You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -69,7 +69,7 @@ You can customize your {% data variables.product.prodname_codeql %} analysis by
69
69
1. Scroll down to the "{% data variables.product.prodname_code_scanning_caps %}" section, select **Set up** {% octicon "triangle-down" aria-hidden="true" %}, then click **Advanced**.
70
70
71
71
> [!NOTE]
72
-
> If you are switching from default setup to advanced setup, in the "{% data variables.product.prodname_code_scanning_caps %}" section, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click {% octicon "workflow" aria-hidden="true" %} **Switch to advanced**. In the pop-up window that appears, click **Disable {% data variables.product.prodname_codeql %}**.
72
+
> If you are switching from default setup to advanced setup, in the "{% data variables.product.prodname_code_scanning_caps %}" section, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click **{% octicon "workflow" aria-hidden="true" %} Switch to advanced**. In the pop-up window that appears, click **Disable {% data variables.product.prodname_codeql %}**.
73
73
74
74

Copy file name to clipboardExpand all lines: content/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning.md
+3-3
Original file line number
Diff line number
Diff line change
@@ -98,7 +98,7 @@ When you initially configure default setup for {% data variables.product.prodnam
98
98
{% data reusables.repositories.navigate-to-repo %}
99
99
100
100
> [!NOTE]
101
-
> If you are configuring default setup on a fork, you must first enable {% data variables.product.prodname_actions %}. To enable {% data variables.product.prodname_actions %}, under your repository name, click {% octicon "play" aria-hidden="true" %} **Actions**, then click **I understand my workflows, go ahead and enable them**. Be aware that this will enable all existing workflows on your fork.
101
+
> If you are configuring default setup on a fork, you must first enable {% data variables.product.prodname_actions %}. To enable {% data variables.product.prodname_actions %}, under your repository name, click **{% octicon "play" aria-hidden="true" %} Actions**, then click **I understand my workflows, go ahead and enable them**. Be aware that this will enable all existing workflows on your fork.
102
102
103
103
{% data reusables.repositories.sidebar-settings %}
104
104
{% data reusables.user-settings.security-analysis %}
@@ -113,7 +113,7 @@ When you initially configure default setup for {% data variables.product.prodnam
113
113
> [!NOTE]
114
114
> If your repository contains _only_ compiled {% data variables.product.prodname_codeql %}-supported languages (for example, Java), you will be taken to the settings page to select the languages you want to add to your default setup configuration.
115
115
116
-
1. Optionally, to customize your {% data variables.product.prodname_code_scanning %} setup, click {% octicon "pencil" aria-hidden="true" %} **Edit**.
116
+
1. Optionally, to customize your {% data variables.product.prodname_code_scanning %} setup, click **{% octicon "pencil" aria-hidden="true" %} Edit**.
117
117
* To add or remove a language from the analysis performed by default setup, select or deselect that language in the "Languages" section. {% ifversion code-scanning-default-setup-recommended-languages %}If you would like to analyze a {% data variables.product.prodname_codeql %}-supported compiled language with default setup, select that language here.{% endif %}
118
118
* To specify the {% data variables.product.prodname_codeql %} query suite you would like to use, select your preferred query suite in the "Query suites" section.
119
119
@@ -135,7 +135,7 @@ When you initially configure default setup for {% data variables.product.prodnam
135
135
> [!NOTE]
136
136
> If you are switching to default setup from advanced setup, you will see a warning informing you that default setup will override existing {% data variables.product.prodname_code_scanning %} configurations. This warning means default setup will disable the existing workflow file and block any {% data variables.product.prodname_codeql %} analysis API uploads.
137
137
138
-
1. Optionally, to view your default setup configuration after enablement, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click {% octicon "gear" aria-hidden="true" %} **View {% data variables.product.prodname_codeql %} configuration**.
138
+
1. Optionally, to view your default setup configuration after enablement, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click **{% octicon "gear" aria-hidden="true" %} View {% data variables.product.prodname_codeql %} configuration**.
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/managing-your-code-scanning-configuration/editing-your-configuration-of-default-setup.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -34,8 +34,8 @@ If you need to change any other aspects of your {% data variables.product.prodna
34
34
{% data reusables.repositories.navigate-to-repo %}
35
35
{% data reusables.repositories.sidebar-settings %}
36
36
{% data reusables.user-settings.security-analysis %}
37
-
1. In the "{% data variables.product.prodname_codeql %} analysis" row of the "{% data variables.product.prodname_code_scanning_caps %}" section, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click {% octicon "gear" aria-hidden="true" %} **View {% data variables.product.prodname_codeql %} configuration**.
