You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Improve GitHub Advanced Security documentation for clarity, completeness, and accessibility
- Simplified the introductory paragraph for better readability and added a brief explanation of GHAS.
- Expanded feature descriptions with clear explanations and added links to relevant resources (e.g., CodeQL).
- Replaced placeholder [AUTOTITLE] links with actual URLs to GitHub Plans and Billing documentation.
- Added a detailed feature availability table with clear headers, icons, and a legend for accessibility.
- Improved sentence structure and formatting for easier scanning and comprehension.
- Added notes on licensing requirements and plan prerequisites with clearer guidance.
- Ensured consistent terminology and style throughout the document.
- Enhanced accessibility by replacing octicons with emoji equivalents and adding a legend.
- Structured content with appropriate headings and bullet points for better navigation.
These improvements aim to help users better understand the capabilities, licensing, and usage of GitHub Advanced Security features, facilitating informed decision-making and smoother onboarding.
intro: '{% data variables.product.github %} makes extra security features available to customers {% ifversion ghas-products %}who purchase {% data variables.product.prodname_GH_code_security %} or {% data variables.product.prodname_GH_secret_protection %}{% else %}under a {% data variables.product.prodname_GHAS %} license{% endif %}.{% ifversion fpt or ghec %} Some features are enabled for public repositories by default.{% endif %}'
3
+
intro: >
4
+
{% data variables.product.github %} offers advanced security features to help protect your code. These features are available to customers
5
+
{% ifversion ghas-products %}
6
+
who purchase {% data variables.product.prodname_GH_code_security %} or {% data variables.product.prodname_GH_secret_protection %}
7
+
{% else %}
8
+
with a {% data variables.product.prodname_GHAS %} license
9
+
{% endif %}.
10
+
{% ifversion fpt or ghec %}
11
+
Some features are enabled by default for public repositories.
12
+
{% endif %}
4
13
product: '{% data reusables.gated-features.ghas-ghec %}'
## About {% data variables.product.prodname_GHAS %} {% ifversion ghas-products %}products{% endif %}
18
27
19
-
{% data variables.product.github %} has many features that help you improve and maintain the quality of your code. Some of these are included in all plans, such as dependency graph and {% data variables.product.prodname_dependabot_alerts %}.
28
+
{% data variables.product.github %} provides many features that help you improve and maintain the quality and security of your code. Some of these features are included in all plans, such as the dependency graph and {% data variables.product.prodname_dependabot_alerts %}.
20
29
21
30
{% ifversion ghas-products %}
22
31
23
-
Other security features require you to purchase one of {% data variables.product.github %}'s {% data variables.product.prodname_AS %} products:
32
+
Other advanced security features require purchasing one of {% data variables.product.github %}'s {% data variables.product.prodname_AS %} products:
24
33
25
34
{% data reusables.advanced-security.ghas-products-bullets+ghas %}
26
35
27
-
{% ifversion fpt or ghec %}Some of these features, such as {% data variables.product.prodname_code_scanning %} and {% data variables.product.prodname_secret_scanning %}, are enabled for public repositories by default. To run the feature on your private or internal repositories, you must purchase the relevant {% data variables.product.prodname_GHAS %} product.{% endif %}
36
+
{% ifversion fpt or ghec %}
37
+
Some features, such as {% data variables.product.prodname_code_scanning %} and {% data variables.product.prodname_secret_scanning %}, are enabled by default for public repositories. To use these features on private or internal repositories, you must purchase the relevant {% data variables.product.prodname_GHAS %} product.
38
+
{% endif %}
28
39
29
-
You must be on a {% data variables.product.prodname_team %} or {% data variables.product.prodname_enterprise %} plan in order to purchase {% data variables.product.prodname_GH_code_security %} or {% data variables.product.prodname_GH_secret_protection %}. For more information, see [AUTOTITLE](/get-started/learning-about-github/githubs-plans) and [AUTOTITLE](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).
