Merge branch 'main' into repo-sync

Author: rachmari

.github/allowed-actions.js

@@ -39,6 +39,6 @@ module.exports = [
   "repo-sync/pull-request@33777245b1aace1a58c87a29c90321aa7a74bd7d",
   "someimportantcompany/github-actions-slack-message@0b470c14b39da4260ed9e3f9a4f1298a74ccdefd",
   "tjenkinson/gh-action-auto-merge-dependency-updates@4d7756c04d9d999c5968697a621b81c47f533d61",
-  "EndBug/add-and-commit@9358097a71ad9fb9e2f9624c6098c89193d83575",
+  "EndBug/add-and-commit@b3c7c1e078a023d75fb0bd326e02962575ce0519",
   "dorny/paths-filter@eb75a1edc117d3756a18ef89958ee59f9500ba58",
 ];

.github/workflows/openapi-decorate.yml

@@ -25,13 +25,10 @@ jobs:
         run: script/rest/update-files.js --decorate-only
 
       - name: Check in the decorated files
-        uses: EndBug/add-and-commit@9358097a71ad9fb9e2f9624c6098c89193d83575
+        uses: EndBug/add-and-commit@b3c7c1e078a023d75fb0bd326e02962575ce0519
         with:
           # The arguments for the `git add` command
           add: 'lib/rest/static/decorated'
 
           # The message for the commit
           message: 'Add decorated OpenAPI schema files'
-
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # Leave this line unchanged

assets/images/help/dependabot/dependabot-secrets.png

@@ -1,6 +1,8 @@
 ---
 title: About securing your repository
 intro: '{% data variables.product.product_name %} provides a number of ways that you can help keep your repository secure.'
+redirect_from:
+  - /github/administering-a-repository/about-securing-your-repository
 versions:
   free-pro-team: '*'
   enterprise-server: '>=3.0'

assets/images/help/dependabot/secret-repository-access.png

@@ -0,0 +1,13 @@
+---
+title: Getting started with code security
+shortTitle: Getting started
+intro: 'Introduction to code security with {% data variables.product.product_name %}.'
+versions:
+  free-pro-team: '*'
+  enterprise-server: '>=3.0'
+  github-ae: '*'
+---
+
+### Table of Contents
+
+{% link_in_list /about-securing-your-repository %}

assets/images/help/dependabot/update-remove-org-secret.png

@@ -0,0 +1,19 @@
+---
+title: Code security
+shortTitle: Code security
+intro: 'Learn how to keep the code stored in your repositories secure.'
+versions:
+  free-pro-team: '*'
+  enterprise-server: '>=3.0'
+  github-ae: '*'
+---
+
+{% link_with_intro /getting-started %}
+
+{% link_with_intro /secret-security %}
+
+{% link_with_intro /secure-coding %}
+
+{% link_with_intro /security-advisories %}
+
+{% link_with_intro /supply-chain-security %}

assets/images/help/dependabot/update-remove-repo-secret.png

@@ -6,6 +6,7 @@ redirect_from:
   - /github/administering-a-repository/about-token-scanning
   - /articles/about-token-scanning
   - /articles/about-token-scanning-for-private-repositories
+  - /github/administering-a-repository/about-secret-scanning
 versions:
   free-pro-team: '*'
   enterprise-server: '>=3.0'