38
-
1. In the "{% data variables.product.prodname_codeql %} default configuration" window, click {% octicon "pencil" aria-hidden="true" %} **Edit**.
37
+
1. In the "{% data variables.product.prodname_codeql %} analysis" row of the "{% data variables.product.prodname_code_scanning_caps %}" section, select {% octicon "kebab-horizontal" aria-label="Menu" %}, then click **{% octicon "gear" aria-hidden="true" %} View {% data variables.product.prodname_codeql %} configuration**.
38
+
1. In the "{% data variables.product.prodname_codeql %} default configuration" window, click **{% octicon "pencil" aria-hidden="true" %} Edit**.
39
39
1. Optionally, in the "Languages" section, select or deselect languages for analysis.
40
40
1. Optionally, in the "Query suite" row of the "Scan settings" section, select a different query suite to run against your code.{% ifversion codeql-threat-models %}
41
41
1. ({% data variables.release-phases.public_preview_caps %}) Optionally, in the "Threat model" row of the "Scan settings" section, select **Remote and local sources**.
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/troubleshooting-code-scanning/default-setup-fails-with-a-language.md
+3-3
Original file line number
Diff line number
Diff line change
@@ -11,10 +11,10 @@ redirect_from:
11
11
12
12
To enable default setup when a language previously failed, you must reconfigure default setup, deselecting all failing languages for analysis.
13
13
14
-
1. If default setup fails, navigate to the main page of your repository, then click {% octicon "gear" aria-hidden="true" %} **Settings**.
15
-
1. In the "Security" section of the sidebar, click {% octicon "codescan" aria-hidden="true" %} **Code security and analysis**.
14
+
1. If default setup fails, navigate to the main page of your repository, then click **{% octicon "gear" aria-hidden="true" %} Settings**.
15
+
1. In the "Security" section of the sidebar, click **{% octicon "codescan" aria-hidden="true" %} Code security and analysis**.
16
16
1. Navigate to the "{% data variables.product.prodname_code_scanning_caps %}" section. Then, in the error message reading "{% data variables.product.prodname_codeql %} default configuration **failed**", click **failed**.
17
-
1. In the "Jobs" section of the workflow run summary for default setup, identify any failing jobs associated with specific languages. These jobs will be labeled {% octicon "x-circle-fill" aria-label="failed" %} **Analyze (LANGUAGE)**.
17
+
1. In the "Jobs" section of the workflow run summary for default setup, identify any failing jobs associated with specific languages. These jobs will be labeled **{% octicon "x-circle-fill" aria-label="failed" %} Analyze (LANGUAGE)**.
18
18
1. Once you have determined which language-specific jobs are failing, configure default setup once more and deselect the failing languages for analysis. For more information, see "[AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning)."
19
19
20
20
Alternatively, if you would like to analyze every language in your repository, you can configure advanced setup for {% data variables.product.prodname_code_scanning %}. For more information, see "[AUTOTITLE](/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)."
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/troubleshooting-code-scanning/enabling-default-setup-takes-too-long.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -13,4 +13,4 @@ When you enable default setup, a workflow is triggered with the automatically ge
13
13
14
14
You can check on the progress of the test run for default setup on the **Actions** tab. If the run is taking too long, try canceling the workflow run and restarting the configuration process.
15
15
16
-
To restart your configuration, navigate to the main page of your repository, then click {% octicon "play" aria-hidden="true" %} **Actions**. Click the **{% data variables.product.prodname_codeql %}** workflow run that's in progress, then click **Cancel workflow**. Once {% octicon "stop" aria-label="cancelled" %} appears beside the workflow run name, navigate back to the **Code security and analysis** settings and re-enable default setup. If default setup continues to stall, please contact {% data variables.contact.contact_support %} or try enabling advanced setup. For more information, see "[AUTOTITLE](/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)."
16
+
To restart your configuration, navigate to the main page of your repository, then click **{% octicon "play" aria-hidden="true" %} Actions**. Click the **{% data variables.product.prodname_codeql %}** workflow run that's in progress, then click **Cancel workflow**. Once {% octicon "stop" aria-label="cancelled" %} appears beside the workflow run name, navigate back to the **Code security and analysis** settings and re-enable default setup. If default setup continues to stall, please contact {% data variables.contact.contact_support %} or try enabling advanced setup. For more information, see "[AUTOTITLE](/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)."
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/troubleshooting-code-scanning/results-different-than-expected.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -13,8 +13,8 @@ redirect_from:
13
13
14
14
If your {% data variables.product.prodname_code_scanning %} results are different than you expected, you may have both default and advanced setup configured for your repository. When you enable default setup, this disables the existing {% data variables.product.prodname_codeql %} workflow file and blocks any {% data variables.product.prodname_codeql %} API analysis from uploading results.
