ shortTitle: GitHub's use of your data ## About {% data variables.product.product_name %}'s use of your data -{% data variables.product.product_name %} aggregates metadata and parses content patterns for the purposes of delivering generalized insights within the product. It uses data from public repositories, and also uses metadata and aggregate data from private repositories when a repository's owner has chosen to share the data with {% data variables.product.product_name %} through an opt-in. If you opt a private repository into data use, then it will perform read-only analysis of that specific private repository. +{% data variables.product.product_name %} aggregates metadata and parses content patterns for the purposes of delivering generalized insights within the product. It uses data from public repositories, and also uses metadata and aggregate data from private repositories when a repository's owner has chosen to share the data with {% data variables.product.product_name %} by enabling the dependency graph. If you enable the dependency graph for a private repository, then {% data variables.product.product_name %} will perform read-only analysis of that specific private repository. + +If you enable data use for a private repository, we will continue to treat your private data, source code, or trade secrets as confidential and private consistent with our [Terms of Service](/free-pro-team@latest/github/site-policy/github-terms-of-service). The information we learn only comes from aggregated data. For more information, see "[Managing data use settings for your private repository](/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository)." {% data reusables.repositories.about-github-archive-program %} For more information, see "[About archiving content and data on {% data variables.product.prodname_dotcom %}](/github/creating-cloning-and-archiving-repositories/about-archiving-content-and-data-on-github#about-the-github-archive-program)." {% data reusables.user-settings.export-data %} For more information, see "[Requesting an archive of your personal account's data](/articles/requesting-an-archive-of-your-personal-account-s-data)." -If you opt in to data use for a private repository, we will continue to treat your private data, source code, or trade secrets as confidential and private consistent with our [Terms of Service](/free-pro-team@latest/github/site-policy/github-terms-of-service). The information we learn only comes from aggregated data. For more information, see "[Managing data use settings for your private repository](/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository)." - We'll announce substantial new features that use metadata or aggregate data on the [{% data variables.product.prodname_dotcom %} blog](https://github.com/blog). ## How data improves security recommendations diff --git a/content/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository.md b/content/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository.md index d7b42f45ee..a20b29acf5 100644 --- a/content/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository.md +++ b/content/get-started/privacy-on-github/managing-data-use-settings-for-your-private-repository.md @@ -16,9 +16,22 @@ shortTitle: Manage data use for private repo ## About data use for your private repository + +You can control data use for your private repository with the security and analysis features. + +- Enable the dependency graph to allow read-only data analysis on your repository. +- Disable the dependency graph to block read-only data analysis of your repository. + When you enable data use for your private repository, you'll be able to access the dependency graph, where you can track your repository's dependencies and receive {% data variables.product.prodname_dependabot_alerts %} when {% data variables.product.product_name %} detects vulnerable dependencies. For more information, see "[About {% data variables.product.prodname_dependabot_alerts %}](/github/managing-security-vulnerabilities/about-alerts-for-vulnerable-dependencies#dependabot-alerts-for-vulnerable-dependencies)." -## Enabling or disabling data use features + +{% note %} + +**Note:** If you disable the dependency graph, {% data variables.product.prodname_dependabot_alerts %} and {% data variables.product.prodname_dependabot_security_updates %} are also disabled. For more information, see "[About the dependency graph](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph)." + +{% endnote %} + +## Enabling or disabling data use through security and analysis features {% data reusables.security.security-and-analysis-features-enable-read-only %}