1
0
mirror of synced 2025-12-21 10:57:10 -05:00
Commit Graph

2606 Commits

Author SHA1 Message Date
JonZeolla
1434aec1a9 Fix github.actor examples (#19267) 2022-07-28 09:30:19 +00:00
mc
2b15269a3d [Ready to ship] Configuring the dependency review action on GHES (#29064) 2022-07-27 15:27:27 +00:00
Andy Barnes
441cfc54cf Add pull-requests: write to permissions: block (#29350) 2022-07-27 08:09:51 +00:00
Sarah Edwards
012525e673 Document triggering_actor (#28988) 2022-07-26 22:54:58 +00:00
Mariam
8aa0adbe63 Secret scanning: Make pair matches visible in docs (#29324) 2022-07-26 19:16:54 +00:00
Sophie
3df2d7b47a [2022-07-27]: Secret scanning: Email on bypass - [GA] (#29233) 2022-07-26 19:11:46 +00:00
Matt Pollard
dc2ba532b4 GitHub Enterprise Server 3.6 release candidate (#28905) 2022-07-26 18:56:17 +02:00
Benjamin Friedman Wilson
1268fee5fc small typo fix for mispelled 'updating' 2022-07-26 09:44:40 +02:00
mc
8fcb5ad8c1 Fix mention of public repos in GHAE (#29328)
* fix mention of public in GHAE

* Update content/code-security/supply-chain-security/end-to-end-supply-chain/securing-code.md

Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>

Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>
2022-07-25 12:24:37 +00:00
Eli Reisman
0bc93e8437 Update Rust/Cargo Dependency Graph documentation (#28976) 2022-07-21 20:21:40 +02:00
Felicity Chapman
73b085ef8e Secret scanning: fix typo in condition (#29203) 2022-07-21 10:27:19 +00:00
Felicity Chapman
40989e0ca6 "Security center" rename to "Security overview" (#29120) 2022-07-18 16:40:33 +00:00
Sarita Iyer
15c09dc0b2 Merge branch 'main' into dependabot-alerts-most-important-sort 2022-07-15 13:37:13 -04:00
Steve Guntrip
74d6918dae Add GHAS resources 2022-07-15 13:57:26 +00:00
Jurre
d738183157 Dependabot: explain how to allow rebases over appended commits (#29026)
* Depedabot: explain how to allow rebases over appended commits

By default Dependabot stops rebasing PRs that have been altered, in some cases (especially when setting up automations that add commits to PRs automatically), this is not desirable, and it's preferable for Dependabot to force push over those commits, removing them and having the automation re-generate them.

This is a feature that's been present in Dependabot for a while already, but has not been documented, so let's document it.

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: Jurre <jurre@github.com>

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-07-14 14:04:12 +00:00
Sarita Iyer
ecea5682be replace tip with note 2022-07-13 09:26:34 -04:00
Sarita Iyer
3c4200f16f add variable 2022-07-12 17:30:38 -04:00
Sarita Iyer
f6776685c7 add info + screenshot about most important sort 2022-07-12 17:15:07 -04:00
Hector Alfaro
95e6f3d3ab Deprecate GHES 3.1 (#28798)
* add 3.1 to deprecated versions

* rewrite img src to use azure blob storage in archive script

Co-authored-by: rachmari <rachmari@users.noreply.github.com>

* remove static files for ghes 3.1

* remove liquid conditionals and content for ghes 3.1

* remove outdated hardware reqs reusable

* Fix liquid conditional uncaught by script

* Close liquid conditionals missed by script

* Apply @mattpollard's suggestions

Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>

Co-authored-by: rachmari <rachmari@users.noreply.github.com>
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
2022-07-11 21:17:09 +00:00
Grey Baker
64266fc64e Clarify when users receive secret scanning alert notifications (#28822)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-07-11 14:11:31 +00:00
Felicity Chapman
e67f797a19 Merge branch 'main' into adityasharad/codeql-ghes-version 2022-07-11 13:46:41 +01:00
Felicity Chapman
11c6980515 Add GHAE versioning too 2022-07-01 11:59:59 +01:00
mc
d328effc2b [Already shipped] -Dependabot alerts: surface information about development dependencies - [GA] (#28615)
* made a start

