JonZeolla
1434aec1a9
Fix github.actor examples ( #19267 )
2022-07-28 09:30:19 +00:00
mc
2b15269a3d
[Ready to ship] Configuring the dependency review action on GHES ( #29064 )
2022-07-27 15:27:27 +00:00
Andy Barnes
441cfc54cf
Add pull-requests: write to permissions: block ( #29350 )
2022-07-27 08:09:51 +00:00
Sarah Edwards
012525e673
Document triggering_actor ( #28988 )
2022-07-26 22:54:58 +00:00
Mariam
8aa0adbe63
Secret scanning: Make pair matches visible in docs ( #29324 )
2022-07-26 19:16:54 +00:00
Sophie
3df2d7b47a
[2022-07-27]: Secret scanning: Email on bypass - [GA] ( #29233 )
2022-07-26 19:11:46 +00:00
Matt Pollard
dc2ba532b4
GitHub Enterprise Server 3.6 release candidate ( #28905 )
2022-07-26 18:56:17 +02:00
Benjamin Friedman Wilson
1268fee5fc
small typo fix for mispelled 'updating'
2022-07-26 09:44:40 +02:00
mc
8fcb5ad8c1
Fix mention of public repos in GHAE ( #29328 )
...
* fix mention of public in GHAE
* Update content/code-security/supply-chain-security/end-to-end-supply-chain/securing-code.md
Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com >
Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com >
2022-07-25 12:24:37 +00:00
Eli Reisman
0bc93e8437
Update Rust/Cargo Dependency Graph documentation ( #28976 )
2022-07-21 20:21:40 +02:00
Felicity Chapman
73b085ef8e
Secret scanning: fix typo in condition ( #29203 )
2022-07-21 10:27:19 +00:00
Felicity Chapman
40989e0ca6
"Security center" rename to "Security overview" ( #29120 )
2022-07-18 16:40:33 +00:00
Sarita Iyer
15c09dc0b2
Merge branch 'main' into dependabot-alerts-most-important-sort
2022-07-15 13:37:13 -04:00
Steve Guntrip
74d6918dae
Add GHAS resources
2022-07-15 13:57:26 +00:00
Jurre
d738183157
Dependabot: explain how to allow rebases over appended commits ( #29026 )
...
* Depedabot: explain how to allow rebases over appended commits
By default Dependabot stops rebasing PRs that have been altered, in some cases (especially when setting up automations that add commits to PRs automatically), this is not desirable, and it's preferable for Dependabot to force push over those commits, removing them and having the automation re-generate them.
This is a feature that's been present in Dependabot for a while already, but has not been documented, so let's document it.
* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md
* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md
Co-authored-by: Jurre <jurre@github.com >
* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2022-07-14 14:04:12 +00:00
Sarita Iyer
ecea5682be
replace tip with note
2022-07-13 09:26:34 -04:00
Sarita Iyer
3c4200f16f
add variable
2022-07-12 17:30:38 -04:00
Sarita Iyer
f6776685c7
add info + screenshot about most important sort
2022-07-12 17:15:07 -04:00
Hector Alfaro
95e6f3d3ab
Deprecate GHES 3.1 ( #28798 )
...
* add 3.1 to deprecated versions
* rewrite img src to use azure blob storage in archive script
Co-authored-by: rachmari <rachmari@users.noreply.github.com >
* remove static files for ghes 3.1
* remove liquid conditionals and content for ghes 3.1
* remove outdated hardware reqs reusable
* Fix liquid conditional uncaught by script
* Close liquid conditionals missed by script
* Apply @mattpollard's suggestions
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com >
Co-authored-by: rachmari <rachmari@users.noreply.github.com >
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com >
2022-07-11 21:17:09 +00:00
Grey Baker
64266fc64e
Clarify when users receive secret scanning alert notifications ( #28822 )
...
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com >
2022-07-11 14:11:31 +00:00
Felicity Chapman
e67f797a19
Merge branch 'main' into adityasharad/codeql-ghes-version
2022-07-11 13:46:41 +01:00
Felicity Chapman
11c6980515
Add GHAE versioning too
2022-07-01 11:59:59 +01:00
mc
d328effc2b
[Already shipped] -Dependabot alerts: surface information about development dependencies - [GA] ( #28615 )
...
