You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: content/admin/managing-code-security/managing-github-advanced-security-for-your-enterprise/configuring-code-scanning-for-your-appliance.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -69,7 +69,7 @@ If you are provisioning a self-hosted runner for {% data variables.product.prodn
69
69
70
70
If you are using default setup for {% data variables.product.prodname_code_scanning %}, you can assign self-hosted runners {% ifversion code-scanning-default-setup-customize-labels %}with the default `code-scanning` label, or you can optionally give them custom labels so that individual repositories can use different runners.{% else %}with the `code-scanning` label.{% endif %} See [AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning#assigning-labels-to-runners).
71
71
72
-
{% ifversion code-scanning-default-setup-self-hosted-310 or default-setup-self-hosted-runners-GHEC %} For information about using default setup for code scanning analysis of compiled languages, see [AUTOTITLE](/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/codeql-code-scanning-for-compiled-languages).{% endif %}
72
+
For information about using default setup for code scanning analysis of compiled languages, see [AUTOTITLE](/code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/codeql-code-scanning-for-compiled-languages).
Copy file name to clipboardexpand all lines: content/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log.md
-2
Original file line number
Diff line number
Diff line change
@@ -39,9 +39,7 @@ The events listed in your security log are triggered by your actions. Actions ar
39
39
|`marketplace_agreement_signature`| Contains all activities related to signing the {% data variables.product.prodname_marketplace %} Developer Agreement. |
40
40
|`marketplace_listing`| Contains all activities related to listing apps in {% data variables.product.prodname_marketplace %}. |
|`oauth_access`| Contains all activities related to OAuth access tokens. |
44
-
| {% endif %} |
45
43
|`oauth_authorization`| Contains all activities related to authorizing {% data variables.product.prodname_oauth_apps %}. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/authorizing-oauth-apps). |
46
44
| {% ifversion passkeys %} |
47
45
|`passkey`| Contains activities related to your passkeys. See [AUTOTITLE](/authentication/authenticating-with-a-passkey/about-passkeys). |
Copy file name to clipboardexpand all lines: content/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -295,7 +295,7 @@ If you added manual build steps for compiled languages and {% data variables.pro
295
295
296
296
## Autobuild steps for compiled languages
297
297
298
-
{% ifversion fpt or ghec %}{% data variables.product.prodname_dotcom %}-hosted runners are always run with the software required by `autobuild`.{% endif %} If you use self-hosted runners for {% data variables.product.prodname_actions %}, you may need to install additional software to use the `autobuild` process. Additionally, if your repository requires a specific version of a build tool, you may need to install it manually. {% ifversion code-scanning-default-setup-self-hosted-310 or default-setup-self-hosted-runners-GHEC %} For self-hosted runners, you should install dependencies directly in the runners themselves. We provide examples of common dependencies for C/C++, C#, and Java in each of the `autobuild` sections of this article for those languages. For more information, see [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners).{% endif %}
298
+
{% ifversion fpt or ghec %}{% data variables.product.prodname_dotcom %}-hosted runners are always run with the software required by `autobuild`.{% endif %} If you use self-hosted runners for {% data variables.product.prodname_actions %}, you may need to install additional software to use the `autobuild` process. Additionally, if your repository requires a specific version of a build tool, you may need to install it manually. {% ifversion ghes or default-setup-self-hosted-runners-GHEC %} For self-hosted runners, you should install dependencies directly in the runners themselves. We provide examples of common dependencies for C/C++, C#, and Java in each of the `autobuild` sections of this article for those languages. For more information, see [AUTOTITLE](/actions/hosting-your-own-runners/managing-self-hosted-runners/about-self-hosted-runners).{% endif %}
299
299
300
300
* [Building C/C++](#building-cc)
301
301
* [Building C#](#building-c)
@@ -468,7 +468,7 @@ The `autobuild` process attempts to autodetect a suitable way to install the dep
