diff --git a/assets/images/help/repository/review-calls-to-vulnerable-functions.png b/assets/images/help/repository/review-calls-to-vulnerable-functions.png index 3b7ff3172d30..399920b7ef60 100644 Binary files a/assets/images/help/repository/review-calls-to-vulnerable-functions.png and b/assets/images/help/repository/review-calls-to-vulnerable-functions.png differ diff --git a/content/code-security/dependabot/dependabot-alerts/viewing-and-updating-dependabot-alerts.md b/content/code-security/dependabot/dependabot-alerts/viewing-and-updating-dependabot-alerts.md index e1c781a49403..5371f95b6693 100644 --- a/content/code-security/dependabot/dependabot-alerts/viewing-and-updating-dependabot-alerts.md +++ b/content/code-security/dependabot/dependabot-alerts/viewing-and-updating-dependabot-alerts.md @@ -55,7 +55,7 @@ For supported languages, {% data variables.product.prodname_dependabot %} automa {% note %} -**Note:** During the beta release, this feature is available only for new Python advisories created *after* April 14, 2022, and for a subset of historical Python advisories. GitHub is working to backfill data across additional historical Python advisories, which are added on a rolling basis. Vulnerable calls are highlighted only on the {% data variables.product.prodname_dependabot_alerts %} pages. +**Note:** During the beta release, this feature is available only for new Python advisories created *after* April 14, 2022, and for a subset of historical Python advisories. {% data variables.product.prodname_dotcom %} is working to backfill data across additional historical Python advisories, which are added on a rolling basis. Vulnerable calls are highlighted only on the {% data variables.product.prodname_dependabot_alerts %} pages. {% endnote %} @@ -65,7 +65,7 @@ You can filter the view to show only alerts where {% data variables.product.prod For alerts where vulnerable calls are detected, the alert details page shows additional information: -- A code block showing where the function is used or, where there are multiple calls, the first call to the function. +- One or more code blocks showing where the function is used. - An annotation listing the function itself, with a link to the line where the function is called. ![Screenshot showing the alert details page for an alert with a "Vulnerable call" label](/assets/images/help/repository/review-calls-to-vulnerable-functions.png) diff --git a/content/code-security/security-overview/about-the-security-overview.md b/content/code-security/security-overview/about-the-security-overview.md index 468aed1cfe46..bf493f4ac636 100644 --- a/content/code-security/security-overview/about-the-security-overview.md +++ b/content/code-security/security-overview/about-the-security-overview.md @@ -1,7 +1,7 @@ --- title: About the security overview intro: 'You can view, filter, and sort security alerts for repositories owned by your organization or team in one place: the Security Overview page.' -permissions: Organization owners and security managers can access the security overview for organizations. Members of a team can see the security overview for repositories that the team has admin privileges for. +permissions: '{% data reusables.security-center.permissions %}' product: '{% data reusables.gated-features.security-center %}' redirect_from: - /code-security/security-overview/exploring-security-alerts @@ -69,7 +69,7 @@ At the organization-level, the security overview displays aggregate and reposito {% ifversion ghec or ghes > 3.4 or ghae-issue-6199 %} ### About the enterprise-level security overview -At the enterprise-level, the security overview displays aggregate and repository-specific security information for your enterprise. You can view repositories owned by your enterprise that have security alerts or view all {% data variables.product.prodname_secret_scanning %} alerts from across your enterprise. +At the enterprise-level, the security overview displays aggregate and repository-specific security information for your enterprise. You can view repositories owned by your enterprise that have security alerts, view all security alerts, or security feature-specific alerts from across your enterprise. Organization owners and security managers for organizations in your enterprise also have limited access to the enterprise-level security overview. They can only view repositories and alerts for the organizations that they have full access to. diff --git a/content/code-security/security-overview/filtering-alerts-in-the-security-overview.md