1
0
mirror of synced 2025-12-22 03:16:52 -05:00
Commit Graph

2625 Commits

Author SHA1 Message Date
Aditya Sharad
a82515877e Code Scanning: State the recommended CodeQL version for GHES in the about page 2022-06-22 21:51:22 +00:00
Aditya Sharad
8154eb2f31 Code Scanning: Specify the recommended CodeQL version for each GHES version
Create new variables for the GHES version, and the CodeQL CLI version
recommended along with each GHES version.

Refactor the docs on installing the CodeQL CLI in a third-party CI system,
to use the CodeQL and GHES version from the variables.

These variables will need to be kept up to date with future GHES+CodeQL versions.
2022-06-22 21:36:11 +00:00
Felicity Chapman
1d2030a10a Update information on support by Dependabot version updates for Pub as it moves from beta to GA (#28047) 2022-06-21 13:15:35 -07:00
Sarita Iyer
15a3beed99 Merge branch 'main' into dep-submission-api-dependency-graph-updates 2022-06-17 12:05:08 -04:00
Sarita Iyer
bbf856c92a Merge branch 'main' into ske-dep-api 2022-06-17 11:50:10 -04:00
Felicity Chapman
ea601b7e31 Tidy up some outdated links and language: "vulnerable dependencies" (#28474) 2022-06-17 11:59:36 +00:00
Felicity Chapman
06e0979e34 [2022-06-15]: Advisory Database Supports Malware Advisories (beta) (#28367) 2022-06-17 12:51:16 +01:00
Felicity Chapman
044285a2c1 [2022-06-16]: Secret scanning dry runs on custom pattern edits - [Public Beta] (#28390) 2022-06-16 21:23:26 +00:00
Sarita Iyer
b672b23df1 Merge branch 'main' into ske-dep-api 2022-06-16 15:40:07 -04:00
Sarita Iyer
32435e8b41 Update content/code-security/supply-chain-security/understanding-your-software-supply-chain/using-the-dependency-submission-api.md
Co-authored-by: Courtney Claessens <courtneycl@github.com>
2022-06-16 12:23:01 -04:00
Sarita Iyer
bfaa086a74 add info on dependabot alerts 2022-06-16 11:13:44 -04:00
Sarita Iyer
2cac98958c Apply suggestions from code review
Co-authored-by: Courtney Claessens <courtneycl@github.com>
2022-06-16 09:06:36 -04:00
Sarita Iyer
c09b4c04aa Apply suggestions from code review
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-06-16 08:19:01 -04:00
mc
6d8d4d09f6 Fix tiny typo in one of the Security Overview articles (#28559)
fix typo
2022-06-16 11:37:16 +00:00
Sarita Iyer
7f50290100 made language clearer + added missed mention of api 2022-06-15 18:31:16 -04:00
Sarita Iyer
054d6f1382 added feature flag + updated supply chain doc 2022-06-15 18:07:46 -04:00
Sarita Iyer
2655a97152 quick updates 2022-06-15 17:48:05 -04:00
Sarita Iyer
93093c077a updated dependency graph articles for dep submission API beta 2022-06-15 17:44:07 -04:00
Sarita Iyer
57b1eb7148 updating language around API submissions 2022-06-15 15:57:18 -04:00
Sarita Iyer
e584ac5571 add info on viewing submitted dependencies in dep graph 2022-06-15 15:41:58 -04:00
Sarita Iyer
dcfd5a40df updates to API page 2022-06-15 13:58:08 -04:00
Sarita Iyer
94206d8700 fix apostrophe issue 2022-06-15 13:01:24 -04:00
Sarita Iyer
7612d9e9e0 updates based on feedback! 2022-06-15 12:46:37 -04:00
Sarita Iyer
723444d452 Apply suggestions from code review
Co-authored-by: Felicity Chapman <felicitymay@github.com>
Co-authored-by: Courtney Claessens <courtneycl@github.com>
2022-06-15 09:23:10 -04:00
Sophie
221c806c2a Apply suggestions from code review
Co-authored-by: Federico Builes <febuiles@github.com>
2022-06-15 14:27:37 +02:00
Federico Builes
72140487f9 Merge branch 'main' into mchammer01/dependency-review-action-config 2022-06-15 13:04:01 +02:00
Sarita Iyer
d12b5c1128 update language for table 2022-06-14 17:04:54 -04:00
Sarita Iyer
55cb5a1ff0 tbd table for actions 2022-06-14 16:43:52 -04:00
Sarita Iyer
6f06aaf0d4 use reusables for github-owned actions 2022-06-14 14:44:56 -04:00
Sarita Iyer
9295f8acae updates for example workflow 2022-06-14 14:04:41 -04:00
mc
bc85191c88 [2022-06-13]: Dependabot alerts: bulk triage via checkboxes (reopen, dismiss) - [GA] (#28129)
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@github.com>
2022-06-13 18:27:00 +00:00
mc
3067418bc2 Merge branch 'main' into mchammer01/dependency-review-action-config 2022-06-13 14:50:15 +01:00
Courtney Claessens
c83eead163 conforming license types to spdx format 2022-06-13 09:13:02 -04:00
mc
6dbe336823 Update content/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-dependency-review.md
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-06-13 13:56:04 +01:00
mchammer01
7c5a78af44 address outstanding comments 2022-06-13 13:54:23 +01:00
mc
5f7b6dd156 Apply suggestions from code review
Co-authored-by: Felicity Chapman <felicitymay@github.com>
2022-06-13 08:14:08 +01:00
mc
4a376692f5 Merge branch 'main' into patch-2 2022-06-10 14:08:10 +01:00
mc
c4a1c607eb Update content/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file.md 2022-06-10 14:03:22 +01:00
mc
77f21c80d8 Apply suggestions from code review 2022-06-10 13:54:31 +01:00
mchammer01
87b442f1e5 Merge branch 'mchammer01/dependency-review-action-config' of github.com:github/docs-internal into mchammer01/dependency-review-action-config 2022-06-10 08:36:11 +01:00
mchammer01
21892f8688 address review comments 2022-06-10 08:34:21 +01:00
Courtney Claessens
ccab04820d Update configuring-dependency-review.md
We learned that `allow_licenses` and `deny_licenses` need to be formatted as a string, but don't need quotes: `allow_licenses: GPL 3.0, BSD 3 Clause, MIT`
2022-06-09 17:48:20 -04:00
Sarah Edwards
f85983a6cf Merge branch 'main' into ske-dep-api 2022-06-09 13:15:31 -07:00
mchammer01
186ec0856b fix failure 2022-06-09 14:56:40 +01:00
mchammer01
b1dd04b968 bulk of the work 2022-06-09 14:34:10 +01:00
mchammer01
2006a4d278 boing 2022-06-09 13:46:06 +01:00
mchammer01
de59840655 more improvements and writing 2022-06-09 12:41:40 +01:00
Sarah Schneider
2c0e82a216 Merge branch 'main' of github.com:github/docs-internal into use-ifversion-for-fbv 2022-06-07 15:03:57 -04:00
Jesse Seales
3a3e36a525 Additional closing curly brace (#18382)
Adding additional closing curly brace to the minimal SARIF file example so that code can be copy/pasted for a user and work without additional formatting.
2022-06-07 09:57:38 +00:00
Sarah Schneider
f44578572c Ran script/content-migrations/convert-if-to-ifversion.js 2022-06-06 18:13:12 -04:00