1
0
mirror of synced 2025-12-22 03:16:52 -05:00
Commit Graph

2641 Commits

Author SHA1 Message Date
Sophie
cc9098cfe1 Merge branch 'main' into patch-2 2022-08-26 10:02:41 +02:00
Hana Harencarova
d6a8a7da76 swap string for a variable
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>
2022-08-25 14:16:07 +02:00
Steve Guntrip
501b973459 Secret scanning: Admins can add a custom link for push protection [Public Beta] (#30181) 2022-08-24 16:18:46 +00:00
Isaac Brown
c1eaa6037a Clarify that CodeQL CLI can't be used with musl-based distributions (#30178)
* Create reusable

* Add reusable to articles

* Incorporate hubwriter feedback
2022-08-24 15:55:12 +01:00
Jeff Widman
bf439a5f86 Tweak wording based on customer feedback
Incorporate the feedback from https://github.com/dependabot/dependabot-core/issues/3341 to clarify the wording.
2022-08-23 11:50:48 -07:00
Sophie
c06b753829 Merge branch 'main' into de-oz-patch 2022-08-23 10:21:26 +02:00
mc
aab19aebb0 [2022-08-22 - ready to ship]: Dependabot alerts: optional comment with dismissal - [GA] (#29524) 2022-08-22 17:24:35 +00:00
Hana Harencarova
0d90f84879 Merge branch 'main' into hharen/code-scanning-consistent-file-paths-7017 2022-08-22 16:42:31 +02:00
Hana Harencarova
1b288ceadb Improve wording about fingerprints 2022-08-22 16:07:03 +02:00
Hana Harencarova
774598c1a9 Improve wording 2022-08-22 15:49:01 +02:00
Hana Harencarova
88aa138851 Remove comments 2022-08-22 15:45:55 +02:00
Hana Harencarova
59652e9298 Improve wording about fingerprints 2022-08-22 15:34:36 +02:00
mc
3c6fd404c3 Add a table listing the filters, sort options and labels available for Dependabot alerts (#29466)
* made a start

* more work

* Apply suggestions from code review

Co-authored-by: Felicity Chapman <felicitymay@github.com>

* address last comments

* adjust versioning

* ooops

* hmmm

Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-08-22 09:32:36 +01:00
de-oz
96a4779ce1 Fix indefinite articles usage 2022-08-20 10:03:23 +03:00
Junior Eluhu
b8f02ff172 adding release notes (#29927) 2022-08-16 19:03:29 +00:00
mc
b9e40e8c1f Code scanning - fix screenshot display and numbered list (#29987)
* remove screenshot

* re-add screenshot

* having fun with list

* re-add image under a different name and rename in links

* Optimize images

Co-authored-by: github-actions <github-actions@github.com>
2022-08-16 13:20:41 +00:00
mc
96af28d597 Add docs to help users remediate blocked secrets (#29720)
* document how to remediate secrets
2022-08-16 08:27:55 +00:00
Matt Pollard
02f018b418 Bug fixes for Enterprise content, 2022-08-12 (#29897) 2022-08-16 07:57:09 +00:00
Andrew Eisenberg
10c492e5d4 Fix incorrect link (#29848)
* Fix incorrect link

Lins to the codeql-action should always be to v2.

* Conditionally link to v1 or v2 of the codeql-action

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-08-12 16:12:10 +00:00
Steve Guntrip
744b0a57c5 [2022-08-12]: Secret scanning: dry-runs for custom patterns - [GA] (#29792)
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Vanessa <vgrl@github.com>
2022-08-11 23:32:55 +00:00
Orhan Toy
4d24a40d08 Fix typo: updatng -> updating (#29726)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-08-09 09:40:43 +00:00
Felicity Chapman
9e58b71be2 Security overview available to all enterprise users, no longer requires GHAS (#29126)
* Rename gated-feature