468
468
1. Extract all Go code in the repository, similar to running `go build ./...`.
469
469
470
470
> [!NOTE]
471
-
> If you use default setup, it will look for a `go.mod` file to automatically install a compatible version of the Go language.{% ifversion code-scanning-default-setup-self-hosted-310 %} If you're using a self-hosted runner with default setup that doesn't have internet access, you can manually install a compatible version of Go.{% endif %}
471
+
> If you use default setup, it will look for a `go.mod` file to automatically install a compatible version of the Go language.{% ifversion ghes %} If you're using a self-hosted runner with default setup that doesn't have internet access, you can manually install a compatible version of Go.{% endif %}
Copy file name to clipboardexpand all lines: content/code-security/getting-started/auditing-security-alerts.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -31,7 +31,7 @@ Many of the events in the timeline also create an event in the audit log, which
31
31
32
32
Security overview consolidates information about security alerts and provides high-level summaries of the security status of your enterprise or organization.
33
33
34
-
In security overview you can see repositories with open security alerts{% ifversion security-overview-org-risk-coverage %}, as well as which repositories have enabled specific security features{% endif %}. You can also use security overview to filter and sort security alerts using interactive views.
34
+
In security overview you can see repositories with open security alerts{% ifversion ghec or ghes %}, as well as which repositories have enabled specific security features{% endif %}. You can also use security overview to filter and sort security alerts using interactive views.
35
35
36
36
For more information, see [AUTOTITLE](/code-security/security-overview/about-security-overview).
Copy file name to clipboardexpand all lines: content/code-security/security-overview/filtering-alerts-in-security-overview.md
+3-15
Original file line number
Diff line number
Diff line change
@@ -65,7 +65,7 @@ These qualifiers are available in all views.
65
65
66
66
| Qualifier | Description |
67
67
|--------|--------|
68
-
|`team`| Display data for all repositories that the specified team has {% ifversion security-overview-team-write-access -%} write access or {% endif -%} admin access to. For more information on repository roles, see [AUTOTITLE](/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/repository-roles-for-an-organization). |
68
+
|`team`| Display data for all repositories that the specified team has writeaccess or admin access to. For more information on repository roles, see [AUTOTITLE](/organizations/managing-user-access-to-your-organizations-repositories/managing-repository-roles/repository-roles-for-an-organization). |
69
69
|`topic`| Display data for all repositories that are classified with a specific topic. For more information on repository topics, see [AUTOTITLE](/repositories/managing-your-repositorys-settings-and-features/customizing-your-repository/classifying-your-repository-with-topics). |
@@ -97,7 +97,7 @@ In enterprise-level views, you can limit the data to repositories owned by a sin
97
97
| {% endif %} |
98
98
|`org`| Display data for repositories owned by one organization. | {% data variables.product.prodname_dependabot_alerts %} and {% data variables.product.prodname_code_scanning %} alerts |
In enterprise-level views, you can limit the data to repositories owned by a single organization in your enterprise. Use the `org` qualifier to display data for repositories owned by one organization.
103
103
@@ -126,21 +126,9 @@ In the "Risk" and "Coverage" views, you can show data only for repositories wher
126
126
|`dependabot-security-updates`| Display data for repositories where {% data variables.product.prodname_dependabot_security_updates %} is enabled or not enabled. |
127
127
|`secret-scanning-push-protection`| Display data for repositories where push protection for {% data variables.product.prodname_secret_scanning %} is enabled or not enabled. |
The level of risk for a repository is determined by the number and severity of alerts from security features. You can filter on the level of risk using the `risk` qualifier.
134
-
135
-
* The level of risk can be one of `high`, `medium`, or `low`.
136
-
* If one or more security features are not enabled for a repository, the repository has an `unknown` level of risk.
137
-
* If all security features are enabled and no alerts are report, the repository has a `clear` level of risk.
