Skip to content

Commit ce3d360

Browse files
OctomergerOctomerger
authored
repo sync
2 parents 9f9e132 + 4ce3cb1 commit ce3d360

20 files changed

Lines changed: 121 additions & 39 deletions

‎assets/images/help/enterprises/click-advanced-security.png‎

34.6 KB
Loading

‎assets/images/help/enterprises/select-advanced-security-individual-organization-policy.png‎

118 KB
Loading

‎assets/images/help/enterprises/select-advanced-security-organization-policy.png‎

207 KB
Loading

‎content/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise.md‎

Lines changed: 22 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,22 @@
1+
---
2+
title: Enforcing policies for Advanced Security in your enterprise
3+
intro: 'Enterprise owners can enforce policies to manage {% data variables.product.prodname_GH_advanced_security %} features for organizations on {% data variables.product.product_location %}.'
4+
product: '{% data reusables.gated-features.ghas %}'
5+
versions:
6+
enterprise-server: '>=3.1'
7+
github-ae: 'next'
8+
---
9+
10+
### About {% data variables.product.prodname_GH_advanced_security %}
11+
12+
{% data reusables.advanced-security.ghas-helps-developers %}
13+
14+
### Enforcing a policy for {% data variables.product.prodname_advanced_security %} features
15+
16+
{% data reusables.advanced-security.about-ghas-organization-policy %}
17+
18+
{% data reusables.enterprise-accounts.access-enterprise %}
19+
{% data reusables.enterprise-accounts.policies-tab %}
20+
{% data reusables.enterprise-accounts.advanced-security-policies %}
21+
{% data reusables.enterprise-accounts.advanced-security-organization-policy-drop-down %}
22+
{% data reusables.enterprise-accounts.advanced-security-individual-organization-policy-drop-down %}

‎content/admin/policies/index.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ topics:
1616

1717
{% topic_link_in_list /enforcing-policies-for-your-enterprise %}
1818
{% link_in_list /enforcing-repository-management-policies-in-your-enterprise %}
19+
{% link_in_list /enforcing-policies-for-advanced-security-in-your-enterprise %}
1920
{% topic_link_in_list /enforcing-policy-with-pre-receive-hooks %}
2021
{% link_in_list /about-pre-receive-hooks %}
2122
{% link_in_list /creating-a-pre-receive-hook-environment %}

‎content/admin/user-management/audited-actions.md‎

Lines changed: 4 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -53,9 +53,10 @@ Action | Description
5353
#### Enterprise configuration settings
5454

5555
Action | Description
56-
----------------------------------------------- | -------------------------------------------
57-
`business.update_member_repository_creation_permission` | A site admin restricts repository creation in organizations in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation)."
58-
`business.clear_members_can_create_repos` | A site admin clears a restriction on repository creation in organizations in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation)."{% if enterpriseServerVersions contains currentVersion %}
56+
----------------------------------------------- | -------------------------------------------{% if currentVersion ver_gt "enterprise-server@3.0" or currentVersion == "github-ae@next" %}
57+
`business.advanced_security_policy_update` | A site admin updates a policy for {% data variables.product.prodname_GH_advanced_security %}. For more information, see "[About {% data variables.product.prodname_GH_advanced_security %}](/github/getting-started-with-github/about-github-advanced-security)."{% endif %}
58+
`business.clear_members_can_create_repos` | A site admin clears a restriction on repository creation in organizations in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation)."
59+
`business.update_member_repository_creation_permission` | A site admin restricts repository creation in organizations in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#setting-a-policy-for-repository-creation)."{% if enterpriseServerVersions contains currentVersion %}
5960
`enterprise.config.lock_anonymous_git_access` | A site admin locks anonymous Git read access to prevent repository admins from changing existing anonymous Git read access settings for repositories in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#configuring-anonymous-git-read-access)."
6061
`enterprise.config.unlock_anonymous_git_access` | A site admin unlocks anonymous Git read access to allow repository admins to change existing anonymous Git read access settings for repositories in the enterprise. For more information, see "[Enforcing repository management policies in your enterprise](/admin/policies/enforcing-repository-management-policies-in-your-enterprise#configuring-anonymous-git-read-access)."{% endif %}
6162