15
15
16
-
To check if default setup is enabled, navigate to the main page of the repository, then click {% octicon "gear" aria-hidden="true" %} **Settings**. In the "Security" section of the sidebar, click {% octicon "codescan" aria-hidden="true" %} **Code security and analysis**. In the "{% data variables.product.prodname_code_scanning_caps %}" section of the page, next to "{% data variables.product.prodname_codeql %} analysis", click {% octicon "kebab-horizontal" aria-label="Menu" %}. If there is a {% octicon "workflow" aria-hidden="true" %} **Switch to advanced** option, you are currently using default setup.
16
+
To check if default setup is enabled, navigate to the main page of the repository, then click **{% octicon "gear" aria-hidden="true" %} Settings**. In the "Security" section of the sidebar, click **{% octicon "codescan" aria-hidden="true" %} Code security and analysis**. In the "{% data variables.product.prodname_code_scanning_caps %}" section of the page, next to "{% data variables.product.prodname_codeql %} analysis", click {% octicon "kebab-horizontal" aria-label="Menu" %}. If there is a **{% octicon "workflow" aria-hidden="true" %} Switch to advanced** option, you are currently using default setup.
17
17
18
-
If you want to return to using advanced setup and get {% data variables.product.prodname_code_scanning %} results from your custom workflow file, click {% octicon "stop" aria-hidden="true" %} **Disable {% data variables.product.prodname_codeql %}** to disable default setup. Then you should re-enable your pre-existing workflows to start triggering and uploading results from advanced setup. For more information, see "[AUTOTITLE](/actions/managing-workflow-runs/disabling-and-enabling-a-workflow)" and "[AUTOTITLE](/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)."
18
+
If you want to return to using advanced setup and get {% data variables.product.prodname_code_scanning %} results from your custom workflow file, click **{% octicon "stop" aria-hidden="true" %} Disable {% data variables.product.prodname_codeql %}** to disable default setup. Then you should re-enable your pre-existing workflows to start triggering and uploading results from advanced setup. For more information, see "[AUTOTITLE](/actions/managing-workflow-runs/disabling-and-enabling-a-workflow)" and "[AUTOTITLE](/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/configuring-advanced-setup-for-code-scanning)."
19
19
20
20
{% data reusables.code-scanning.troubleshooting-multiple-configurations %}
Copy file name to clipboardExpand all lines: content/code-security/code-scanning/troubleshooting-sarif-uploads/default-setup-enabled.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -33,7 +33,7 @@ You will only see this error for SARIF files that contain results created using
33
33
{% data reusables.repositories.sidebar-settings %}
34
34
{% data reusables.user-settings.security-analysis %}
35
35
1. In the "{% data variables.product.prodname_code_scanning_caps %}" section of the page, next to "{% data variables.product.prodname_codeql %} analysis," click {% octicon "kebab-horizontal" aria-label="Menu" %}.
36
-
1. If there is a {% octicon "workflow" aria-hidden="true" %} **Switch to advanced** option, default setup is enabled for the repository.
36
+
1. If there is a **{% octicon "workflow" aria-hidden="true" %} Switch to advanced** option, default setup is enabled for the repository.
37
37
38
38
## Fixing the problem
39
39
@@ -46,5 +46,5 @@ Before you can fix the problem, you need to decide whether {% data variables.pro
46
46
47
47
### Disabling default setup to unblock SARIF upload
48
48
49
-
1. In the "{% data variables.product.prodname_code_scanning_caps %}" section of the page, next to "{% data variables.product.prodname_codeql %} analysis," from the {% octicon "kebab-horizontal" aria-label="Menu" %} menu select {% octicon "stop" aria-hidden="true" %} **Disable {% data variables.product.prodname_codeql %}**.
49
+
1. In the "{% data variables.product.prodname_code_scanning_caps %}" section of the page, next to "{% data variables.product.prodname_codeql %} analysis," from the {% octicon "kebab-horizontal" aria-label="Menu" %} menu select **{% octicon "stop" aria-hidden="true" %} Disable {% data variables.product.prodname_codeql %}**.