138
-
139
-
{% endif %}
140
-
141
129
## Alert number filters
142
130
143
-
{% ifversion security-overview-org-risk-coverage-enterprise %}In the "Risk" view, you can filter repositories by the number of alerts they have of a specific type.{% else %}These qualifiers are available in the enterprise-level "Overview" and in the organization-level "Security risk" view.{% endif %}
131
+
In the "Risk" view, you can filter repositories by the number of alerts they have of a specific type.
Copy file name to clipboardexpand all lines: content/pull-requests/collaborating-with-pull-requests/incorporating-changes-from-a-pull-request/about-pull-request-merges.md
When you squash and merge, {% data variables.product.prodname_dotcom %} generates a default commit message, which you can edit. Depending on how the repository is configured and the number of commits in the pull request, not including merge commits, this message may include the pull request title, pull request description, or information about the commits.
29
-
{% else %}
30
-
When you squash and merge, {% data variables.product.prodname_dotcom %} generates a default commit message, which you can edit. The default message depends on the number of commits in the pull request, not including merge commits.
31
28
32
29
| Number of commits | Summary | Description |
33
30
| ----------------- | ------- | ----------- |
34
31
| One commit | The title of the commit message for the single commit, followed by the pull request number | The body text of the commit message for the single commit |
35
32
| More than one commit | The pull request title, followed by the pull request number | A list of the commit messages for all of the squashed commits, in date order |
36
33
37
-
{% endif %}
38
-
39
-
| Number of commits | Summary | Description |
40
-
| ----------------- | ------- | ----------- |
41
-
| One commit | The title of the commit message for the single commit, followed by the pull request number | The body text of the commit message for the single commit |
42
-
| More than one commit | The pull request title, followed by the pull request number | A list of the commit messages for all of the squashed commits, in date order |
People with maintainer or admin access to a repository can configure their repository's default merge message for all squashed commits to use the pull request title, the pull request title and commit details, or the pull request title and description. For more information, see [AUTOTITLE](/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-squashing-for-pull-requests).{% endif %}
34
+
People with maintainer or admin access to a repository can configure their repository's default merge message for all squashed commits to use the pull request title, the pull request title and commit details, or the pull request title and description. For more information, see [AUTOTITLE](/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-squashing-for-pull-requests).
Copy file name to clipboardexpand all lines: content/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-merging-for-pull-requests.md
1. Optionally, under **Allow merge commits**, select the dropdown menu, then click the format of the commit message presented to contributors when merging.
19
18
20
19
The default message includes the pull request number and title. For example, `Merge pull request #123 from patch-1`. You can also choose to use just the pull request title, or the pull request title and description.
21
-
{% endif %}
22
20
23
21
If you select more than one merge method, collaborators can choose which type of merge commit to use when they merge a pull request. {% data reusables.repositories.squash-and-rebase-linear-commit-history %}
Copy file name to clipboardexpand all lines: content/repositories/configuring-branches-and-merges-in-your-repository/configuring-pull-request-merges/configuring-commit-squashing-for-pull-requests.md
{% data reusables.repositories.sidebar-settings %}
22
22
1. On the "General" settings page (which is selected by default), scroll down to the section marked "Pull Requests".
23
23
1. Under "Pull Requests", select **Allow squash merging**. This allows contributors to merge a pull request by squashing all commits into a single commit. The default commit message presented to contributors when merging is the commit title and message if the pull request contains only 1 commit, or the pull request title and list of commits if the pull request contains 2 or more commits.
1. Optionally, under **Allow squash merging**, select the dropdown menu, then click the format of the default squash commit message presented to contributors when merging.
26
25
27
26
The default message uses the commit title and message if the pull request contains only 1 commit, or the pull request title and list of commits if the pull request contains 2 or more commits. You can also choose to use just the pull request title, the pull request title and commit details, or the pull request title and description.
28
-
{% endif %}
29
27
30
28
If you select more than one merge method, collaborators can choose which type of merge commit to use when they merge a pull request. {% data reusables.repositories.squash-and-rebase-linear-commit-history %}
0 commit comments