1
0
mirror of synced 2025-12-20 10:28:40 -05:00
Commit Graph

2606 Commits

Author SHA1 Message Date
Nick Liffen
c558b34f7a Update setting-up-code-scanning-for-a-repository.md 2021-08-30 10:36:42 +01:00
mc
8106009dc0 [GHES 3.2]: Versioning updates for code scanning - multiple SARIF file upload for 3rd party CI/CD (#21025)
* implemented versioning updates
2021-08-26 08:56:08 +01:00
mc
1105d70bdb [GHES 3.2] - Security Overview (versioning updates + improvements) (#20990)
* made required updates
2021-08-26 08:46:59 +01:00
Barry Gordon
5288bd7193 Clarify that Dependabot does not support Maven as token-only (#9098) 2021-08-24 13:53:38 +00:00
AlonaHlobina
80702d0eb0 Update sarif-support-for-code-scanning.md (#20987) 2021-08-24 08:40:49 +00:00
AlonaHlobina
fc3a1b00cf Update troubleshooting-the-codeql-workflow.md (#20836) 2021-08-23 18:02:45 +01:00
Felicity Chapman
466ebaf670 Pull request filter on code scanning alerts page (#20945) 2021-08-23 17:06:49 +01:00
Rachael Sewell
7398c30364 remove 2.21 markup (#20954) 2021-08-19 18:18:00 +00:00
Felicity Chapman
bea8d8d5cb Rename code security directories to match features (#20726) 2021-08-16 09:14:25 +00:00
Lucas Costi
d84994632d GHES 3.2 broken link fixes (#20696) 2021-08-06 01:28:11 +00:00
Chris Wilson ☠️
5b4331468c Add contact link tags (#20308) 2021-08-03 22:23:08 +00:00
Sarita Iyer
6bdba1c9e5 Update content/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/upgrading-from-dependabotcom-to-github-native-dependabot.md 2021-08-03 17:18:55 -04:00
Sarita Iyer
efa186a2e2 Update content/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/upgrading-from-dependabotcom-to-github-native-dependabot.md 2021-08-03 17:18:43 -04:00
Mike McDonald
2c53b8a1fb Updating Dependabot Preview Smigration docs 2021-08-03 11:14:07 -06:00
Mike McDonald
df85a1e207 Clarifying dependabot's npm registry password requirements (#20611) 2021-08-02 21:03:49 +00:00
Felicity Chapman
9b656a2328 [July 27/28] Update code scanning docs for CodeQL query packs (part of CodeQL Package Manager) (#20417) 2021-07-27 19:17:43 +01:00
Ramya Parimi
1bb592bc8f Merge branch 'main' into patch-2 2021-07-27 08:35:53 -05:00
Laura Coursen
c6e716bd33 Mention that alerts are filtered to default branch (#20434) 2021-07-26 09:29:54 +00:00
Diego Assencio
8b6dfb0a00 Fix incorrect wording (#20416)
Co-authored-by: Meg Bird <megbird@github.com>
2021-07-25 21:27:02 -07:00
Steve Guntrip
3db2e89fcc [June 28th] Dependency Graph: Support for detecting Go modules (#19956) 2021-07-22 16:05:21 +00:00
hubwriter
2d99aee37a Use plural variables consistently (#20412)
* Use plural variables consistently

* Update content/developers/github-marketplace/github-marketplace-overview/about-github-marketplace.md
2021-07-20 16:09:40 +00:00
Sarah Edwards
b4207811f4 [19-20 July]: Code scanning: Display security severity levels for alerts (GA) (#20355)
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2021-07-19 17:21:21 +00:00
Clif Reeder
327b954f9b Fix type in allow section 2021-07-16 16:53:24 -05:00
Felix Böhm
37b2dc7444 Fix typo in permission name (#8132) 2021-07-13 18:49:32 +00:00
Ethan Palm
87acc1a35c Merge branch 'main' into patch-2 2021-07-13 10:56:44 -04:00
Felicity Chapman
f520e9f889 Add new article to guides + add shortTitle (#20271) 2021-07-13 08:00:54 +00:00
Robert
4d813f4bf8 Add code scanning troubleshooting item for failures on dependabot branches (#19888)
* Add troubleshooting item

* Apply suggestions from code review

* Apply suggestions from code review

* Apply suggestions from code review

* Update content/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/troubleshooting-the-codeql-workflow.md

