You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/dependabot/dependabot-alerts/configuring-dependabot-alerts.md
+11-23
Original file line number
Diff line number
Diff line change
@@ -68,7 +68,7 @@ By default, we notify people with write, maintain, or admin permissions in the a
68
68
69
69
{% data reusables.security.security-and-analysis-features-enable-read-only %}
70
70
71
-
{% ifversion dependabot-alerts-ghes-enablement %}
71
+
{% ifversion ghes %}
72
72
An enterprise owner must first set up {% data variables.product.prodname_dependabot %} for your enterprise before you can manage {% data variables.product.prodname_dependabot_alerts %} for your repository. For more information, see [AUTOTITLE](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise).{% endif %}
73
73
74
74
### Enabling or disabling {% data variables.product.prodname_dependabot_alerts %} for a repository
@@ -86,18 +86,14 @@ An enterprise owner must first set up {% data variables.product.prodname_dependa
86
86
87
87
You can enable or disable {% data variables.product.prodname_dependabot_alerts %} for some or all repositories owned by your organization. {% data reusables.security.note-securing-your-org %}
88
88
89
-
{% ifversion dependabot-alerts-ghes-enablement %}
89
+
{% ifversion ghes %}
90
90
An enterprise owner must first set up {% data variables.product.prodname_dependabot %} for your enterprise before you can manage {% data variables.product.prodname_dependabot_alerts %} for your repository. For more information, see [AUTOTITLE](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise).{% endif %}
91
91
92
92
### Enabling or disabling {% data variables.product.prodname_dependabot_alerts %} for all existing repositories
You can use security overview to find a set of repositories and enable or disable {% data variables.product.prodname_dependabot_alerts %} for them all at the same time. For more information, see [AUTOTITLE](/code-security/security-overview/enabling-security-features-for-multiple-repositories).
96
95
97
96
You can also use the organization settings page for "{% data variables.product.UI_advanced_security %}" to enable or disable {% data variables.product.prodname_dependabot_alerts %} for all existing repositories in an organization.
98
-
{% else %}
99
-
You can use the organization settings page for "{% data variables.product.UI_advanced_security %}" to enable {% data variables.product.prodname_dependabot_alerts %} for all existing repositories in an organization.
100
-
{% endif %}
101
97
102
98
{% data reusables.profile.access_org %}
103
99
{% data reusables.profile.org_settings %}
@@ -108,34 +104,26 @@ You can use the organization settings page for "{% data variables.product.UI_adv
108
104
109
105
{% endif %}
110
106
111
-
{% ifversion dependabot-alerts-enterprise-enablement or ghes %}
107
+
{% ifversion ghec or ghes %}
112
108
113
109
## Managing {% data variables.product.prodname_dependabot_alerts %} for your enterprise
114
110
115
-
You can enable or disable {% data variables.product.prodname_dependabot_alerts %} for all current and future repositories owned by organizations in your enterprise. Your changes affect all repositories.
{% data variables.product.prodname_security_configurations_caps %}, which are collections of security settings, allow you to manage {% data variables.product.prodname_dependabot_alerts %} for your enterprise. {% ifversion ghec %}You can:
114
+
115
+
* Use the {% data variables.product.prodname_github_security_configuration %}. This configuration is maintained by {% data variables.product.github %} and is a set of industry best practices and features that provide a robust, baseline security posture for enterprises. See [AUTOTITLE](/admin/managing-code-security/securing-your-enterprise/applying-the-github-recommended-security-configuration-to-your-enterprise).
116
+
* Configure your own {% data variables.product.prodname_custom_security_configuration %} if you prefer the enablement settings to meet the specific security needs of your enterprise. {% endif %}See [AUTOTITLE](/admin/managing-code-security/securing-your-enterprise/creating-a-custom-security-configuration-for-your-enterprise).
117
+
118
+
{% else %}
118
119
119
-
{% ifversion ghes < 3.16 %}
120
+
You can enable or disable {% data variables.product.prodname_dependabot_alerts %} for all current and future repositories owned by organizations in your enterprise. Your changes affect all repositories.
120
121
121
-
{% ifversion dependabot-alerts-enterprise-enablement or ghes %}
122
122
{% data reusables.enterprise-accounts.access-enterprise %}
123
123
{% data reusables.enterprise-accounts.settings-tab %}
124
124
{% data reusables.enterprise-accounts.advanced-security-tab %}
125
125
1. In the "{% data variables.product.prodname_dependabot %}" section, to the right of {% data variables.product.prodname_dependabot_alerts %}, click **Disable all** or **Enable all**.