40
+
You must be on a {% data variables.product.prodname_team %} or {% data variables.product.prodname_enterprise %} plan to purchase {% data variables.product.prodname_GH_code_security %} or {% data variables.product.prodname_GH_secret_protection %}. For more information, see [GitHub Plans](/get-started/learning-about-github/githubs-plans) and [Billing for GitHub Advanced Security](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).
30
41
31
42
{% else %}
32
43
33
-
Other security features require a {% data variables.product.prodname_GHAS %} (GHAS) license. For information about buying a license for {% data variables.product.prodname_GHAS %}, see [AUTOTITLE](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).
44
+
Other advanced security features require a {% data variables.product.prodname_GHAS %} (GHAS) license. For information about purchasing a license, see [Billing for GitHub Advanced Security](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).
34
45
35
46
{% endif %}
36
47
37
48
{% ifversion ghas-products %}
38
49
39
50
## {% data variables.product.prodname_GH_code_security %}
40
51
41
-
You get the following features with {% data variables.product.prodname_GH_code_security %}:
52
+
With {% data variables.product.prodname_GH_code_security %}, you get the following features:
42
53
43
-
***{% data variables.product.prodname_code_scanning_caps %}**: Search for potential security vulnerabilities and coding errors in your code using {% data variables.product.prodname_codeql %} or a third-party tool.
54
+
***{% data variables.product.prodname_code_scanning_caps %}**: Automatically scan your code for potential security vulnerabilities and coding errors using {% data variables.product.prodname_codeql %}, GitHub's semantic code analysis engine, or third-party tools. [Learn more about CodeQL](https://codeql.github.com/).
44
55
45
-
***{% data variables.product.prodname_codeql_cli %}**: Run {% data variables.product.prodname_codeql %} processes locally on software projects or to generate {% data variables.product.prodname_code_scanning %} results for upload to {% data variables.product.github %}.{% ifversion code-scanning-autofix %}
56
+
***{% data variables.product.prodname_codeql_cli %}**: Run {% data variables.product.prodname_codeql %} processes locally on your projects or generate {% data variables.product.prodname_code_scanning %} results to upload to {% data variables.product.github %}.{% ifversion code-scanning-autofix %}
46
57
47
58
***{% data variables.copilot.copilot_autofix_short %}**: Get automatically generated fixes for {% data variables.product.prodname_code_scanning %} alerts.{% endif %}{% ifversion security-campaigns %}
48
59
49
-
***Security campaigns**: Reduce security debt at scale.{% endif %}
60
+
***Security campaigns**: Reduce security debt at scale by managing and tracking security improvements across your repositories.{% endif %}
50
61
51
-
***{% data variables.dependabot.custom_rules_caps %} for {% data variables.product.prodname_dependabot %}**: Manage your {% data variables.product.prodname_dependabot_alerts %} at scale, by automating which alerts you want to ignore, snooze, or trigger a {% data variables.product.prodname_dependabot %} security update for.
62
+
***{% data variables.dependabot.custom_rules_caps %} for {% data variables.product.prodname_dependabot %}**: Automate management of {% data variables.product.prodname_dependabot_alerts %} by ignoring, snoozing, or triggering security updates.
52
63
53
-
***Dependency review**: Show the full impact of changes to dependencies and see details of any vulnerable versions before you merge a pull request.
64
+
***Dependency review**: Understand the full impact of dependency changes and identify vulnerable versions before merging pull requests.
54
65
55
-
***Security overview**: Understand the distribution of risk across your organization.
66
+
***Security overview**: Gain insights into the distribution of security risks across your organization.
56
67
57
68
{% ifversion fpt or ghec %}
58
69
59
-
The table below summarizes the availability of {% data variables.product.prodname_GH_code_security %} features for public and private repositories.
