diff --git a/content/admin/managing-iam/understanding-iam-for-enterprises/abilities-and-restrictions-of-managed-user-accounts.md b/content/admin/managing-iam/understanding-iam-for-enterprises/abilities-and-restrictions-of-managed-user-accounts.md index 9aee84f2ee44..fc2e1b560104 100644 --- a/content/admin/managing-iam/understanding-iam-for-enterprises/abilities-and-restrictions-of-managed-user-accounts.md +++ b/content/admin/managing-iam/understanding-iam-for-enterprises/abilities-and-restrictions-of-managed-user-accounts.md @@ -32,7 +32,7 @@ With {% data variables.product.prodname_emus %}, you can control the user accoun {% data variables.enterprise.prodname_managed_users_caps %}: -* Cannot install {% data variables.product.prodname_github_apps %} on their user accounts, unless the app is an internal app. See [AUTOTITLE](/apps/using-github-apps/internal-github-apps). +* Cannot install {% data variables.product.prodname_github_apps %} on their user accounts, unless the app is an privileged app. See [AUTOTITLE](/apps/using-github-apps/privileged-github-apps). * Can install {% data variables.product.prodname_github_apps %} on a repository if the app doesn't request organization permissions and if the {% data variables.enterprise.prodname_managed_user %} has admin access to the repository. * Can install {% data variables.product.prodname_github_apps %} on an organization if the {% data variables.enterprise.prodname_managed_user %} is an organization owner. * Can purchase and install paid {% data variables.product.prodname_github_apps %} only if the {% data variables.enterprise.prodname_managed_user %} is an enterprise owner. diff --git a/content/apps/oauth-apps/using-oauth-apps/index.md b/content/apps/oauth-apps/using-oauth-apps/index.md index f28265384097..25fdaf20c3ab 100644 --- a/content/apps/oauth-apps/using-oauth-apps/index.md +++ b/content/apps/oauth-apps/using-oauth-apps/index.md @@ -13,6 +13,6 @@ children: - /authorizing-oauth-apps - /reviewing-your-authorized-oauth-apps - /connecting-with-third-party-applications - - /internal-oauth-apps + - /privileged-oauth-apps --- diff --git a/content/apps/oauth-apps/using-oauth-apps/internal-oauth-apps.md b/content/apps/oauth-apps/using-oauth-apps/internal-oauth-apps.md deleted file mode 100644 index f1fdae8e3b50..000000000000 --- a/content/apps/oauth-apps/using-oauth-apps/internal-oauth-apps.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: Internal OAuth apps -intro: 'Some {% data variables.product.prodname_oauth_apps %} are internal apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.' -versions: - fpt: '*' - ghes: '*' - ghec: '*' -shortTitle: Internal apps ---- - -Some {% data variables.product.prodname_oauth_apps %} are internal apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, even if an organization owner has restricted access by {% data variables.product.prodname_oauth_apps %} to the organization's data, users can still authorize these apps and use them to access data from the organization. - -Some of these internal apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_oauth_apps %}. - -These internal apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %} - -These {% data variables.product.prodname_oauth_apps %} are : - -* Gist -* Git Credential Manager -* GitHub Android -* GitHub CLI -* GitHub Codespaces for JetBrains -* GitHub Desktop -* GitHub Education -* github-importer-production -* GitHub iOS -* GitHub Support -* JetBrains IDE Integration -* Visual Studio -* Visual Studio Code diff --git a/content/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps.md b/content/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps.md new file mode 100644 index 000000000000..96dc74a22e58 --- /dev/null +++ b/content/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps.md @@ -0,0 +1,33 @@ +--- +title: Privileged OAuth apps +intro: 'Some {% data variables.product.prodname_oauth_apps %} are privileged apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.' +versions: + fpt: '*' + ghes: '*' + ghec: '*' +shortTitle: Privileged apps +redirect_from: + - /apps/oauth-apps/using-oauth-apps/internal-oauth-apps +--- + +Some {% data variables.product.prodname_oauth_apps %} are privileged apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, even if an organization owner has restricted access by {% data variables.product.prodname_oauth_apps %} to the organization's data, users can still authorize these apps and use them to access data from the organization. + +Some of these privileged apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_oauth_apps %}. + +These privileged apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %} + +These {% data variables.product.prodname_oauth_apps %} are : + +* Gist +* Git Credential Manager +* {% data variables.product.prodname_android %} +* {% data variables.product.prodname_cli %} +* {% data variables.product.prodname_github_codespaces %} for JetBrains +* {% data variables.product.prodname_desktop %} +* {% data variables.product.prodname_education %} +* github-importer-production +* {% data variables.product.prodname_ios %} +* {% data variables.product.company_short %} Support +* JetBrains IDE Integration +* {% data variables.product.prodname_vs %} +* {% data variables.product.prodname_vscode %} diff --git a/content/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-oauth-apps.md b/content/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-oauth-apps.md index b109ca451914..d4fa906c3902 100644 --- a/content/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-oauth-apps.md +++ b/content/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-oauth-apps.md @@ -27,4 +27,4 @@ shortTitle: Review OAuth apps {% ifversion fpt or ghec %} * [AUTOTITLE](/get-started/exploring-integrations/about-integrations){% endif %} * [AUTOTITLE](/apps/using-github-apps/reviewing-your-authorized-integrations) -* [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps) +* [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps) diff --git a/content/apps/using-github-apps/index.md b/content/apps/using-github-apps/index.md index 4efe1a9cf4da..6292cec8d466 100644 --- a/content/apps/using-github-apps/index.md +++ b/content/apps/using-github-apps/index.md @@ -22,5 +22,5 @@ children: - /reviewing-and-revoking-authorization-of-github-apps - /reviewing-and-modifying-installed-github-apps - /saml-and-github-apps - - /internal-github-apps + - /privileged-github-apps --- diff --git a/content/apps/using-github-apps/internal-github-apps.md b/content/apps/using-github-apps/internal-github-apps.md deleted file mode 100644 index 1128a73bb0a3..000000000000 --- a/content/apps/using-github-apps/internal-github-apps.md +++ /dev/null @@ -1,32 +0,0 @@ ---- -title: Internal GitHub Apps -intro: 'Some {% data variables.product.prodname_github_apps %} are internal apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.' -versions: - fpt: '*' - ghes: '*' - ghec: '*' -shortTitle: Internal apps ---- - -Some {% data variables.product.prodname_github_apps %} are internal apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, users can authorize these apps and use them to access data from an organization without requiring approval by the organization. - -Some of these internal apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_github_apps %} or in your list of installed {% data variables.product.prodname_github_apps %}.{% ifversion ghec %}{% data variables.product.prodname_emus %} are allowed to install these internal apps on their user account, while standard, unprivileged apps cannot be installed on {% data variables.product.prodname_emus %} user accounts.{% endif %} - -These internal apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %} - -These {% data variables.product.prodname_github_apps %} are: - -* Actions -* Dependabot -* Git Src Migrator -* GitHub Advanced Security -* GitHub Classroom -* GitHub Codespaces -* GitHub Copilot Plugin -* GitHub Merge Queue -* GitHub Pages -* GitHub Project Automation -* GitHub Team Synchronization -* Microsoft Teams for GitHub -* OpenGraph (`custom-og-image`) -* Slack diff --git a/content/apps/using-github-apps/privileged-github-apps.md b/content/apps/using-github-apps/privileged-github-apps.md new file mode 100644 index 000000000000..b8b1289f6f14 --- /dev/null +++ b/content/apps/using-github-apps/privileged-github-apps.md @@ -0,0 +1,34 @@ +--- +title: Privileged GitHub Apps +intro: 'Some {% data variables.product.prodname_github_apps %} are privileged apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.' +versions: + fpt: '*' + ghes: '*' + ghec: '*' +shortTitle: Privileged apps +redirect_from: + - /apps/using-github-apps/internal-github-apps +--- + +Some {% data variables.product.prodname_github_apps %} are privileged apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, users can authorize these apps and use them to access data from an organization without requiring approval by the organization. + +Some of these privileged apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_github_apps %} or in your list of installed {% data variables.product.prodname_github_apps %}.