* made a start
* hmm hmm
* more work
* Optimize images
* improvements
* make table easier to read
* Apply suggestions from code review
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com >
* address review comments
Co-authored-by: github-actions <github-actions@github.com >
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com >
2022-06-30 07:53:12 +00:00
Janice
469e698b6a
Merge branch 'main' into patch-2
2022-06-28 19:02:38 +02:00
Kate Catlin
1e48a5756d
Adding Erlang as a supported language ( #28754 )
2022-06-28 15:44:47 +00:00
Matt Pollard
19dea423f0
Read from allVersions
2022-06-28 08:32:24 +02:00
Aditya Sharad
acaef98bb1
Update content/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql.md
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-06-27 12:46:32 -07:00
Andrew Eisenberg
8f60f05f96
Update code scanning configuration with how to run packs with paths ( #28535 )
...
Co-authored-by: Sarah Edwards <skedwards88@github.com >
2022-06-27 19:10:29 +00:00
Holmes-EH
ad478def75
Fix a typo in end of page link text
...
Change text from "updatng" to "updating"
2022-06-26 15:28:21 +02:00
Aditya Sharad
937910b32e
Code Scanning: Reference the CodeQL action by name, not URL
...
Notes do not render Markdown links.
2022-06-22 22:25:00 +00:00
Aditya Sharad
c4ff2d0579
Code Scanning: Remove unnecessary endif
2022-06-22 22:06:14 +00:00
Aditya Sharad
a82515877e
Code Scanning: State the recommended CodeQL version for GHES in the about page
2022-06-22 21:51:22 +00:00
Aditya Sharad
8154eb2f31
Code Scanning: Specify the recommended CodeQL version for each GHES version
...
Create new variables for the GHES version, and the CodeQL CLI version
recommended along with each GHES version.
Refactor the docs on installing the CodeQL CLI in a third-party CI system,
to use the CodeQL and GHES version from the variables.
These variables will need to be kept up to date with future GHES+CodeQL versions.
2022-06-22 21:36:11 +00:00
Felicity Chapman
1d2030a10a
Update information on support by Dependabot version updates for Pub as it moves from beta to GA ( #28047 )
2022-06-21 13:15:35 -07:00
Sarita Iyer
15a3beed99
Merge branch 'main' into dep-submission-api-dependency-graph-updates
2022-06-17 12:05:08 -04:00
Sarita Iyer
bbf856c92a
Merge branch 'main' into ske-dep-api
2022-06-17 11:50:10 -04:00
Felicity Chapman
ea601b7e31
Tidy up some outdated links and language: "vulnerable dependencies" ( #28474 )
2022-06-17 11:59:36 +00:00
Felicity Chapman
06e0979e34
[2022-06-15]: Advisory Database Supports Malware Advisories (beta) ( #28367 )
2022-06-17 12:51:16 +01:00
Felicity Chapman
044285a2c1
[2022-06-16]: Secret scanning dry runs on custom pattern edits - [Public Beta] ( #28390 )
2022-06-16 21:23:26 +00:00
Sarita Iyer
b672b23df1
Merge branch 'main' into ske-dep-api
2022-06-16 15:40:07 -04:00
Sarita Iyer
32435e8b41
Update content/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api.md
...
Co-authored-by: Courtney Claessens <courtneycl@github.com >
2022-06-16 12:23:01 -04:00
Sarita Iyer
bfaa086a74
add info on dependabot alerts
2022-06-16 11:13:44 -04:00
Sarita Iyer
2cac98958c
Apply suggestions from code review
...
Co-authored-by: Courtney Claessens <courtneycl@github.com >
2022-06-16 09:06:36 -04:00
Sarita Iyer
c09b4c04aa
Apply suggestions from code review
...
Co-authored-by: Felicity Chapman <felicitymay@github.com >
2022-06-16 08:19:01 -04:00
mc
6d8d4d09f6
Fix tiny typo in one of the Security Overview articles ( #28559 )
...
fix typo
2022-06-16 11:37:16 +00:00
Sarita Iyer
7f50290100
made language clearer + added missed mention of api
2022-06-15 18:31:16 -04:00
Sarita Iyer
054d6f1382
added feature flag + updated supply chain doc
2022-06-15 18:07:46 -04:00
Sarita Iyer
2655a97152
quick updates
2022-06-15 17:48:05 -04:00
Sarita Iyer
93093c077a
updated dependency graph articles for dep submission API beta
2022-06-15 17:44:07 -04:00
Sarita Iyer
57b1eb7148
updating language around API submissions
2022-06-15 15:57:18 -04:00