Skip to content

Commit 6d4e43b

Browse files
authored
[EDI] Configuring Dependabot alerts (#59231)
1 parent 69923d4 commit 6d4e43b

1 file changed

Lines changed: 9 additions & 12 deletions

File tree

content/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configuring-dependabot-alerts.md

Lines changed: 9 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -20,25 +20,18 @@ redirect_from:
2020
contentType: how-tos
2121
---
2222

23-
## About {% data variables.product.prodname_dependabot_alerts %} for vulnerable dependencies
24-
25-
{% data reusables.repositories.a-vulnerability-is %}
26-
27-
{% data variables.product.prodname_dependabot %} scans code when a new advisory is added to the {% data variables.product.prodname_advisory_database %} or the dependency graph for a repository changes. When vulnerable dependencies are detected, {% data variables.product.prodname_dependabot_alerts %} are generated. For more information, see [AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts).
28-
29-
{% data reusables.dependabot.dependabot-alert-create-PR %}
30-
31-
{% ifversion ghes %}
32-
> [!NOTE]
33-
> An enterprise owner must first set up {% data variables.product.prodname_dependabot %} for your enterprise before you can configure {% data variables.product.prodname_dependabot_alerts %}. For more information, see [AUTOTITLE](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise).{% endif %}
23+
When {% data variables.product.prodname_dependabot %} detects vulnerable dependencies in a repository, it generates alerts. For more information, see [AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts).
3424

3525
You can enable or disable {% data variables.product.prodname_dependabot_alerts %} for:
3626
* Your personal account
3727
* Your repository
3828
* Your organization{% ifversion dependabot-alerts-enterprise-enablement or ghes %}
3929
* Your enterprise{% endif %}
4030

41-
{% data reusables.dependabot.dependabot-alert-rules %}
31+
{% ifversion ghes %}
32+
> [!NOTE]
33+
> An enterprise owner must first set up {% data variables.product.prodname_dependabot %} for your enterprise before you can configure {% data variables.product.prodname_dependabot_alerts %}. For more information, see [AUTOTITLE](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise).
34+
{% endif %}
4235

4336
## Managing {% data variables.product.prodname_dependabot_alerts %} for your personal account
4437

@@ -129,3 +122,7 @@ You can enable or disable {% data variables.product.prodname_dependabot_alerts %
129122
{% endif %}
130123

131124
{% endif %}
125+
126+
## Managing {% data variables.product.prodname_dependabot_alerts %} at scale with rules
127+
128+
{% data reusables.dependabot.dependabot-alert-rules %}

0 commit comments

Comments
 (0)