* Rename reusable folder

* Add feature for function

* Update for change in behavior

* Remove GHES 3.0 from gated feature

* Remove unused gated-feature

* Fix test

* Fix another test

* Apply suggestions from code review

Co-authored-by: Laura Coursen <lecoursen@github.com>

* Improve versioning

* Tweak message

* Update data/features/security-overview-displayed-alerts.yml

* Update content/code-security/getting-started/github-security-features.md

Co-authored-by: Kelly Arwine <kellyarwine@github.com>

Co-authored-by: Laura Coursen <lecoursen@github.com>
Co-authored-by: Kelly Arwine <kellyarwine@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-08-09 05:35:27 +00:00
Jenni Christensen
63e1c8c8b3 Merge branch 'main' into ske-runner-images 2022-08-08 08:30:09 -07:00
Hana Harencarova
c928c39bd4 Update uploading-a-sarif-file-to-github.md
Change the link to 'About SARIF support for code scanning'
2022-08-08 15:36:10 +02:00
Hana Harencarova
cc80a8b182 Code Scanning integration - importance of consistent filepaths #7017 2022-08-08 15:32:07 +02:00
Kate Catlin
1db3ba5838 Adding GitHub Actions as a supported ecosystem (#29454) 2022-08-04 15:54:31 +00:00
skedwards88
7c57ea52fa change remaining instances of virtual environment to runner image 2022-08-03 11:47:05 -07:00
Simon Engledew
65e373924a code-scanning: Add a section on rules and results (#29161) 2022-08-02 09:58:41 +00:00
Courtney Wilson
982ae82ff7 Merge branch 'main' into patch-2 2022-08-01 16:44:32 -05:00
mc
780fe200ef Merge branch 'main' into patch-2 2022-08-01 16:32:28 +01:00
mc
03f868d8ac Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md 2022-08-01 16:03:37 +01:00
mc
e98383c13a Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md 2022-08-01 15:48:53 +01:00
AlonaHlobina
64c49437d9 Obtaining detailed logs and debugging artifacts for the CodeQL Action (#29425)
* Create codeql-action-debug-logging.yml

* Update troubleshooting-the-codeql-workflow.md

* Update viewing-code-scanning-logs.md

* Update troubleshooting-the-codeql-workflow.md

* Apply suggestions from code review

Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>

* Update troubleshooting-the-codeql-workflow.md

* Don't use NWO

* Apply suggestions from code review

* Update content/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/troubleshooting-the-codeql-workflow.md

* Apply suggestions from code review

* Update content/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/viewing-code-scanning-logs.md

Co-authored-by: Aditya Sharad <6874315+adityasharad@users.noreply.github.com>
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-08-01 11:14:08 +00:00
skedwards88
aea4b9c47c rename references to virual-environments repo to runner-images 2022-07-29 12:33:18 -07:00
Landon Grindheim
a9355a55c2 Note that ACR is not currently supported 2022-07-29 15:15:12 -04:00
JonZeolla
1434aec1a9 Fix github.actor examples (#19267) 2022-07-28 09:30:19 +00:00
mc
2b15269a3d [Ready to ship] Configuring the dependency review action on GHES (#29064) 2022-07-27 15:27:27 +00:00
Andy Barnes
441cfc54cf Add pull-requests: write to permissions: block (#29350) 2022-07-27 08:09:51 +00:00
Sarah Edwards
012525e673 Document triggering_actor (#28988) 2022-07-26 22:54:58 +00:00
Mariam
8aa0adbe63 Secret scanning: Make pair matches visible in docs (#29324) 2022-07-26 19:16:54 +00:00
Sophie
3df2d7b47a [2022-07-27]: Secret scanning: Email on bypass - [GA] (#29233) 2022-07-26 19:11:46 +00:00
Matt Pollard
dc2ba532b4 GitHub Enterprise Server 3.6 release candidate (#28905) 2022-07-26 18:56:17 +02:00
Benjamin Friedman Wilson
1268fee5fc small typo fix for mispelled 'updating' 2022-07-26 09:44:40 +02:00
mc
8fcb5ad8c1 Fix mention of public repos in GHAE (#29328)
* fix mention of public in GHAE

* Update content/code-security/supply-chain-security/end-to-end-supply-chain/securing-code.md

Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>

Co-authored-by: Steve Guntrip <12534592+stevecat@users.noreply.github.com>
2022-07-25 12:24:37 +00:00
Eli Reisman
0bc93e8437 Update Rust/Cargo Dependency Graph documentation (#28976) 2022-07-21 20:21:40 +02:00
Felicity Chapman
73b085ef8e Secret scanning: fix typo in condition (#29203) 2022-07-21 10:27:19 +00:00
Felicity Chapman
40989e0ca6 "Security center" rename to "Security overview" (#29120) 2022-07-18 16:40:33 +00:00
Sarita Iyer
15c09dc0b2 Merge branch 'main' into dependabot-alerts-most-important-sort 2022-07-15 13:37:13 -04:00
Steve Guntrip
74d6918dae Add GHAS resources 2022-07-15 13:57:26 +00:00
Jurre
d738183157 Dependabot: explain how to allow rebases over appended commits (#29026)
* Depedabot: explain how to allow rebases over appended commits

By default Dependabot stops rebasing PRs that have been altered, in some cases (especially when setting up automations that add commits to PRs automatically), this is not desirable, and it's preferable for Dependabot to force push over those commits, removing them and having the automation re-generate them.

This is a feature that's been present in Dependabot for a while already, but has not been documented, so let's document it.

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: Jurre <jurre@github.com>

* Update content/code-security/dependabot/working-with-dependabot/managing-pull-requests-for-dependency-updates.md

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2022-07-14 14:04:12 +00:00