Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,4 @@ topics:
- CodeQL
children:
- /enabling-delegated-alert-dismissal-for-code-scanning
- /viewing-code-scanning-logs
---

Original file line number Diff line number Diff line change
Expand Up @@ -143,7 +143,7 @@ If you're an owner of an {% data variables.enterprise.prodname_emu_enterprise %}

## Further reading

* [AUTOTITLE](/code-security/getting-started/securing-your-repository){% ifversion security-configurations %}
* [AUTOTITLE](/code-security/securing-your-organization){% else %}
* [AUTOTITLE](/code-security/getting-started/quickstart-for-securing-your-organization){% endif %}
* [AUTOTITLE](/code-security/getting-started/securing-your-repository){% ifversion fpt or ghec %}
* [AUTOTITLE](/code-security/securing-your-organization){% elsif ghes %}
* [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-enterprise-security/establish-complete-coverage){% endif %}
* [AUTOTITLE](/code-security/adopting-github-advanced-security-at-scale/introduction-to-adopting-github-advanced-security-at-scale)
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,6 @@ topics:
- Repositories
shortTitle: Troubleshoot Dependabot
children:
- /viewing-dependabot-job-logs
- /dependabot-updates-stopped
- /troubleshooting-dependabot-on-github-actions
---
Expand Down
1 change: 1 addition & 0 deletions content/code-security/how-tos/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,4 +22,5 @@ children:
- /secure-your-supply-chain
- /maintain-quality-code
- /report-and-fix-vulnerabilities
- /view-and-interpret-data
---
Original file line number Diff line number Diff line change
Expand Up @@ -8,6 +8,7 @@ redirect_from:
- /code-security/secret-security/defining-custom-patterns-for-secret-scanning
- /code-security/secret-scanning/defining-custom-patterns-for-secret-scanning
- /code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/defining-custom-patterns-for-secret-scanning
- /code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns
versions:
fpt: '*'
ghes: '*'
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,21 +2,23 @@
title: Assessing adoption of security features
shortTitle: Assess adoption of features
allowTitleToDifferFromFilename: true
intro: 'You can use security overview to see which teams and repositories have already enabled features for secure coding, and identify any that are not yet protected.'
intro: You can use security overview to see which teams and repositories have already enabled features for secure coding, and identify any that are not yet protected.
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-both %}'
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
- Secret Protection
- 'Set up'
- Set up
- Organizations
- Teams
versions:
fpt: '*'
ghes: '*'
ghec: '*'
redirect_from:
- /code-security/security-overview/assessing-adoption-code-security
---

## About adoption of features for secure coding
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
title: Assessing the security risk of your code
shortTitle: Assess security risk of code
allowTitleToDifferFromFilename: true
intro: 'You can use security overview to see which teams and repositories are affected by security alerts, and identify repositories for urgent remedial action.'
intro: You can use security overview to see which teams and repositories are affected by security alerts, and identify repositories for urgent remedial action.
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-both %}'
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
Expand All @@ -19,6 +19,7 @@ versions:
ghec: '*'
redirect_from:
- /code-security/security-overview/viewing-the-security-overview
- /code-security/security-overview/assessing-code-security-risk
---

## Exploring the security risks in your code
Expand Down
Original file line number Diff line number Diff line change
@@ -1,10 +1,10 @@
---
title: 'Exporting the secret risk assessment report to CSV'
shortTitle: 'Export risk report CSV'
intro: 'Export the {% data variables.product.prodname_secret_risk_assessment %} report to a CSV file for detailed investigation and stakeholder sharing.'
title: Exporting the secret risk assessment report to CSV
shortTitle: Export risk report CSV
intro: Export the {% data variables.product.prodname_secret_risk_assessment %} report to a CSV file for detailed investigation and stakeholder sharing.
product: '{% data reusables.gated-features.secret-risk-assessment-report %}'
permissions: '{% data reusables.permissions.secret-risk-assessment-report-generation %}'
type: how_to
contentType: how-tos
versions:
feature: secret-risk-assessment
topics:
Expand All @@ -13,6 +13,8 @@ topics:
- Secret Protection
- Organizations
- Security
redirect_from:
- /code-security/securing-your-organization/understanding-your-organizations-exposure-to-leaked-secrets/export-risk-report-csv
---

{% data reusables.organizations.navigate-to-org %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@ permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-both %}'
versions:
feature: security-overview-export-data
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
Expand All @@ -16,6 +16,7 @@ topics:
- Teams
redirect_from:
- /code-security/security-overview/exporting-data-from-the-risk-and-coverage-pages
- /code-security/security-overview/exporting-data-from-security-overview
---

