1
0
mirror of synced 2025-12-20 18:36:31 -05:00
Commit Graph

2431 Commits

Author SHA1 Message Date
Sarita Iyer
0c3f58d8b3 Updates for alert severity setting 2021-05-21 12:29:04 -04:00
Briana Swift
b95d5d10af Clarify enabling secret scanning will scan all branches, all history (#19416)
* clarify enabling secret scanning will scan all branches, all history

* Update content/code-security/secret-security/configuring-secret-scanning-for-your-repositories.md

* Update content/code-security/secret-security/about-secret-scanning.md

Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2021-05-21 13:26:39 +00:00
Mike McDonald
ecac77807b Removing the constraint on using @dependabot ignore with ignore conditions (#19439) 2021-05-20 07:05:44 +00:00
Jason Rudolph
fbf71119d0 Dependabot Preview Migration: Describe recommended workaround for ACF_PRO_KEY (#19432) 2021-05-19 20:26:02 +00:00
Sarah Schneider
f7e848e0c4 ran script/content-migrations/remove-map-topics.js && script/content-migrations/update-tocs.js 2021-05-19 10:12:38 -04:00
Mike McDonald
184d37a8ff [Mid May] Adding docs on ignore update-types (#19039) 2021-05-18 12:08:05 +00:00
Steve Guntrip
911293b897 Merge branch 'main' into your-orgs-reusables 2021-05-18 07:54:29 +01:00
mc
ab288ad20a [Ready to ship] Code scanning: Allow upload of multiple SARIF files for 3rd party CI/CD (GA) (#19205)
* made a start

* more work

* fix typos and add dotcom example SARIF file

* start addressing comments

* address more comments

* addressed more comments

* address outstanding comments

* Apply suggestions from code review

Co-authored-by: Laura Coursen <lecoursen@github.com>
Co-authored-by: Marco Gario  <marcogario@github.com>

* address more comments

* Update content/code-security/secure-coding/sarif-support-for-code-scanning.md

Co-authored-by: Laura Coursen <lecoursen@github.com>

* more improvements

* remove run id text

* address comment on CodeQL runner

* more improvements

Co-authored-by: Laura Coursen <lecoursen@github.com>
Co-authored-by: Marco Gario  <marcogario@github.com>
2021-05-13 13:38:52 +01:00
Steve Guntrip
ed0e034406 Update reusables for navigating to an organization 2021-05-13 11:02:37 +01:00
Simran
7ae0162760 Unify YAML indent (#6041) 2021-05-12 22:06:35 +00:00
Mario Campos
4f99affb60 Document unsupported filter patterns in Code Scanning config (#19174)
* Document unsupported filter patterns in Code Scanning config

Addresses https://github.com/github/docs-content/issues/4316

* reword and add to newer article

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
2021-05-11 10:13:21 +01:00
Sarah Khalife
1726480595 Update running-codeql-cli-in-your-ci-system.md (#6139) 2021-05-11 08:08:59 +00:00
Janice
96e6ab6895 Merge branch 'main' into main 2021-05-10 15:03:06 -07:00
Ethan Palm
18c71b152b Language support across GitHub products (#18677)
* Update content

* Create github-language-support.md

* Add reminder HTML comments

* Add link to supported languages article

* Add intro for GitHub's products

* Add note to list of CodeQL supported languages

* table with package managers

* Update table and add conceptual info

* Versioning to fix broken links

* Fix table layout

* Add package managers to table

* Fix versioning syntax

* Incorporate reviewer feedback

* Center table headers

* Update Dependabot features in table

* Add footnote for third-party code scanning support

* Update link

* support native markdown table alignments

* Update links for ghes2.22

* Use proper names of package managers

* Add Scala

* Adjust conceptual info

* Flip table axes

* Delete unused reusables

* Update link to Packages info

* fix merge conflict

* fix other merge conflict

* Update codeql-languages-bullets.md

* Revert "Update codeql-languages-bullets.md"

This reverts commit 69547205f5e43a8fbf3edc51c89f0f647eef285a.

