Skip to content

Commit afe0b18

Browse files
committed
finish addressing comments
1 parent 395dd6a commit afe0b18

5 files changed

Lines changed: 16 additions & 9 deletions

File tree

content/github/managing-security-vulnerabilities/about-dependabot-security-updates.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ The {% data variables.product.prodname_dependabot_security_updates %} feature is
2222

2323
{% endnote %}
2424

25-
If you enable version updates, {% data variables.product.prodname_dependabot %} will raise pull requests to update the manifest to the latest version of the dependency, whenever it detects an outdated dependency. For more information, see "[About {% data variables.product.prodname_dependabot %} version updates](/github/administering-a-repository/about-dependabot-version-updates)."
25+
You can enable a related feature, {% data variables.product.prodname_dependabot_version_updates %}, so that {% data variables.product.prodname_dependabot %} raises pull requests to update the manifest to the latest version of the dependency, whenever it detects an outdated dependency. For more information, see "[About {% data variables.product.prodname_dependabot %} version updates](/github/administering-a-repository/about-dependabot-version-updates)."
2626

2727
{% data reusables.dependabot.pull-request-security-vs-version-updates %}
2828

content/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -13,8 +13,6 @@ versions:
1313

1414
{% data variables.product.prodname_dotcom %} can help secure the repositories in your organization. You can manage the security and analysis features for all existing or new repositories that members create in your organization. {% if currentVersion == "free-pro-team@latest" %}If you have a license for {% data variables.product.prodname_GH_advanced_security %} then you can also manage access to these features. {% data reusables.advanced-security.more-info-ghas %}{% endif %}
1515

16-
{% data reusables.security.displayed-information %}
17-
1816
{% data reusables.security.some-security-and-analysis-features-are-enabled-by-default %}
1917
{% data reusables.security.security-and-analysis-features-enable-read-only %}
2018

@@ -67,6 +65,8 @@ You can enable or disable features for all repositories. {% if currentVersion ==
6765
![Button to disable or enable feature](/assets/images/help/organizations/security-and-analysis-enable-secret-scanning-ghe.png)
6866
{% endif %}
6967

68+
{% data reusables.security.displayed-information %}
69+
7070
### Enabling or disabling a feature automatically when new repositories are added
7171

7272
1. Go to the security and analysis settings for your organization. For more information, see "[Displaying the security and analysis settings](#displaying-the-security-and-analysis-settings)."

content/github/setting-up-and-managing-your-github-user-account/managing-security-and-analysis-settings-for-your-user-account.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,6 @@ versions:
99

1010
{% data variables.product.prodname_dotcom %} can help secure your repositories. This topic tells you how you can manage the security and analysis features for all your existing or new repositories.
1111

12-
{% data reusables.security.displayed-information %}
13-
1412
You can still manage the security and analysis features for individual repositories. For more information, see "[Managing security and analysis settings for your repository](/github/administering-a-repository/managing-security-and-analysis-settings-for-your-repository)."
1513

1614
{% data reusables.security.some-security-and-analysis-features-are-enabled-by-default %}
@@ -30,6 +28,8 @@ For an overview of repository-level security, see "[About securing your reposito
3028
7. Click **Disable FEATURE** or **Enable FEATURE** to disable or enable the feature for all the repositories you own.
3129
![Button to disable or enable feature](/assets/images/help/settings/security-and-analysis-enable-dependency-graph.png)
3230

31+
{% data reusables.security.displayed-information %}
32+
3333
### Enabling or disabling features for new repositories
3434

3535
{% data reusables.user_settings.access_settings %}
Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1-
When {% data variables.product.prodname_dependabot %} raises a pull requests, the location in {% data variables.product.prodname_dotcom %} you see the results in depends on whether the pull request was raised for version updates or security updates:
2-
- For version updates, nagivate to your _dependabot.yml_ file (in the `.github` directory of your repository), and look at the results in the Insights tab of your repository (under Dependency Graph, then Dependencies).
3-
- For security updates, navigate to the Security tab for your repository, and click **Dependabot alerts** on the left sidebar.
1+
When {% data variables.product.prodname_dependabot %} raises pull requests, these pull requests could be for _version_ or _security_ updates:
2+
3+
- {% data variables.product.prodname_dependabot_version_updates %} are automated pull requests that help you update dependencies with known vulnerabilities. To check the status of version updates, navigate to the Insights tab of your repository, then Dependency Graph, and {% data variables.product.prodname_dependabot %}.
4+
- {% data variables.product.prodname_dependabot_security_updates %} are automated pull requests that keep your dependencies updated, even when they don’t have any vulnerabilities.
Lines changed: 7 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1,7 @@
1-
When you enable one or more security and analysis features for existing repositories, you will see the appropriate information displayed on {% data variables.product.prodname_dotcom %} within minutes.
1+
When you enable one or more security and analysis features for existing repositories, you will see the appropriate results displayed on {% data variables.product.prodname_dotcom %} within minutes:
2+
3+
- All the existing repositories will have the selected configuration.
4+
- New repositories will follow the selected configuration if you've enabled the checkbox for new repositories.{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@2.22" %}
5+
- We use the permissions to scan for manifest files to apply the relevant services.{% endif %}
6+
- You'll see information on your dependency graph.
7+
- {% data variables.product.prodname_dotcom %} will generate {% data variables.product.prodname_dependabot_alerts %} and raise pull requests

0 commit comments

Comments
 (0)