Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -11,6 +11,8 @@ redirect_from:
- /code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/upgrading-from-dependabotcom-to-github-native-dependabot
- /code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/about-dependabot-version-updates
- /code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates
- /code-security/dependabot/dependabot-version-updates
- /code-security/supply-chain-security/keeping-your-dependencies-updated-automatically
versions:
fpt: '*'
ghec: '*'
Expand Down

This file was deleted.

1 change: 0 additions & 1 deletion content/code-security/dependabot/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,6 @@ topics:
children:
- /dependabot-alerts
- /dependabot-auto-triage-rules
- /dependabot-version-updates
- /working-with-dependabot
- /troubleshooting-dependabot
---
Original file line number Diff line number Diff line change
Expand Up @@ -14,9 +14,6 @@ topics:
- Dependencies
- Pull requests
children:
- /automating-dependabot-with-github-actions
- /configuring-multi-ecosystem-updates
- /setting-dependabot-to-run-on-self-hosted-runners-using-arc
- /setting-dependabot-to-run-on-github-hosted-runners-using-vnet
---

1 change: 0 additions & 1 deletion content/code-security/getting-started/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,6 @@ topics:
- Vulnerabilities
children:
- /github-security-features
- /dependabot-quickstart-guide
- /quickstart-for-securing-your-repository
- /quickstart-for-securing-your-organization
- /understanding-github-secret-types
Expand Down
3 changes: 2 additions & 1 deletion content/code-security/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,7 @@ featuredLinks:
- '{% ifversion fpt or ghec %}/code-security/getting-started/github-security-features{% endif %}'
- /code-security/getting-started/quickstart-for-securing-your-repository
- '{% ifversion ghes %}/code-security/secret-scanning/working-with-secret-scanning-and-push-protection{% endif %}'
- /code-security/getting-started/dependabot-quickstart-guide
- /code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide
- /code-security/how-tos/scan-code-for-vulnerabilities/configure-code-scanning/configuring-default-setup-for-code-scanning
guideCards:
- /code-security/trialing-github-advanced-security/planning-a-trial-of-ghas
Expand Down Expand Up @@ -59,3 +59,4 @@ children:
- /tutorials
- /responsible-use
---

Original file line number Diff line number Diff line change
Expand Up @@ -10,8 +10,6 @@ topics:
- Repositories
shortTitle: Understand your supply chain
children:
- /customizing-your-dependency-review-action-configuration
- /enforcing-dependency-review-across-an-organization
- /troubleshooting-the-dependency-graph
---

1 change: 1 addition & 0 deletions content/code-security/tutorials/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,7 @@ children:
- /remediate-leaked-secrets
- /secret-scanning-partner-program
- /customize-code-scanning
- /secure-your-dependencies
- /implement-supply-chain-best-practices
- /manage-security-alerts
- /improve-code-quality
Expand Down
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
---
title: Automating Dependabot with GitHub Actions
intro: 'Examples of how you can use {% data variables.product.prodname_actions %} to automate common {% data variables.product.prodname_dependabot %} related tasks.'
intro: Examples of how you can use {% data variables.product.prodname_actions %} to automate common {% data variables.product.prodname_dependabot %} related tasks.
permissions: '{% data reusables.permissions.dependabot-various-tasks %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: tutorials
topics:
- Actions
- Dependabot
Expand All @@ -18,6 +18,7 @@ topics:
shortTitle: Use Dependabot with Actions
redirect_from:
- /code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/automating-dependabot-with-github-actions
- /code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
---

{% ifversion dependabot-on-actions-opt-in %}
Expand Down
Original file line number Diff line number Diff line change
@@ -1,9 +1,9 @@
---
title: Configuring multi-ecosystem updates for Dependabot
intro: 'Learn how to configure {% data variables.product.prodname_dependabot %} to group updates across different ecosystems so that you receive a single, consolidated pull request per group instead of one pull request for each ecosystem.'
intro: Learn how to configure {% data variables.product.prodname_dependabot %} to group updates across different ecosystems so that you receive a single, consolidated pull request per group instead of one pull request for each ecosystem.
permissions: '{% data reusables.permissions.dependabot-yml-configure %}'
allowTitleToDifferFromFilename: true
type: how_to
contentType: tutorials
versions:
fpt: '*'
ghec: '*'
Expand All @@ -14,7 +14,9 @@ topics:
- Repositories
- Dependencies
- Pull requests
shortTitle: Multi-ecosystem updates
shortTitle: Configure multi-ecosystem updates
redirect_from:
- /code-security/dependabot/working-with-dependabot/configuring-multi-ecosystem-updates
---

## About multi-ecosystem updates
Expand Down
Original file line number Diff line number Diff line change
@@ -1,20 +1,22 @@
---
title: Customizing Dependabot pull requests to fit your processes
intro: 'Learn how to tailor your Dependabot pull requests to better suit your own internal workflows.'
intro: Learn how to tailor your Dependabot pull requests to better suit your own internal workflows.
allowTitleToDifferFromFilename: true
permissions: '{% data reusables.permissions.dependabot-yml-configure %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: tutorials
topics:
- Dependabot
- Version updates
- Repositories
- Dependencies
- Pull requests
shortTitle: Customize Dependabot PRs
redirect_from:
- /code-security/dependabot/dependabot-version-updates/customizing-dependabot-prs
---