‎content/github/getting-started-with-github/about-github-advanced-security.md‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -54,3 +54,17 @@ For other repositories, once you have a license for your enterprise account, you
5454
If you have an enterprise account, license use for the entire enterprise is shown on your enterprise license page. For more information, see "[Viewing your {% data variables.product.prodname_GH_advanced_security %} usage](/github/setting-up-and-managing-billing-and-payments-on-github/viewing-your-github-advanced-security-usage)."
5555

5656
{% endif %}
57+
58+
{% if currentVersion == "free-pro-team@latest" %}
59+
60+
### Further reading
61+
62+
- "[Enforcing policies for {% data variables.product.prodname_advanced_security %} in your enterprise account](/github/setting-up-and-managing-your-enterprise/enforcing-policies-for-advanced-security-in-your-enterprise-account)"
63+
64+
{% elsif currentVersion ver_gt "enterprise-server@3.0" or currentVersion == "github-ae@next" %}
65+
66+
### Further reading
67+
68+
- "[Enforcing policies for {% data variables.product.prodname_advanced_security %} in your enterprise](/admin/policies/enforcing-policies-for-advanced-security-in-your-enterprise)"
69+
70+
{% endif %}

‎content/github/setting-up-and-managing-billing-and-payments-on-github/about-licensing-for-github-advanced-security.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -37,7 +37,9 @@ If you are over your license limit, {% data variables.product.prodname_GH_advanc
3737

3838
As soon as you free up some seats, by disabling {% data variables.product.prodname_GH_advanced_security %} for some repositories or by increasing your license size, the options for enabling {% data variables.product.prodname_GH_advanced_security %} will work again as normal.
3939

40-
For information on viewing usage, see "[Viewing your GitHub Advanced Security usage](/github/setting-up-and-managing-billing-and-payments-on-github/viewing-your-github-advanced-security-usage)."
40+
You can enforce policies to allow or disallow the use of {% data variables.product.prodname_advanced_security %} by organizations owned by your enterprise account. For more information, see "[Enforcing policies for {% data variables.product.prodname_advanced_security %} in your enterprise account](/github/setting-up-and-managing-your-enterprise/enforcing-policies-for-advanced-security-in-your-enterprise-account)."
41+
42+
For more information on viewing license usage, see "[Viewing your {% data variables.product.prodname_GH_advanced_security %} usage](/github/setting-up-and-managing-billing-and-payments-on-github/viewing-your-github-advanced-security-usage)."
4143

4244
### Getting the most out of your {% data variables.product.prodname_GH_advanced_security %} license
4345

‎content/github/setting-up-and-managing-organizations-and-teams/reviewing-the-audit-log-for-your-organization.md‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -344,9 +344,9 @@ For more information, see "[Managing the publication of {% data variables.produc
344344
#### `org` category actions
345345