60
-
61
-
{% rowheaders %}
62
-
63
-
|| Public repository <br>without {% data variables.product.prodname_GH_code_security %} | Private repository <br>without {% data variables.product.prodname_GH_code_security %} | Public or private repository <br>with {% data variables.product.prodname_GH_code_security %} |
For more information about features, see [AUTOTITLE](/code-security/getting-started/github-security-features).
81
-
82
-
## {% data variables.product.prodname_GH_secret_protection %}
70
+
The table below summarizes the availability of {% data variables.product.prodname_GH_code_security %} features for public and private repositories:
83
71
84
-
You get the following features with {% data variables.product.prodname_GH_secret_protection %}:
72
+
| Feature | Public repository <br>without {% data variables.product.prodname_GH_code_security %} | Private repository <br>without {% data variables.product.prodname_GH_code_security %} | Public or private repository <br>with {% data variables.product.prodname_GH_code_security %} |
{% data reusables.secret-protection.product-list %}
87
-
88
-
{% ifversion ghas-products-cloud %}
89
-
90
-
The table below summarizes the availability of {% data variables.product.prodname_GH_secret_protection %} features for public and private repositories.
91
-
92
-
{% rowheaders %}
93
-
94
-
|| Public repository <br>without {% data variables.product.prodname_GH_secret_protection %} | Private repository <br>without {% data variables.product.prodname_GH_secret_protection %} | Public or private repository <br>with {% data variables.product.prodname_GH_secret_protection %} |
*Legend: ✅ Feature available, ❌ Feature not available*
109
83
110
84
{% endif %}
111
85
112
-
For more information about individual features, see [AUTOTITLE](/code-security/getting-started/github-security-features).
113
-
114
-
{% else %}
115
-
116
-
## About {% data variables.product.prodname_GHAS %} features
117
-
118
-
A {% data variables.product.prodname_GHAS %} license provides the following additional features:
119
-
120
-
***{% data variables.product.prodname_code_scanning_caps %}** - Search for potential security vulnerabilities and coding errors in your code using {% data variables.product.prodname_codeql %} or a third-party tool. See [AUTOTITLE](/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning) and [AUTOTITLE](/code-security/code-scanning/introduction-to-code-scanning/about-code-scanning-with-codeql).
121
-
122
-
***{% data variables.product.prodname_codeql_cli %}** - Run {% data variables.product.prodname_codeql %} processes locally on software projects or to generate {% data variables.product.prodname_code_scanning %} results for upload to {% data variables.product.github %}. See [AUTOTITLE](/code-security/codeql-cli/getting-started-with-the-codeql-cli/about-the-codeql-cli).
123
-
124
-
***{% data variables.product.prodname_secret_scanning_caps %}** - Detect secrets, for example keys and tokens, that have been checked into the repository. If push protection is enabled, {% data variables.product.prodname_dotcom %} also detects secrets when they are pushed to your repository. {% ifversion secret-scanning-enable-by-default-for-public-repos %}{% data variables.secret-scanning.user_alerts_caps %} and push protection are available and free of charge for all {% ifversion ghec %}user-owned {% endif %}public repositories on {% data variables.product.prodname_dotcom_the_website %}.{% endif %} See [AUTOTITLE](/code-security/secret-scanning/introduction/about-secret-scanning) and [AUTOTITLE](/code-security/secret-scanning/introduction/about-push-protection).
125
-
126
-
***{% data variables.dependabot.custom_rules_caps %}** - {% data reusables.dependabot.dependabot-custom-rules-ghas %}
127
-
128
-
***Dependency review** - Show the full impact of changes to dependencies and see details of any vulnerable versions before you merge a pull request. See [AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).