* Update article topic to sentence case

Co-authored-by: Sarah Schneider <sarahs@github.com>
2021-05-10 12:35:34 -04:00
Arun Raj R
929e2311d6 Enable tag processing 2021-05-08 13:31:12 +05:30
Simran Spiller
2f9df80b4d Always use ``yaml instead of sometimes ``yml 2021-05-07 12:06:04 +02:00
Rachael Sewell
46fda7b959 [DO NOT MERGE] GitHub Enterprise Server 3.1 release candidate megabranch (#18399)
* 3.1 megabranch

* these should be in a topic branch to avoid unnecessary ci failures

* add copies of 3.0 schema files

* update link veresion from 3.0 -> 3.1

* update correct version 🤦‍♀️

* update with 3.1 version links

* first stab of this work

* fix product variable and links to section that has been moved

* simplify Liquid conditions

* elsif

* Update content/github/managing-subscriptions-and-notifications-on-github/viewing-your-subscriptions.md

Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>

* [GHES 3.1] Code scanning: SARIF limit increased to 5000 (#18539)

* revert api previews

* delete 3.1 preview

* Revert "delete 3.1 preview"

This reverts commit 0a7df3e17a1e182e5b01b0fdafacb6bb19100f70.

* regenerate decorated file

* make security policy docs available in GHES 3.1 and GHAE docs

* adapt for GHES/GHAE and remove the word

* revert a whole bunch of stuff

* more reverting and further updating

* update links to Adding a security policy to your repo article

* fix broken links and remove responsibly

* simplify Liquid versioning

* Update content/code-security/getting-started/adding-a-security-policy-to-your-repository.md

Co-authored-by: Felicity Chapman <felicitymay@github.com>

* address comment

* Remove overcomplicated versioning (#18934)

* Update information on licensing and billing for GHES 3.1 (#18835)

* regenerate graphql files with new prerendered input object

* add release notes placeholder file

* add scaffolding

* use real date

* ✂️  3.1 schema added accidentally

* update enterprise release dates

* add base files

* Correct versioning for branch renaming and master to main transition in GHES docs (#19050)

* update versioning

* apply Alistair's suggestion

* add new cached index names

* Update docs for code scanning in external CI to cover CodeQL CLI usage (#19030)

* 3893 add missing flag for GHES and GHAE (next) users (#19129)

* [GHES 3.1] Release candidate 1 release notes  (#18419)

* fleshing out the 33.1 RC1 release notes

* update with moreee

* really flesh it all out

* format a bit

* fix linter errors

* fix errors again

* add quotes around heading with Liquid

* placeholder to get error fixed

* add quotes

* just remove thoose things

* typo

* Update 0-rc1.yml

* update with feedback

* add workflow beta

* upload increase

* some last changes

* change the date

* fix links

Co-authored-by: Sarah Schneider <sarahs@github.com>
Co-authored-by: Rachael Sewell <rachmari@github.com>

* Conflict resolution between 19082 and 3.1 Megabranch (#19158)

* Fix typo in new reusable

* delete 3.1 rest schema files

* Update OpenAPI Descriptions (#19166)