b/content/code-security/security-overview/filtering-alerts-in-the-security-overview.md index e4887a0120d7..f5a474a0b008 100644 --- a/content/code-security/security-overview/filtering-alerts-in-the-security-overview.md +++ b/content/code-security/security-overview/filtering-alerts-in-the-security-overview.md @@ -1,7 +1,7 @@ --- title: Filtering alerts in the security overview intro: Use filters to view specific categories of alerts -permissions: Organization owners and security managers can access the security overview for organizations. Members of a team can see the security overview for repositories that the team has admin privileges for. +permissions: '{% data reusables.security-center.permissions %}' product: '{% data reusables.gated-features.security-center %}' versions: ghae: issue-4554 diff --git a/content/code-security/security-overview/viewing-the-security-overview.md b/content/code-security/security-overview/viewing-the-security-overview.md index 8239d2dffce8..0f7455efceb8 100644 --- a/content/code-security/security-overview/viewing-the-security-overview.md +++ b/content/code-security/security-overview/viewing-the-security-overview.md @@ -1,7 +1,7 @@ --- title: Viewing the security overview intro: Navigate to the different views available in the security overview -permissions: Organization owners and security managers can access the security overview for organizations. Members of a team can see the security overview for repositories that the team has admin privileges for. +permissions: '{% data reusables.security-center.permissions %}' product: '{% data reusables.gated-features.security-center %}' versions: ghae: issue-5503 @@ -29,7 +29,7 @@ shortTitle: View the security overview ![Show more button](/assets/images/help/organizations/security-overview-show-more-button.png) {% data reusables.organizations.filter-security-overview %} {% if security-overview-views %} -1. Alternatively and optionally, use the sidebar on the left to filter information per security feature. On each page, you can use filters that are specific to each feature to fine-tune your search. +{% data reusables.organizations.security-overview-feature-specific-page %} ![Screenshot of the code scanning-specific page](/assets/images/help/organizations/security-overview-code-scanning-alerts.png) ## Viewing alerts across your organization @@ -46,6 +46,9 @@ shortTitle: View the security overview {% data reusables.enterprise-accounts.access-enterprise-on-dotcom %} 1. In the left sidebar, click {% octicon "shield" aria-label="The shield icon" %} **Code Security**. +{% if security-overview-feature-specific-alert-page %} +{% data reusables.organizations.security-overview-feature-specific-page %} +{% endif %} {% endif %} ## Viewing alerts for a repository diff --git a/data/features/security-overview-feature-specific-alert-page.yml b/data/features/security-overview-feature-specific-alert-page.yml new file mode 100644 index 000000000000..a3ac7515ceaa --- /dev/null +++ b/data/features/security-overview-feature-specific-alert-page.yml @@ -0,0 +1,7 @@ +# Reference: #7028. +# Documentation for feature-specific page for security overview at enterprise-level. +versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + ghae: 'issue-7028' diff --git a/data/reusables/organizations/security-overview-feature-specific-page.md b/data/reusables/organizations/security-overview-feature-specific-page.md new file mode 100644 index 000000000000..606fab66d0a5 --- /dev/null +++ b/data/reusables/organizations/security-overview-feature-specific-page.md @@ -0,0 +1 @@ +1. Alternatively and optionally, use the sidebar on the left to filter information per security feature. On each page, you can use filters that are specific to that feature to fine-tune your search. diff --git a/data/reusables/security-center/permissions.md b/data/reusables/security-center/permissions.md new file mode 100644 index 000000000000..f18dc342ec69 --- /dev/null +++ b/data/reusables/security-center/permissions.md @@ -0,0 +1 @@ +Organization owners and security managers can access the security overview for organizations{% ifversion ghec or ghes > 3.4 or ghae-issue-6199 %} and view their organization's repositories via the enterprise-level security overview. Enterprise owners can use the enterprise-level security overview to view all repositories in their enterprise's organizations{% endif %}. Members of a team can see the security overview for repositories that the team has admin privileges for. \ No newline at end of file