## About exporting your security overview data
Expand Down
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
---
title: How-tos for analyzing security data for an organization
shortTitle: Analyze organization data
intro: Learn how to assess security risks, track feature adoption, view key metrics, and export data to analyze your organization’s security posture.
versions:
fpt: '*'
ghes: '*'
ghec: '*'
topics:
- Secret Protection
- Secret scanning
- Code Security
- Code scanning
- Vulnerabilities
- Dependencies
- Dependabot
contentType: how-tos
children:
- /assessing-code-security-risk
- /assessing-adoption-code-security
- /exporting-data-from-security-overview
- /viewing-security-insights
- /interpreting-security-findings
- /viewing-metrics-for-pull-request-alerts
- /viewing-metrics-for-secret-scanning-push-protection
- /viewing-metrics-for-dependabot-alerts
- /export-risk-report-csv
---
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
---
title: Interpreting security findings
shortTitle: Interpret security data
intro: 'You can analyze security data on repositories in your organization to determine if you need to make changes to your security setup.'
intro: You can analyze security data on repositories in your organization to determine if you need to make changes to your security setup.
permissions: '{% data reusables.permissions.security-org-enable %}'
versions:
feature: security-configurations
Expand All @@ -10,8 +10,11 @@ topics:
- Secret Protection
- Organizations
- Security
contentType: how-tos
redirect_from:
- /code-security/securing-your-organization/managing-the-security-of-your-organization/interpreting-security-findings-on-a-repository
- /code-security/securing-your-organization/managing-the-security-of-your-organization/interpreting-security-findings
- /code-security/securing-your-organization/managing-the-security-of-your-organization
---

## About security findings
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,19 +2,21 @@
title: Viewing metrics for Dependabot alerts
shortTitle: View Dependabot metrics
allowTitleToDifferFromFilename: true
intro: 'You can use security overview to see how many {% data variables.product.prodname_dependabot_alerts %} are in repositories across your organization, to prioritize the most critical alerts to fix, and to identify repositories where you may need to take action.'
intro: You can use security overview to see how many {% data variables.product.prodname_dependabot_alerts %} are in repositories across your organization, to prioritize the most critical alerts to fix, and to identify repositories where you may need to take action.
versions:
feature: dependabot-metrics
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-cs-only %}'
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
- Dependabot
- Organizations
- Alerts
- Vulnerabilities
redirect_from:
- /code-security/security-overview/viewing-metrics-for-dependabot-alerts
---

## About metrics for {% data variables.product.prodname_dependabot %}
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,10 +2,10 @@
title: Viewing metrics for pull request alerts
shortTitle: View PR alert metrics
allowTitleToDifferFromFilename: true
intro: 'You can use security overview to see how {% data variables.product.prodname_codeql %} is performing in pull requests for repositories across your organizations, and to identify repositories where you may need to take action.'
intro: You can use security overview to see how {% data variables.product.prodname_codeql %} is performing in pull requests for repositories across your organizations, and to identify repositories where you may need to take action.
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-cs-only %}'
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
Expand All @@ -15,6 +15,8 @@ topics:
- Teams
versions:
feature: security-overview-org-codeql-pr-alerts
redirect_from:
- /code-security/security-overview/viewing-metrics-for-pull-request-alerts
---

## About {% data variables.product.prodname_codeql %} pull request alerts metrics
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,12 +2,13 @@
title: Viewing metrics for secret scanning push protection
shortTitle: View secret scanning metrics
allowTitleToDifferFromFilename: true
intro: 'You can use security overview to see how {% data variables.product.prodname_secret_scanning %} push protection is performing in repositories across your organization{% ifversion security-overview-enterprise-secret-scanning-metrics %} or enterprise{% endif %}, and to identify repositories where you may need to take action.'
intro: You can use security overview to see how {% data variables.product.prodname_secret_scanning %} push protection is performing in repositories across your organization{% ifversion security-overview-enterprise-secret-scanning-metrics %} or enterprise{% endif %}, and to identify repositories where you may need to take action.
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-sp-only %}'
type: how_to
contentType: how-tos
redirect_from:
- /code-security/security-overview/viewing-metrics-for-secret-scanning-push-protection-in-your-organization
- /code-security/security-overview/viewing-metrics-for-secret-scanning-push-protection-in-your-organization
- /code-security/security-overview/viewing-metrics-for-secret-scanning-push-protection
topics:
- Security overview
- Secret Protection
Expand Down
Original file line number Diff line number Diff line change
@@ -1,14 +1,14 @@
---
title: Viewing security insights
shortTitle: View security insights
intro: 'You can use the overview dashboard in security overview to monitor the security landscape of the repositories in your organization{% ifversion security-overview-dashboard-enterprise %} or enterprise{% endif %}.'
intro: You can use the overview dashboard in security overview to monitor the security landscape of the repositories in your organization{% ifversion security-overview-dashboard-enterprise %} or enterprise{% endif %}.
permissions: '{% data reusables.permissions.security-overview %}'
product: '{% data reusables.gated-features.security-overview-fpt-both %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: how-tos
topics:
- Security overview
- Code Security
Expand All @@ -17,11 +17,10 @@ topics:
- Organizations
redirect_from:
- /code-security/security-overview/viewing-security-insights-for-your-organization
- /code-security/security-overview/viewing-security-insights
allowTitleToDifferFromFilename: true
---