## Run an assessment of your organization's exposure to secret leaks
135
-
136
-
{% ifversion secret-risk-assessment %}{% data variables.secret-scanning.secret-risk-assessment-cta-product %}{% endif %}
137
-
138
-
Organizations on {% data variables.product.prodname_team %} and {% data variables.product.prodname_enterprise %} can run a free report to scan the code in the organization for leaked secrets. This can help you understand the current exposure of repositories in your organization to leaked secrets, as well as help you see how many existing secret leaks could have been prevented by {% data variables.product.prodname_GH_secret_protection %}.{% endif %}{% else %}{% endif %}
139
-
140
-
## Deploying {% ifversion ghas-products %}{% data variables.product.prodname_GH_code_security %} and {% data variables.product.prodname_GH_secret_protection %}{% else %}{% data variables.product.prodname_GHAS %} in your enterprise{% endif %}
141
-
142
-
To learn about what you need to know to plan your deployment of {% ifversion ghas-products %}{% data variables.product.prodname_GH_code_security %} and {% data variables.product.prodname_GH_secret_protection %}{% else %}{% data variables.product.prodname_GHAS %}{% endif %} at a high level and to review the rollout phases we recommended, see [AUTOTITLE](/code-security/adopting-github-advanced-security-at-scale).
143
-
144
-
## Enabling features
145
-
146
-
{% ifversion ghes %}
147
-
A site administrator must enable {% data variables.product.prodname_AS %} for {% data variables.location.product_location %} before you can use these features. See [AUTOTITLE](/admin/code-security/managing-github-advanced-security-for-your-enterprise).
148
-
{% endif %}
149
-
150
-
{% ifversion security-configurations %}
151
-
{% data reusables.security-configurations.enable-security-features-with-gh-config %}
152
-
{% endif %}
153
-
154
-
{% ifversion security-configurations %}{% else %}Once your system is set up, you can enable and disable these features at the organization or repository level. See [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/managing-security-and-analysis-settings-for-your-organization) and [AUTOTITLE](/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository).{% endif %}
155
-
156
-
If you are on a {% data variables.product.prodname_team %} or {% data variables.product.prodname_enterprise %} plan, license use for the entire team or enterprise is shown on your license page. {% ifversion fpt or ghec %}See [AUTOTITLE](/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/viewing-your-github-advanced-security-usage).{% endif %}
157
-
158
-
{% ifversion copilot-chat-ghas-alerts %}
159
-
160
-
## Leveraging {% data variables.copilot.copilot_chat %} to understand security alerts
161
-
162
-
Additionally, with a {% data variables.copilot.copilot_enterprise %} license, you can ask {% data variables.copilot.copilot_chat %} for help to better understand security alerts in repositories in your organization ({% data variables.product.prodname_code_scanning %}, {% data variables.product.prodname_secret_scanning %}, and {% data variables.product.prodname_dependabot_alerts %}). See [AUTOTITLE](/copilot/using-github-copilot/asking-github-copilot-questions-in-githubcom#asking-questions-about-alerts-from-github-advanced-security-features).
163
-
{% endif %}
164
-
165
-
{% ifversion github-certification %}
166
-
167
-
## About {% data variables.product.prodname_GHAS %} Certification
168
-
169
-
You can highlight your knowledge by earning a {% data variables.product.prodname_GHAS %} certificate with {% data variables.product.prodname_certifications %}. The certification validates your expertise in vulnerability identification, workflow security, and robust security implementation. See [AUTOTITLE](/get-started/showcase-your-expertise-with-github-certifications/about-github-certifications).
170
-
171
-
{% endif %}
172
-
173
-
## About {% data variables.product.prodname_GHAS %} with Azure Repos
174
-
175
-
If you want to use {% data variables.product.prodname_GHAS %} with Azure Repos, see [{% data variables.product.prodname_GHAS %} & Azure DevOps](https://resources.github.com/topics/github-advanced-security/) in our resources site. For documentation, see [Configure {% data variables.product.prodname_ghas_azdo %}](https://learn.microsoft.com/en-us/azure/devops/repos/security/configure-github-advanced-security-features) in Microsoft Learn.
0 commit comments