346346
| Action | Description
347-
|------------------|-------------------{% if currentVersion == "free-pro-team@latest"%}
348-
| `advanced_security_disabled` | Triggered when an organization admin disables {% data variables.product.prodname_GH_advanced_security %} for all existing private and internal repositories. For more information, see "[Managing security and analysis settings for your organization](/github/setting-up-and-managing-organizations-and-teams/managing-security-and-analysis-settings-for-your-organization)."
349-
| `advanced_security_enabled` | Triggered when an organization admin enables {% data variables.product.prodname_GH_advanced_security %} for all existing private and internal repositories.
347+
|------------------|-------------------{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.0" or currentVersion == "github-ae@next" %}
348+
| `advanced_security_policy_selected_member_disabled` | Triggered when an enterprise owner prevents {% data variables.product.prodname_GH_advanced_security %} features from being enabled for repositories owned by the organization. {% data reusables.advanced-security.more-information-about-enforcement-policy %}
349+
| `advanced_security_policy_selected_member_enabled` | Triggered when an enterprise owner allows {% data variables.product.prodname_GH_advanced_security %} features to be enabled for repositories owned by the organization. {% data reusables.advanced-security.more-information-about-enforcement-policy %}{% endif %}{% if currentVersion == "free-pro-team@latest" %}
350350
| `audit_log_export` | Triggered when an organization admin [creates an export of the organization audit log](#exporting-the-audit-log). If the export included a query, the log will list the query used and the number of audit log entries matching that query.
351351
| `block_user` | Triggered when an organization owner [blocks a user from accessing the organization's repositories](/articles/blocking-a-user-from-your-organization).
352352
| `cancel_invitation` | Triggered when an organization invitation has been revoked. {% endif %}{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@2.21" %}
@@ -490,9 +490,9 @@ For more information, see "[Managing the publication of {% data variables.produc
490490
| `access` | Triggered when a user [changes the visibility](/github/administering-a-repository/setting-repository-visibility) of a repository in the organization.
491491
| `actions_enabled` | Triggered when {% data variables.product.prodname_actions %} is enabled for a repository. Can be viewed using the UI. This event is not included when you access the audit log using the REST API. For more information, see "[Using the REST API](#using-the-rest-api)."
492492
| `add_member` | Triggered when a user accepts an [invitation to have collaboration access to a repository](/articles/inviting-collaborators-to-a-personal-repository).
493-
| `add_topic` | Triggered when a repository admin [adds a topic](/articles/classifying-your-repository-with-topics) to a repository.{% if currentVersion == "free-pro-team@latest" %}
494-
| `advanced_security_disabled` | Triggered when a repository owner disables {% data variables.product.prodname_GH_advanced_security %}. For more information, see "[Managing security and analysis settings for your repository](/github/administering-a-repository/managing-security-and-analysis-settings-for-your-repository)."
495-
| `advanced_security_enabled` | Triggered when a repository owner enables {% data variables.product.prodname_GH_advanced_security %}.{% endif %}
493+
| `add_topic` | Triggered when a repository admin [adds a topic](/articles/classifying-your-repository-with-topics) to a repository.{% if currentVersion == "free-pro-team@latest" or currentVersion ver_gt "enterprise-server@3.0" or currentVersion == "github-ae@next" %}
494+
| `advanced_security_disabled` | Triggered when a repository administrator disables {% data variables.product.prodname_GH_advanced_security %} features for the repository. For more information, see "[Managing security and analysis settings for your repository](/github/administering-a-repository/managing-security-and-analysis-settings-for-your-repository)."
495+
| `advanced_security_enabled` | Triggered when a repository administrator enables {% data variables.product.prodname_GH_advanced_security %} features for the repository. For more information, see "[Managing security and analysis settings for your repository](/github/administering-a-repository/managing-security-and-analysis-settings-for-your-repository).".{% endif %}
496496
| `archived` | Triggered when a repository admin [archives a repository](/articles/about-archiving-repositories).{% if enterpriseServerVersions contains currentVersion %}
497497
| `config.disable_anonymous_git_access` | Triggered when [anonymous Git read access is disabled](/enterprise/{{ currentVersion }}/user/articles/enabling-anonymous-git-read-access-for-a-repository) in a public repository.
498498
| `config.enable_anonymous_git_access` | Triggered when [anonymous Git read access is enabled](/enterprise/{{ currentVersion }}/user/articles/enabling-anonymous-git-read-access-for-a-repository) in a public repository.

‎content/github/setting-up-and-managing-your-enterprise/enforcing-policies-for-advanced-security-in-your-enterprise-account.md‎

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
---
2+
title: Enforcing policies for Advanced Security in your enterprise account
3+
intro: 'Enterprise owners can enforce policies to manage {% data variables.product.prodname_GH_advanced_security %} features for organizations owned by an enterprise account.'
4+
product: '{% data reusables.gated-features.ghas %}'
5+
versions:
6+
free-pro-team: '*'
7+
---
8+
9+
### About {% data variables.product.prodname_GH_advanced_security %}
10+
11+
{% data reusables.advanced-security.ghas-helps-developers %}
12+
13+
### Enforcing a policy for {% data variables.product.prodname_advanced_security %} features
14+
15+
{% data reusables.advanced-security.about-ghas-organization-policy %}
16+
17+
{% data reusables.enterprise-accounts.access-enterprise %}
18+
{% data reusables.enterprise-accounts.policies-tab %}
19+
{% data reusables.enterprise-accounts.advanced-security-policies %}
20+
{% data reusables.enterprise-accounts.advanced-security-organization-policy-drop-down %}
21+
{% data reusables.enterprise-accounts.advanced-security-individual-organization-policy-drop-down %}

0 commit comments

Comments
 (0)