50
50
{% data reusables.code-scanning.sarif-upload-retry %}
Copy file name to clipboardExpand all lines: content/code-security/dependabot/working-with-dependabot/about-dependabot-on-github-actions-runners.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -112,7 +112,7 @@ To re-run a {% data variables.product.prodname_dependabot_version_updates %} or
112
112
### Re-running a {% data variables.product.prodname_dependabot_security_updates %} job
113
113
114
114
{% data reusables.repositories.navigate-to-repo %}
115
-
1. Under your repository name, click {% octicon "shield-lock" aria-hidden="true" %} **Security**.
115
+
1. Under your repository name, click **{% octicon "shield-lock" aria-hidden="true" %} Security**.
116
116
1. In the left sidebar, under "Vulnerability alerts", click **{% data variables.product.prodname_dependabot %}**.
117
117
1. Under "{% data variables.product.prodname_dependabot %}", click the alert you want to view.
118
118
1. In the section displaying the error details for the alert, click **Try again** to re-run the {% data variables.product.prodname_dependabot_security_updates %} job.
Copy file name to clipboardExpand all lines: content/code-security/getting-started/quickstart-for-securing-your-organization.md
+2-2
Original file line number
Diff line number
Diff line change
@@ -65,7 +65,7 @@ When you're ready to proceed, follow these steps to enable a feature for all rep
65
65
{% data reusables.organizations.navigate-to-org %}
66
66
{% data reusables.organizations.org_settings %}
67
67
68
-
1. In the left sidebar, click {% octicon "codescan" aria-hidden="true" %} **Code security and analysis**.
68
+
1. In the left sidebar, click **{% octicon "codescan" aria-hidden="true" %} Code security and analysis**.
69
69
1. Locate the feature that you want to enable and use any associated check boxes to fine-tune the options.
70
70
1. When you are ready to enable the feature for all repositories in your organization where the feature is supported, next to the name of the feature, click **Enable all**.
71
71
@@ -101,7 +101,7 @@ You can choose to enable a security feature automatically in all new repositorie
101
101
{% data reusables.organizations.navigate-to-org %}
102
102
{% data reusables.organizations.org_settings %}
103
103
104
-
1. In the left sidebar, click {% octicon "codescan" aria-hidden="true" %} **Code security and analysis**.
104
+
1. In the left sidebar, click **{% octicon "codescan" aria-hidden="true" %} Code security and analysis**.
105
105
1. Below the name of the feature, select the option for automatically enabling the feature in applicable future repositories.
106
106
107
107

Copy file name to clipboardExpand all lines: content/code-security/getting-started/quickstart-for-securing-your-repository.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -120,7 +120,7 @@ To enable {% data variables.product.prodname_dependabot_version_updates %}, you
120
120
121
121
You can configure {% data variables.product.prodname_code_scanning %} to automatically identify vulnerabilities and errors in the code stored in your repository by using a {% data variables.code-scanning.codeql_workflow %} or third-party tool. Depending on the programming languages in your repository, you can configure {% data variables.product.prodname_code_scanning %} with {% data variables.product.prodname_codeql %} using default setup, in which {% data variables.product.prodname_dotcom %} automatically determines the languages to scan, query suites to run, and events that will trigger a new scan. For more information, see "[AUTOTITLE](/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning)."
122
122
123
-
1. From the main page of your repository, click {% octicon "gear" aria-hidden="true" %} **Settings**.
123
+
1. From the main page of your repository, click **{% octicon "gear" aria-hidden="true" %} Settings**.
124
124
1. In the "Security" section of the sidebar, click **{% octicon "shield-lock" aria-hidden="true" %} Code security and analysis**.
125
125
1. In the "{% data variables.product.prodname_code_scanning_caps %}" section, select **Set up** {% octicon "triangle-down" aria-hidden="true" %}, then click **Default**.
126
126
1. In the pop-up window that appears, review the default configuration settings for your repository, then click **Enable {% data variables.product.prodname_codeql %}**.
Copy file name to clipboardExpand all lines: content/code-security/secret-scanning/managing-alerts-from-secret-scanning/evaluating-alerts.md
+1-1
Original file line number
Diff line number
Diff line change
@@ -61,7 +61,7 @@ With a {% data variables.product.prodname_copilot_enterprise %} license, you can
61
61
62
62
## Performing an on-demand validity check
63
63
64
-
Once you have enabled validity checks for partner patterns for your repository, you can perform an "on-demand" validity check for any supported secret by clicking {% octicon "sync" aria-hidden="true" %} **Verify secret** in the alert view. {% data variables.product.company_short %} will send the pattern to the relevant partner and display the validation status of the secret in the alert view.
64
+
Once you have enabled validity checks for partner patterns for your repository, you can perform an "on-demand" validity check for any supported secret by clicking **{% octicon "sync" aria-hidden="true" %} Verify secret** in the alert view. {% data variables.product.company_short %} will send the pattern to the relevant partner and display the validation status of the secret in the alert view.
65
65
66
66

0 commit comments