126
126
1. Optionally, select **Automatically enable for new repositories** to enable {% data variables.product.prodname_dependabot_alerts %} by default for your organizations' new repositories.
127
127
{% endif %}
128
128
129
-
{% ifversion dependabot-alerts-enterprise-enablement or security-configuration-enterprise-level %}
130
-
131
-
> [!NOTE]
132
-
> When {% data variables.product.prodname_dependabot_alerts %} are enabled or disabled at the enterprise level, it overrides the organization and repository level settings for {% data variables.product.prodname_dependabot_alerts %}.
133
-
134
-
{% data variables.product.prodname_security_configurations_caps %}, which are collections of security settings, allow you to manage {% data variables.product.prodname_dependabot_alerts %} for your enterprise. You can:
135
-
136
-
* Use the {% data variables.product.prodname_github_security_configuration %}. This configuration is maintained by {% data variables.product.github %} and is a set of industry best practices and features that provide a robust, baseline security posture for enterprises. See [AUTOTITLE](/admin/managing-code-security/securing-your-enterprise/applying-the-github-recommended-security-configuration-to-your-enterprise).
137
-
* Configure your own {% data variables.product.prodname_custom_security_configuration %} if you prefer the enablement settings to meet the specific security needs of your enterprise. See [AUTOTITLE](/admin/managing-code-security/securing-your-enterprise/creating-a-custom-security-configuration-for-your-enterprise).
Copy file name to clipboardExpand all lines: content/code-security/dependabot/dependabot-security-updates/configuring-dependabot-security-updates.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -32,7 +32,7 @@ topics:
32
32
33
33
You can enable {% data variables.product.prodname_dependabot_security_updates %} for any repository that uses {% data variables.product.prodname_dependabot_alerts %} and the dependency graph. For more information, see [AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates).
34
34
35
-
You can enable or disable {% data variables.product.prodname_dependabot_security_updates %} for an individual repository{% ifversion code-security-multi-repo-enablement %}, for a selection of repositories in an organization,{% endif %} or for all repositories owned by your personal account or organization. For more information about enabling security features in an organization, see {% ifversion security-configurations %}[AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization).{% else %}[AUTOTITLE](/code-security/getting-started/quickstart-for-securing-your-organization).{% endif %}
35
+
You can enable or disable {% data variables.product.prodname_dependabot_security_updates %} for an individual repository, for a selection of repositories in an organization, or for all repositories owned by your personal account or organization. For more information about enabling security features in an organization, see {% ifversion security-configurations %}[AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization).{% else %}[AUTOTITLE](/code-security/getting-started/quickstart-for-securing-your-organization).{% endif %}
36
36
37
37
{% data reusables.dependabot.dependabot-security-updates-disable-for-alert-rules %}
Copy file name to clipboardExpand all lines: content/code-security/getting-started/quickstart-for-securing-your-organization.md
+2-5
Original file line number
Diff line number
Diff line change
@@ -15,6 +15,7 @@ topics:
15
15
- Secret Protection
16
16
shortTitle: Secure organization quickstart
17
17
---
18
+
<!--Reminder that this article describes the process for older versions of GHES. GHES 3.12 - 3.14 only. All other versions see "Securing your organization" instead.-->
18
19
19
20
## Introduction
20
21
@@ -78,7 +79,7 @@ In some cases, it is better to identify a selection of repositories that require
78
79
79
80
If you're not sure about the impact a feature will have, you may want to test the feature on a limited selection of repositories before you commit to enabling the feature for all repositories, or you may want to roll out the feature gradually over several phases. You may also be aware that some repositories in your organization require a different set of features than others.
80
81
81
-
{% ifversion code-security-multi-repo-enablement %}You can use the "Security coverage" view to identify repositories that require a certain feature, then enable the feature for those repositories. The following steps describe how to find the "Security coverage" view.
82
+
You can use the "Security coverage" view to identify repositories that require a certain feature, then enable the feature for those repositories. The following steps describe how to find the "Security coverage" view.
82
83
83
84
{% data reusables.organizations.navigate-to-org %}
84
85
{% data reusables.organizations.security-overview %}
@@ -87,10 +88,6 @@ If you're not sure about the impact a feature will have, you may want to test th
87
88
88
89
On this view, you can use checkboxes to select specific repositories, or you can use the search bar to find the repositories where you want to enable a feature. For example, you can use filters to identify repositories where a certain team has write or admin access, or exclude repositories that don't require the same level of protection, such as test repositories or repositories for internal documentation. Then you can enable features for all selected repositories at once. For more information, see [AUTOTITLE](/code-security/security-overview/enabling-security-features-for-multiple-repositories).