* last minute additions yikes

* redeploy staging

Co-authored-by: Melanie Yarbrough <11952755+myarb@users.noreply.github.com>
Co-authored-by: Shati Patel <42641846+shati-patel@users.noreply.github.com>
Co-authored-by: mchammer01 <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: skedwards88 <skedwards88@github.com>
Co-authored-by: Matt Pollard <mattpollard@users.noreply.github.com>
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Meg Bird <megbird@github.com>
Co-authored-by: Sarah Schneider <sarahs@github.com>
Co-authored-by: github-openapi-bot <69533958+github-openapi-bot@users.noreply.github.com>
2021-05-06 09:41:42 -07:00
Felicity Chapman
6187dc4518 Update info on notifications to include new "security alerts" type (#19082) 2021-05-05 16:55:12 +01:00
Rachael Sewell
a926da8b08 Update topics to sentence case (#19069) 2021-04-30 19:30:36 -07:00
Sarita Iyer
73d7858690 Merge branch 'main' into mm-dependabot-date 2021-04-27 16:39:21 -04:00
Mike McDonald
0b85beb89a removing domain from docs links, 2021-04-27 13:55:20 -06:00
Mike McDonald
313d08d386 Merge branch 'mm-dependabot-date' of github.com:github/docs-internal into mm-dependabot-date 2021-04-27 13:50:58 -06:00
Mike McDonald
7475f95504 Made the note a warning 2021-04-27 13:50:32 -06:00
Mike McDonald
7a8e268c7f Update content/code-security/supply-chain-security/upgrading-from-dependabotcom-to-github-native-dependabot.md
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
2021-04-27 13:45:32 -06:00
Mike McDonald
456630273a Update content/code-security/supply-chain-security/upgrading-from-dependabotcom-to-github-native-dependabot.md
Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com>
2021-04-27 13:45:20 -06:00
Philip Harrison
b776d7a6ff Fix: allow applies to both sec and version updates (#18979) 2021-04-27 09:23:04 +00:00
Mike McDonald
5520a9cb58 Adding a date for Dependabot shutdown 2021-04-26 19:01:58 -06:00
Sarita Iyer
3bc6dc88a0 Merge branch 'main' into dependabot-preview-shutdown 2021-04-22 11:37:14 -04:00
Sarita Iyer
147b1c3c2b Removed extra period 2021-04-22 11:34:07 -04:00
Mike McDonald
6557a30503 Removing references to shutdown, will add back in when announcing the shutdown 2021-04-22 09:20:00 -06:00
hubwriter
de28b750d1 Configure GITHUB_TOKEN permissions (#18348)
* Add 'permissions' to reference page

* Final set of pre-review changes

* Update content/actions/learn-github-actions/security-hardening-for-github-actions.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update data/reusables/github-actions/workflow-permissions-intro.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/reference/authentication-in-a-workflow.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update data/reusables/github-actions/publish-to-packages-workflow-step.md

Co-authored-by: Sarah Edwards <skedwards88@github.com>

* Update content/actions/guides/publishing-nodejs-packages.md

* Update content/actions/guides/publishing-java-packages-with-gradle.md

* Update content/actions/guides/publishing-java-packages-with-maven.md

* Update content/actions/guides/publishing-nodejs-packages.md

* Update content/actions/reference/authentication-in-a-workflow.md

* Update content/actions/reference/authentication-in-a-workflow.md

* Update content/actions/reference/authentication-in-a-workflow.md

* Update content/actions/reference/authentication-in-a-workflow.md

* Update content/actions/learn-github-actions/security-hardening-for-github-actions.md

* Update content/actions/reference/authentication-in-a-workflow.md

* Update content/actions/reference/workflow-syntax-for-github-actions.md

* Update content/actions/reference/workflow-syntax-for-github-actions.md

* Update content/actions/reference/workflow-syntax-for-github-actions.md

* Update content/github/administering-a-repository/disabling-or-limiting-github-actions-for-a-repository.md

* Update content/github/setting-up-and-managing-organizations-and-teams/disabling-or-limiting-github-actions-for-your-organization.md

* Update content/github/setting-up-and-managing-your-enterprise/enforcing-github-actions-policies-in-your-enterprise-account.md

* Update content/packages/guides/using-github-packages-with-github-actions.md

* Make review comment changes (locally)

* Resolve conflicts caused by remotely made review changes

* Remove translation file changes from PR.

* Remove rogue indentation in Important box

* Remove sentence about default being set to restricted.

This *will* be the case for new repos in future,
but that isn't being shipped at the moment.