## {% ifversion security-overview-dashboard-enterprise %}About security insights{% else %} About organization-level security insights{% endif %}

The overview page in security overview is a consolidated dashboard of insights about your organization{% ifversion security-overview-dashboard-enterprise %} or enterprise{% endif %}'s security landscape and progress. You can use the dashboard to monitor the health of your application security program, collaborate with engineering teams, and gather data for benchmarking purposes.
Expand Down
23 changes: 23 additions & 0 deletions content/code-security/how-tos/view-and-interpret-data/index.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,23 @@
---
title: How-tos for viewing and interpreting security results
shortTitle: View and interpret data
intro: Discover how to analyze organization-level security data, interpret key insights and metrics, and export reports to assess your security posture.
versions:
fpt: '*'
ghes: '*'
ghec: '*'
topics:
- Secret Protection
- Secret scanning
- Code Security
- Code scanning
- Vulnerabilities
- Dependencies
- Dependabot
contentType: how-tos
children:
- /analyze-organization-data
- /viewing-code-scanning-logs
- /viewing-dependabot-job-logs
- /metrics-for-custom-patterns
---
Original file line number Diff line number Diff line change
@@ -1,16 +1,18 @@
---
title: Metrics for custom patterns
shortTitle: Custom pattern metrics
intro: 'You can view alert metrics for custom patterns at the repository, organization, and enterprise levels.'
intro: You can view alert metrics for custom patterns at the repository, organization, and enterprise levels.
permissions: '{% data reusables.permissions.security-enterprise-enable %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: how-tos
topics:
- Secret Protection
- Secret scanning
redirect_from:
- /code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/metrics-for-custom-patterns
---

## Metrics for custom patterns
Expand Down
Original file line number Diff line number Diff line change
@@ -1,14 +1,16 @@
---
title: Viewing code scanning logs
intro: 'You can view the output generated during {% data variables.product.prodname_code_scanning %} analysis in {% data variables.product.github %}.'
intro: You can view the output generated during {% data variables.product.prodname_code_scanning %} analysis in {% data variables.product.github %}.
permissions: '{% data reusables.permissions.code-scanning-pr-alerts %}'
redirect_from:
- /code-security/secure-coding/automatically-scanning-your-code-for-vulnerabilities-and-errors/viewing-code-scanning-logs
- /code-security/code-scanning/automatically-scanning-your-code-for-vulnerabilities-and-errors/viewing-code-scanning-logs
- /code-security/code-scanning/managing-your-code-scanning-configuration/viewing-code-scanning-logs
versions:
fpt: '*'
ghes: '*'
ghec: '*'
contentType: how-tos
topics:
- Security
shortTitle: View code scanning logs
Expand Down
Original file line number Diff line number Diff line change
@@ -1,13 +1,13 @@
---
title: Viewing Dependabot job logs
intro: 'To support debugging of {% data variables.product.prodname_dependabot %} pull requests, {% data variables.product.github %} provides logs of all {% data variables.product.prodname_dependabot %} jobs.'
shortTitle: Viewing Dependabot logs
intro: To support debugging of {% data variables.product.prodname_dependabot %} pull requests, {% data variables.product.github %} provides logs of all {% data variables.product.prodname_dependabot %} jobs.
shortTitle: View Dependabot logs
permissions: '{% data reusables.permissions.dependabot-various-tasks %}'
versions:
fpt: '*'
ghec: '*'
ghes: '*'
type: how_to
contentType: how-tos
topics:
- Dependabot
- Troubleshooting
Expand All @@ -16,6 +16,7 @@ topics:
- Dependencies
redirect_from:
- /code-security/dependabot/working-with-dependabot/viewing-dependabot-job-logs
- /code-security/dependabot/troubleshooting-dependabot/viewing-dependabot-job-logs
---

## About {% data variables.product.prodname_dependabot %} job logs
Expand Down
1 change: 1 addition & 0 deletions content/code-security/reference/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,4 +18,5 @@ contentType: reference
children:
- /code-scanning
- /supply-chain-security
- /permission-levels-for-repository-security-advisories
---
Original file line number Diff line number Diff line change
Expand Up @@ -8,15 +8,16 @@ redirect_from:
- /code-security/security-advisories/permission-levels-for-security-advisories
- /code-security/repository-security-advisories/permission-levels-for-repository-security-advisories
- /code-security/security-advisories/repository-security-advisories/permission-levels-for-repository-security-advisories
- /code-security/security-advisories/working-with-repository-security-advisories/permission-levels-for-repository-security-advisories
versions:
fpt: '*'
ghec: '*'
type: reference
topics:
- Security advisories
- Vulnerabilities
- Permissions
shortTitle: Permission levels
contentType: reference
---

## Permissions overview
Expand Down
Loading
Loading