There are various ways to customize your {% data variables.product.prodname_dependabot %} pull requests so that they better suit your own internal processes.
Expand Down
Original file line number Diff line number Diff line change
@@ -1,17 +1,19 @@
---
title: Customizing your dependency review action configuration
shortTitle: Customize dependency review action
intro: 'Learn how to add a basic customization to your dependency review action configuration.'
intro: Learn how to add a basic customization to your dependency review action configuration.
permissions: '{% data reusables.permissions.security-repo-enable %}'
versions:
fpt: '*'
ghes: '*'
ghec: '*'
type: tutorial
contentType: tutorials
topics:
- Dependency graph
- Dependencies
- Repositories
redirect_from:
- /code-security/supply-chain-security/understanding-your-software-supply-chain/customizing-your-dependency-review-action-configuration
---

## Introduction
Expand Down
Original file line number Diff line number Diff line change
@@ -1,19 +1,21 @@
---
title: Dependabot quickstart guide
intro: 'Find and fix vulnerable dependencies you rely on with {% data variables.product.prodname_dependabot %}.'
intro: Find and fix vulnerable dependencies you rely on with {% data variables.product.prodname_dependabot %}.
product: '{% data reusables.gated-features.dependabot-alerts %}'
versions:
fpt: '*'
ghes: '*'
ghec: '*'
type: quick_start
contentType: tutorials
topics:
- Dependabot
- Alerts
- Vulnerabilities
- Repositories
- Dependencies
shortTitle: Dependabot quickstart
redirect_from:
- /code-security/getting-started/dependabot-quickstart-guide
---

## About {% data variables.product.prodname_dependabot %}
Expand Down
18 changes: 18 additions & 0 deletions content/code-security/tutorials/secure-your-dependencies/index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,18 @@
---
title: Secure your dependencies
shortTitle: Secure your dependencies
intro: Build skills to help you keep your dependencies up to date and protected from vulnerabilities using automated tools and workflows.
versions:
fpt: '*'
ghes: '*'
ghec: '*'
contentType: tutorials
children:
- /dependabot-quickstart-guide
- /automating-dependabot-with-github-actions
- /optimizing-pr-creation-version-updates
- /setting-dependabot-to-run-on-self-hosted-runners-using-arc
- /configuring-multi-ecosystem-updates
- /customizing-dependabot-prs
- /customizing-your-dependency-review-action-configuration
---
Original file line number Diff line number Diff line change
@@ -1,20 +1,22 @@
---
title: Optimizing the creation of pull requests for Dependabot version updates
intro: 'Learn how to streamline and efficiently manage your {% data variables.product.prodname_dependabot %} pull requests.'
intro: Learn how to streamline and efficiently manage your {% data variables.product.prodname_dependabot %} pull requests.
allowTitleToDifferFromFilename: true
permissions: '{% data reusables.permissions.dependabot-yml-configure %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: tutorials
topics:
- Dependabot
- Version updates
- Repositories
- Dependencies
- Pull requests
shortTitle: Optimize PR creation
redirect_from:
- /code-security/dependabot/dependabot-version-updates/optimizing-pr-creation-version-updates
---

By default, {% data variables.product.prodname_dependabot %} opens a new pull request to update each dependency. When you enable security updates, new pull requests are opened when a vulnerable dependency is found. When you configure version updates for one or more ecosystems, new pull requests are opened when new versions of dependencies are available, with the frequency defined in the `dependabot.yml` file.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -11,8 +11,11 @@ topics:
- Security updates
- Dependencies
- Pull requests
contentType: tutorials
allowTitleToDifferFromFilename: true
shortTitle: Configure ARC
redirect_from:
- /code-security/dependabot/working-with-dependabot/setting-dependabot-to-run-on-self-hosted-runners-using-arc
---

## Working with the {% data variables.product.prodname_actions_runner_controller %} (ARC)
Expand Down
4 changes: 2 additions & 2 deletions data/learning-tracks/code-security.yml
Original file line number Diff line number Diff line change
Expand Up @@ -86,13 +86,13 @@ dependency_version_updates:
- >-
/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/configuring-dependabot-version-updates
- >-
/code-security/dependabot/dependabot-version-updates/customizing-dependabot-prs
/code-security/tutorials/secure-your-dependencies/customizing-dependabot-prs
- >-
/code-security/reference/supply-chain-security/dependabot-options-reference
- >-
/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/keeping-your-actions-up-to-date-with-dependabot
- >-
/code-security/dependabot/working-with-dependabot/automating-dependabot-with-github-actions
/code-security/tutorials/secure-your-dependencies/automating-dependabot-with-github-actions
- >-
/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/listing-dependencies-configured-for-version-updates
- >-
Expand Down
Loading