* Add permissions to workflow examples (#18393)

Co-authored-by: Sarah Edwards <skedwards88@github.com>
2021-04-20 15:49:38 +00:00
Mike McDonald
2668bb798d Clarifies rebase-strategy behavior (#18865) 2021-04-20 07:14:10 +00:00
Mike McDonald
98f5c4b040 Support for Dependabot private registry hex-organization (#18793) 2021-04-19 15:37:18 +00:00
Felicity Chapman
732e6e537c Revert incorrect change to one line for GH AE (#18808) 2021-04-15 17:39:17 +01:00
Felicity Chapman
348282c5c4 Simplify conditions in articles following the duplication with the move to code-security (#18754) 2021-04-15 14:41:50 +01:00
Mike McDonald
8941ff5ce6 Adding docs on how to use with AWS ECR (#18744)
* Adding docs on how to use with AWS ECR, given customer confusion in https://github.com/dependabot/dependabot-core/issues/3457

* Explicitly refer to docker-registry type

Co-authored-by: Ethan Palm <56270045+ethanpalm@users.noreply.github.com>
2021-04-14 16:45:11 -04:00
Felicity Chapman
8e7aa7ba43 Update the security permission matrix info for GHES users (#18641) 2021-04-13 19:00:45 +01:00
Felicity Chapman
bfef839b25 Fix typo in intro (#18645) 2021-04-08 17:36:57 +01:00
Emily Gould
bcfe4dab3b Make orgs and teams content a top-level doc set (#18593)
* Add new product to products.yml

* Move directory to its new location and rename it

* Update new index page

* Remove old category from GitHub product index

* Add collaboration category

* Add membership category

* Add roles category

* Add teams category

* Add team discussion category

* Add repo access category

* Add project board access category

* Add app management category

* Add org settings category

* Add improved org perms category

* Add category for OAuth app restrictions

* Add org security category

* Add SAML category

* Add SAML access category

* Add git access category

* Add redirects and update links for collaboration category

* Add redirects and update links to team discussions content

* Add redirects and update links to SAML access category

* Update links to org security category and add redirects

* Add redirects for app managers content

* Add redirects for project board category

* Add redirects and update links for the repo access category

* Add redirects for git access category

* Add redirects and update links for membership category

* Add redirects and update links for org settings category

* Fix links

* Add redirects and update links to org access category

* Add redirects and upate links to SSO category

* Add redirects to improved org perms category

* Add redirects and update links to teams category

* Add redirects and update links to oauth apps category

* Fix links

* Fix links

* Fix links
2021-04-08 09:50:13 -05:00
Mike McDonald
e0f2604482 Customer info on how to request an advisory credit (#18356)
* Customer info on how to request an advisory credit

A location for support to point customers to if/when they ask to be credited for a security advisory

* Update content/code-security/security-advisories/editing-a-security-advisory.md

Co-authored-by: Leona B. Campbell <3880403+runleonarun@users.noreply.github.com>

Co-authored-by: Sarah Edwards <skedwards88@github.com>
Co-authored-by: Leona B. Campbell <3880403+runleonarun@users.noreply.github.com>
2021-04-07 10:11:04 +10:00
Sarita Iyer
0406fb7496 Added links to issues on public roadmap 2021-04-05 16:26:17 -04:00
Sarita Iyer
3cd22b3cd1 Fixed procedure 2021-04-05 13:51:03 -04:00
Sarita Iyer
c79ef79d1c Fixing PR name and intro error 2021-04-05 13:30:25 -04:00
Sarita Iyer
a9c218002e Incorporating review suggestions 2021-04-05 12:18:43 -04:00
Sarita Iyer
f1833ddfab adding suggestion from PR 2021-04-02 17:03:24 -04:00
Sarita Iyer
bfc80e2388 fixed wrong url 2021-04-02 16:51:59 -04:00
Sarita Iyer
99df60bea1 reconciled filename to url 2021-04-02 16:38:31 -04:00
Sarita Iyer
3655e0bd9c added frontmatter regarding title to fix failing test 2021-04-02 16:22:41 -04:00
Sarita Iyer
570046244a Merge branch 'dependabot-preview-shutdown' of https://github.com/github/docs-internal into dependabot-preview-shutdown 2021-04-02 15:08:18 -04:00
Sarita Iyer
6fe4f14e3b updated intro to include more information 2021-04-02 15:08:04 -04:00