Skip to content

Commit 62dac04

Browse files
committed
Line edits2
1 parent 7a69f11 commit 62dac04

File tree

4 files changed

+7
-7
lines changed

4 files changed

+7
-7
lines changed

learn-pr/github/configure-code-scanning/6-knowledge-check.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -54,10 +54,10 @@ quiz:
5454
choices:
5555
- content: "Scheduled events are more difficult to configure than triggered events."
5656
isCorrect: false
57-
explanation: "Incorrect. Scheduled events are not more difficult to configure than triggered events. Both can be configured easily. "
57+
explanation: "Incorrect. Scheduled events aren't more difficult to configure than triggered events. Both can be configured easily. "
5858
- content: "Scheduled events run based on a specified schedule and triggered events run on code events such as a push. "
5959
isCorrect: true
60-
explanation: "Correct. Scheduled events are specified by the developer and triggered events are set by default but can also be configured by the developer."
60+
explanation: "Correct. The developer specifies scheduled events and triggered events are set by default but can also be developer configured."
6161
- content: "Triggered events run less frequently than scheduled events."
6262
isCorrect: false
6363
explanation: "Incorrect. The frequency of both triggered events and scheduled events varies depending on how often pushes and pull requests occur, as well as how the developer may have configured the frequency."

learn-pr/github/configure-code-scanning/includes/2-what-code-scanning.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,4 +59,4 @@ Running code scanning with GitHub Actions affects your monthly billing minutes.
5959

6060
## About Billing for Actions
6161

62-
Code scanning uses GitHub Actions, and each run of a code-scanning workflow consumes minutes for GitHub Actions. GitHub Actions usage is free for both public repositories and self-hosted runners. For private repositories, each GitHub account receives a certain number of free minutes and storage, depending on the product used with the account. Any usage beyond the included amounts is controlled by spending limits. If you're a monthly billed customer, your account has a default spending limit of 0 US dollars (USD), which prevents extra usage of minutes or storage for private repositories beyond the amounts included with your account. If you pay your account by invoice, your account will have an unlimited default spending limit. Minutes reset every month, while storage usage doesn't.
62+
Code scanning uses GitHub Actions, and each run of a code-scanning workflow consumes minutes for GitHub Actions. GitHub Actions usage is free for both public repositories and self-hosted runners. For private repositories, each GitHub account receives a certain number of free minutes and storage, depending on the product used with the account. Spending limits control any usage beyond the included amounts. If you're a monthly billed customer, your account has a default spending limit of zero US dollars (USD), which prevents extra usage of minutes or storage for private repositories beyond the amounts included with your account. If you pay your account by invoice, your account will have an unlimited default spending limit. Minutes reset every month, while storage usage doesn't.

learn-pr/github/configure-code-scanning/includes/3-enable-code-scanning-with-third-party-tools.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ The code-scanning API lets you retrieve information on code scanning alerts, ana
1414

1515
You can access the GitHub API over HTTPS from `https://api.github.com`. All data is sent and received as JSON. The API uses custom media types to let consumers choose the format of the data they wish to receive. Media types are specific to resources, allowing them to change independently and support formats that other resources don't.
1616

17-
There is one supported custom media type for the code scanning REST API, `application/sarif+json`.
17+
There's one supported custom media type for the code scanning REST API, `application/sarif+json`.
1818

1919
You can use this media type with GET requests sent to the `/analyses/{analysis_id}` endpoint. When you use this media type with this operation, the response includes a subset of the actual data that was uploaded for the specified analysis, rather than the summary of the analysis that's returned when you use the default media type. The response also includes additional data such as the `github/alertNumber` and `github/alertUrl` properties. The data is formatted as SARIF version 2.1.0.
2020

@@ -32,7 +32,7 @@ Review the [GitHub REST API docs](https://docs.github.com/rest/code-scanning/cod
3232

3333
#### CodeQL CLI
3434

35-
The CodeQL CLI is a standalone product that you can use to analyze code. Its main purpose is to generate a database representation of a codebase, a CodeQL database. Once the database is ready, you can query it interactively, or you can run a suite of queries to generate a set of results in SARIF format and upload the results to GitHub.com. The CodeQL CLI is free to use on public repositories that are maintained on GitHub.com, and available to use on private repositories that are owned by customers with an Advanced Security license. Download the CodeQL bundle from https://github.com/github/codeql-action/releases.
35+
The CodeQL CLI is a standalone product that you can use to analyze code. Its main purpose is to generate a database representation of a codebase, a CodeQL database. Once the database is ready, you can query it interactively, or you can run a suite of queries to generate a set of results in SARIF format and upload the results to GitHub.com. The CodeQL CLI is free to use on public repositories maintained on GitHub.com, and it's available to use on customer owned private repositories with an Advanced Security license. Download the CodeQL bundle from https://github.com/github/codeql-action/releases.
3636

3737
The bundle contains:
3838

@@ -92,7 +92,7 @@ Each time the results of a new code scan are uploaded, the results are processed
9292

9393
If your SARIF file doesn't include `partialFingerprints`, the `upload-sarif` action will calculate the `partialFingerprints` field for you and attempt to prevent duplicate alerts. GitHub can only create `partialFingerprints` when the repository contains both the SARIF file and the source code used in the static analysis.
9494

95-
SARIF upload supports a maximum of 5000 results per upload. Any results over this limit are ignored. If a tool generates too many results, you should update the configuration to focus on results for the most important rules or queries.
95+
SARIF upload supports a maximum of 5,000 results per upload. Any results over this limit are ignored. If a tool generates too many results, you should update the configuration to focus on results for the most important rules or queries.
9696

9797
For each upload, SARIF upload supports a maximum size of 10 MB for the gzip-compressed SARIF file. Any uploads over this limit will be rejected. If your SARIF file is too large because it contains too many results, you should update the configuration to focus on results for the most important rules or queries.
9898

learn-pr/github/configure-code-scanning/index.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22
uid: learn.github.configure-code-scanning
33
metadata:
44
title: "Configure Code Scanning on GitHub"
5-
description: This module introduces you to code scanning and its features. You will learn how to implement code scanning using CodeQL, third party tools, and GitHub Actions.
5+
description: This module introduces you to code scanning and its features. You'll learn how to implement code scanning using CodeQL, third party tools, and GitHub Actions.
66
manager: mkluck
77
ms.date: 04/16/2025
88
author: rmcmurray

0 commit comments

Comments
 (0)