* hmm hmm

* more work

* Optimize images

* improvements

* make table easier to read

* Apply suggestions from code review

Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>

* address review comments

Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
2022-06-30 07:53:12 +00:00
Janice
469e698b6a Merge branch 'main' into patch-2 2022-06-28 19:02:38 +02:00
Kate Catlin
1e48a5756d Adding Erlang as a supported language (#28754) 2022-06-28 15:44:47 +00:00
Matt Pollard
19dea423f0 Read from allVersions 2022-06-28 08:32:24 +02:00
Aditya Sharad
acaef98bb1 Update content/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/about-code-scanning-with-codeql.md
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-06-27 12:46:32 -07:00
Andrew Eisenberg
8f60f05f96 Update code scanning configuration with how to run packs with paths (#28535)
Co-authored-by: Sarah Edwards <skedwards88@github.com>
2022-06-27 19:10:29 +00:00
Holmes-EH
ad478def75 Fix a typo in end of page link text
Change text from "updatng" to "updating"
2022-06-26 15:28:21 +02:00
Aditya Sharad
937910b32e Code Scanning: Reference the CodeQL action by name, not URL
Notes do not render Markdown links.
2022-06-22 22:25:00 +00:00
Aditya Sharad
c4ff2d0579 Code Scanning: Remove unnecessary endif 2022-06-22 22:06:14 +00:00
Aditya Sharad
a82515877e Code Scanning: State the recommended CodeQL version for GHES in the about page 2022-06-22 21:51:22 +00:00
Aditya Sharad
8154eb2f31 Code Scanning: Specify the recommended CodeQL version for each GHES version
Create new variables for the GHES version, and the CodeQL CLI version
recommended along with each GHES version.

Refactor the docs on installing the CodeQL CLI in a third-party CI system,
to use the CodeQL and GHES version from the variables.

These variables will need to be kept up to date with future GHES+CodeQL versions.
2022-06-22 21:36:11 +00:00
Felicity Chapman
1d2030a10a Update information on support by Dependabot version updates for Pub as it moves from beta to GA (#28047) 2022-06-21 13:15:35 -07:00
Sarita Iyer
15a3beed99 Merge branch 'main' into dep-submission-api-dependency-graph-updates 2022-06-17 12:05:08 -04:00
Sarita Iyer
bbf856c92a Merge branch 'main' into ske-dep-api 2022-06-17 11:50:10 -04:00
Felicity Chapman
ea601b7e31 Tidy up some outdated links and language: "vulnerable dependencies" (#28474) 2022-06-17 11:59:36 +00:00
Felicity Chapman
06e0979e34 [2022-06-15]: Advisory Database Supports Malware Advisories (beta) (#28367) 2022-06-17 12:51:16 +01:00
Felicity Chapman
044285a2c1 [2022-06-16]: Secret scanning dry runs on custom pattern edits - [Public Beta] (#28390) 2022-06-16 21:23:26 +00:00
Sarita Iyer
b672b23df1 Merge branch 'main' into ske-dep-api 2022-06-16 15:40:07 -04:00
Sarita Iyer
32435e8b41 Update content/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api.md
Co-authored-by: Courtney Claessens <courtneycl@github.com>
2022-06-16 12:23:01 -04:00
Sarita Iyer
bfaa086a74 add info on dependabot alerts 2022-06-16 11:13:44 -04:00
Sarita Iyer
2cac98958c Apply suggestions from code review
Co-authored-by: Courtney Claessens <courtneycl@github.com>
2022-06-16 09:06:36 -04:00
Sarita Iyer
c09b4c04aa Apply suggestions from code review
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-06-16 08:19:01 -04:00
mc
6d8d4d09f6 Fix tiny typo in one of the Security Overview articles (#28559)
fix typo
2022-06-16 11:37:16 +00:00
Sarita Iyer
7f50290100 made language clearer + added missed mention of api 2022-06-15 18:31:16 -04:00
Sarita Iyer
054d6f1382 added feature flag + updated supply chain doc 2022-06-15 18:07:46 -04:00
Sarita Iyer
2655a97152 quick updates 2022-06-15 17:48:05 -04:00
Sarita Iyer
93093c077a updated dependency graph articles for dep submission API beta 2022-06-15 17:44:07 -04:00
Sarita Iyer
57b1eb7148 updating language around API submissions 2022-06-15 15:57:18 -04:00