89
90
90
-
{% else %}When you have identified the repositories that require a feature, you can enable the feature for each repository individually. As an organization owner or security manager, you can configure the security settings for each repository in your organization. For more information, see [AUTOTITLE](/code-security/getting-started/quickstart-for-securing-your-repository).
91
-
92
-
{% endif %}
93
-
94
91
If you have a limited number of licenses for {% data variables.product.prodname_GHAS %}, you may want to prioritize repositories that contain critical projects, or that have the highest commit frequencies. See [AUTOTITLE](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).
95
92
96
93
{% data reusables.security-overview.settings-limitations %}
Copy file name to clipboardExpand all lines: content/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization.md
+1-3
Original file line number
Diff line number
Diff line change
@@ -43,9 +43,7 @@ If you have a license for {% data variables.product.prodname_GHAS %}, the page w
43
43
44
44
You can enable or disable features for all repositories.
You can use security overview to find a set of repositories and enable or disable security features for them all at the same time. For more information, see [AUTOTITLE](/code-security/security-overview/enabling-security-features-for-multiple-repositories).
48
-
{% endif %}
49
47
50
48
{% data reusables.advanced-security.note-org-enable-uses-seats %}
51
49
@@ -73,7 +71,7 @@ You can use security overview to find a set of repositories and enable or disabl
73
71
74
72
> [!NOTE]
75
73
> * {% data reusables.code-scanning.limitation-org-enable-all %}
76
-
> * Enabling {% data variables.product.prodname_code_scanning %} for all eligible repositories in an organization will not override existing {% data variables.product.prodname_code_scanning %} configurations. For information on configuring default setup with different settings for specific repositories, see [AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning){% ifversion code-security-multi-repo-enablement %} and [AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale#configuring-default-setup-for-a-subset-of-repositories-in-an-organization){% endif %}.
74
+
> * Enabling {% data variables.product.prodname_code_scanning %} for all eligible repositories in an organization will not override existing {% data variables.product.prodname_code_scanning %} configurations. For information on configuring default setup with different settings for specific repositories, see [AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning)and [AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning-at-scale#configuring-default-setup-for-a-subset-of-repositories-in-an-organization).
77
75
78
76
{% data reusables.security.displayed-information %}
Copy file name to clipboardExpand all lines: data/reusables/repositories/navigate-to-branches.md
-7
Original file line number
Diff line number
Diff line change
@@ -5,13 +5,6 @@
5
5
{% else %}
6
6
1. Above the list of files, click **{% octicon "git-branch" aria-hidden="true" %} Branches**.
7
7
8
-
{% ifversion global-nav-update %}
9
-
10
8

11
9
12
-
{% else %}
13
-
14
-

>[!NOTE] The summary views ({% ifversion security-overview-dashboard %}"Overview", {% endif %}"Coverage" and "Risk") show data only for {% ifversion secret-scanning-alert-experimental-list %}default{% else %}high confidence{% endif %} alerts. {% ifversion security-overview-additional-tools %}{% data variables.product.prodname_secret_scanning_caps %} {% else %}{% data variables.product.prodname_code_scanning_caps %} alerts from third-party tools, and {% data variables.product.prodname_secret_scanning %}{% endif %} alerts for ignored directories and non-provider alerts are all omitted from these views. Consequently, the individual alert views may include a larger number of open and closed alerts.
> * Enabling {% data variables.product.prodname_code_scanning %} default setup _will not_ override any existing configurations of advanced setup for the selected repositories, but it _will_ override any existing configurations of default setup.
5
3
> * Enabling "Alerts" for {% data variables.product.prodname_secret_scanning %} enables {% ifversion secret-scanning-alert-experimental-list %}default{% else %}high confidence{% endif %} alerts. If you want to enable non-provider alerts, you need to edit the repository, organization, or enterprise settings. For more information about alert types, see [Supported secrets](/code-security/secret-scanning/introduction/supported-secret-scanning-patterns#supported-secrets).
6
-
7
-
{% elsif bulk-code-scanning-query-suite and not fpt %}
8
-
9
-
> [!NOTE]
10
-
> For {% ifversion code-security-multi-repo-enablement %}both the single and multiple {% else %}the single {% endif %}repository enablement settings, enabling {% data variables.product.prodname_code_scanning %} will override any existing {% data variables.product.prodname_code_scanning %} configurations for the selected repositories, including any previous query suite selections and workflows for advanced setups.
0 commit comments