Co-authored-by: Robert <robertbrignull@github.com>

* Update troubleshooting-the-codeql-workflow.md

* Apply suggestions from code review

* editorial review

* small edits to auto-merge sentence

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2021-07-02 10:47:26 +01:00
QWp6t
ae50a3e4e8 fix(about-dependabot-security-updates): typo 2021-07-01 11:18:38 -07:00
Mike McDonald
9ea839afd5 Add article 'Automating Dependabot with GitHub Actions' (#19707)
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Lucas Costi <lucascosti@users.noreply.github.com>
2021-07-01 06:15:54 +00:00
Felicity Chapman
6afb4b983d Make shortTitles consistent for code security docs set (#20139) 2021-06-28 15:12:27 +00:00
Rachael Sewell
52cf583bdd add short titles to frontmatter (#20131) 2021-06-24 11:02:53 -07:00
Scott Jungling
01e3d0f8a1 docs: properly quote wildcard character for dependency-name (#7635) 2021-06-24 16:41:30 +00:00
Sarah Schneider
cb12455649 ran script/content-migrations/use-short-versions.js 2021-06-24 10:21:07 -04:00
bl-ue
4d72548832 Merge branch 'main' into fix-typos 2021-06-23 13:43:59 -04:00
bl-ue
e907960b0b Fix typos 2021-06-23 13:41:24 -04:00
mc
30127f0fb4 [Ready to ship] Code scanning - diagnostic information (GA) (#19653)
* made a start

* more work

* made improvements

* finish work on article

* fix broken links

* really fix broken link + remove empty line

* add space

* remove full stops in table

* start addressing comments

* Update content/code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/viewing-code-scanning-logs.md

Co-authored-by: Felicity Chapman <felicitymay@github.com>

* address more comments

* and more

* rework!

* small fixes

* add missing endif tag

* start addressing comments

* Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>

* make docs more evergreen

* Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>

* For some reason the H2 headings don't stick

Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
2021-06-23 09:55:07 +01:00
Felicity Chapman
dd14aba071 [June 21] CodeQL CLI: integrated support for running CodeQL code scanning analysis on 3rd party CI systems (#19892) 2021-06-22 17:15:22 +00:00
Jurre
85d37a2fe3 Dependabot: add note about IP allowlist (#19958)
* Dependabot: add note about IP allowlist

We sometimes get questions from customers using private registries about adding dependabot to their ip-allowlist. We expose the IP addresses that dependabot makes updates from in our API, this explains that

* Apply suggestions from code review

* Apply suggestions from code review

* Update content/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/managing-encrypted-secrets-for-dependabot.md

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2021-06-17 09:57:51 +01:00
Mike McDonald
74c46de7ce [June 16th] Dependabot no longer runs at 5AM UTC by default (#19841)
* Updating docs to no longer reference 5AM UTC default

* Update content/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates.md

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Melanie Yarbrough <11952755+myarb@users.noreply.github.com>
2021-06-16 15:26:57 -04:00
Grace Park
6f7e4f50dc updating content files 2021-06-14 12:06:52 -07:00
mc
581a817540 version for GHES 3.2, instead of 3.3 (#19835) 2021-06-11 17:24:01 +01:00
Felicity Chapman
23b0b84111 Add Code security landing and guides pages (#19650) 2021-06-10 20:14:56 +00:00
Lucas Costi
2aa569b1e0 Rename dev secret scanning article (#19736) 2021-06-08 01:59:55 +00:00
Mészáros Mátyás
73ba580a9b Merge branch 'main' into patch-1 2021-06-06 18:50:22 +02:00
Lucas Costi
31579808f6 Add docs for secret scanning user defined patterns beta (#19589)
* New secret scanning article part 1

* Add other procedures and links

* Apply suggestions from code review

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>

* UI variable suggestions

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>

* Clarify org setting and beta note

* Fix GHES version

* Apply suggestions from @greysteil's code review

Co-authored-by: Grey Baker <greysteil@github.com>

* Remove beta view restriction

* Add section on regex syntax

Co-authored-by: Grey Baker <greysteil@github.com>

* Regex support edit

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: Grey Baker <greysteil@github.com>
Co-authored-by: Amy Burns <timeyoutakeit@github.com>
2021-06-04 17:24:11 +00:00
Mészáros Mátyás
2236b5775b remove duplicate entries
Delete duplicate entries from the sidebar menu
2021-06-04 09:28:04 +02:00
Grace Park
22fcd56639 Merge branch 'main' into grace-change-headers 2021-06-03 20:11:55 -07:00
Lucas Costi
3d302aba24 Fix article headings before running H3->H2 script (#19663)
* Fix 'How does upgrading or downgrading affect the billing process?'

* Fix 'About Git Large File StorageAbout Git Large File Storage'

* Fix 'What happens to forks when a repository is deleted or changes visibility?'

* Fix 'Audited actions'

* Fix 'About managing vulnerable dependencies'

* Fix 'GitHub Connect Addendum to the GitHub Enterprise License Agreement'

* Fix 'GitHub Government Takedown Policy'

* Fix 'GitHub Username Policy'

* Fix 'Using the Explorer'

* Fix 'Resource limitations'
2021-06-04 10:55:43 +10:00
Mike McDonald
515107fcaf Adding @dependabot command docs (#19678)
* Adding @dependabot command docs

* cleaned up wording

* Apply suggestions from code review

* alphabetical order + follow content model

* simplify and add link to anchor

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2021-06-03 10:13:30 +00:00
Sarita Iyer
d7cf102dfe fixing error 2021-06-02 16:38:42 -04:00