{% ifversion ghec %}{% data variables.product.prodname_emus %} are allowed to install these privileged apps on their user account, while standard, unprivileged apps cannot be installed on {% data variables.product.prodname_emus %} user accounts.{% endif %} + +These privileged apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %} + +These {% data variables.product.prodname_github_apps %} are: + +* Actions +* {% data variables.product.prodname_dependabot %} +* Git Src Migrator +* {% data variables.product.prodname_GHAS %} +* {% data variables.product.prodname_classroom %} +* {% data variables.product.prodname_github_codespaces %} +* {% data variables.product.prodname_copilot %} Plugin +* {% data variables.product.github %} Merge Queue +* {% data variables.product.prodname_pages %} +* {% data variables.product.github %} Project Automation +* {% data variables.product.github %} Team Synchronization +* Microsoft Teams for {% data variables.product.github %} +* OpenGraph (`custom-og-image`) +* Slack diff --git a/content/apps/using-github-apps/reviewing-and-modifying-installed-github-apps.md b/content/apps/using-github-apps/reviewing-and-modifying-installed-github-apps.md index d2d984d380d5..40c3929e1f08 100644 --- a/content/apps/using-github-apps/reviewing-and-modifying-installed-github-apps.md +++ b/content/apps/using-github-apps/reviewing-and-modifying-installed-github-apps.md @@ -74,4 +74,4 @@ In addition to reviewing {% data variables.product.prodname_github_apps %} that ## Further reading * [AUTOTITLE](/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps) -* [AUTOTITLE](/apps/using-github-apps/internal-github-apps) +* [AUTOTITLE](/apps/using-github-apps/privileged-github-apps) diff --git a/content/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps.md b/content/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps.md index 6f0dc1b9723e..d5e423e3ca09 100644 --- a/content/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps.md +++ b/content/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps.md @@ -38,4 +38,4 @@ The authorization can only be revoked by the person who authorized the {% data v * [AUTOTITLE](/apps/using-github-apps/reviewing-and-modifying-installed-github-apps) * [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-applications-oauth) -* [AUTOTITLE](/apps/using-github-apps/internal-github-apps) +* [AUTOTITLE](/apps/using-github-apps/privileged-github-apps) diff --git a/content/billing/managing-the-plan-for-your-github-account/connecting-an-azure-subscription.md b/content/billing/managing-the-plan-for-your-github-account/connecting-an-azure-subscription.md index 1c4efaa7d0bf..56a396436dc3 100644 --- a/content/billing/managing-the-plan-for-your-github-account/connecting-an-azure-subscription.md +++ b/content/billing/managing-the-plan-for-your-github-account/connecting-an-azure-subscription.md @@ -208,4 +208,9 @@ Yes. Billing managers for organizations or enterprises can connect Azure subscri Yes. During an **{% data variables.product.prodname_emu %} trial**, you can use metered products up to the included limits. To exceed the included limits, you’ll need to link an Azure subscription. +### What should I do if I see a banner saying my Azure ID is missing? + +If you see this banner, it means your Azure payment method information is missing. To avoid service interruptions for your enterprise or organization, make sure to add this information before the date provided in the alert. + +If you have questions or if you believe you are seeing this banner by mistake, contact {% data variables.contact.contact_support_page %}. {% endif %} diff --git a/content/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions.md b/content/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions.md index 1c24860a48f9..3d0e3e640184 100644 --- a/content/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions.md +++ b/content/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions.md @@ -21,7 +21,7 @@ shortTitle: '{% data variables.product.prodname_oauth_app %} restrictions' {% data reusables.organizations.restricted-app-access-requests %} -Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize internal {% data variables.product.prodname_oauth_apps %} apps and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps). +Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize privileged {% data variables.product.prodname_oauth_apps %} apps and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps). {% data reusables.organizations.oauth_app_restrictions_default %} diff --git a/content/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization.md b/content/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization.md index 010cbb1b0b7b..d078f28dc47b 100644 --- a/content/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization.md +++ b/content/organizations/managing-oauth-access-to-your-organizations-data/enabling-oauth-app-access-restrictions-for-your-organization.md @@ -17,7 +17,7 @@ shortTitle: Restrict {% data variables.product.prodname_oauth_apps %} {% data reusables.organizations.oauth_app_restrictions_default %} -Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize internal {% data variables.product.prodname_oauth_apps %} and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps). +Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize privileged {% data variables.product.prodname_oauth_apps %} and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps). > [!WARNING] > * Enabling {% data variables.product.prodname_oauth_app %} access restrictions will revoke organization access for all previously authorized {% data variables.product.prodname_oauth_apps %} and SSH keys. For more information, see [AUTOTITLE](/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions). diff --git a/src/links/lib/excluded-links.yml b/src/links/lib/excluded-links.yml index 0ea42113a7f4..1c454b4cd94d 100644 --- a/src/links/lib/excluded-links.yml +++ b/src/links/lib/excluded-links.yml @@ -89,8 +89,8 @@ - startsWith: https://platform.openai.com/docs/api-reference/ - is: https://azuredownloads-g3ahgwb5b8bkbxhd.b01.azurefd.net/github-copilot/ - is: https://www.anthropic.com/claude/sonnet -- is: https://www.psiexams.com/en-gb/become-psi-test-center/computer-specifications/ -- is: https://buymeacoffee.com/ +- is: https://www.psiexams.com/become-psi-test-center/computer-specifications/ +- is: https://www.buymeacoffee.com/ - startsWith: https://www.crashplan.com/ - is: https://info.figshare.com/user-guide/how-to-connect-figshare-with-your-github-account/ - is: https://www.anthropic.com/news/claude-3-5-sonnet diff --git a/src/secret-scanning/data/public-docs.yml b/src/secret-scanning/data/public-docs.yml index be97d17fb8b3..1e808c4abf83 100644 --- a/src/secret-scanning/data/public-docs.yml +++ b/src/secret-scanning/data/public-docs.yml @@ -681,7 +681,7 @@ ghes: '>=3.14' isPublic: true isPrivateWithGhas: true - hasPushProtection: true + hasPushProtection: false hasValidityCheck: false isduplicate: false - provider: Baidu @@ -1671,7 +1671,7 @@ fpt: '*' ghec: '*' ghes: '>=3.14' - isPublic: false + isPublic: true isPrivateWithGhas: true hasPushProtection: true hasValidityCheck: false @@ -1685,7 +1685,7 @@ fpt: '*' ghec: '*' ghes: '>=3.14' - isPublic: false + isPublic: true isPrivateWithGhas: true hasPushProtection: true hasValidityCheck: false @@ -1709,7 +1709,7 @@ fpt: '*' ghec: '*' ghes: '*' - isPublic: false + isPublic: true isPrivateWithGhas: true hasPushProtection: true hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' @@ -1733,7 +1733,7 @@ fpt: '*' ghec: '*' ghes: '*' - isPublic: false + isPublic: true isPrivateWithGhas: true hasPushProtection: true hasValidityCheck: false diff --git a/src/secret-scanning/lib/config.json b/src/secret-scanning/lib/config.json index 3b5211c0e7a0..4730e4e20cf7 100644 --- a/src/secret-scanning/lib/config.json +++ b/src/secret-scanning/lib/config.json @@ -1,5 +1,5 @@ { - "sha": "ffca37e2cc351a0ec7615acd72426408e097e422", - "blob-sha": "13c60ac1ef34f0cc397a4a4d89196124caf01ef2", + "sha": "a9dfd88ea981d4183fb5e8f771e9940baa7a98d3", + "blob-sha": "c94c1e5db1a71673aad3accda99d5a57fe6a9db0", "targetFilename": "code-security/secret-scanning/introduction/supported-secret-scanning-patterns" } \ No newline at end of file