зеркало из https://github.com/github/docs.git
[Improvement]: Review the policy content for Code security and analysis in the Enterprise docs (#42157)
Co-authored-by: Laura Coursen <lecoursen@github.com>
This commit is contained in:
Родитель
9c9c0b11ed
Коммит
9f8821b786
|
@ -96,7 +96,6 @@ includeGuides:
|
|||
- /admin/policies/enforcing-policy-with-pre-receive-hooks/creating-a-pre-receive-hook-environment
|
||||
- /admin/policies/enforcing-policy-with-pre-receive-hooks/creating-a-pre-receive-hook-script
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-github-actions-in-your-enterprise
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-security-settings-in-your-enterprise
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-projects-in-your-enterprise
|
||||
|
@ -143,4 +142,3 @@ includeGuides:
|
|||
- /admin/administering-your-instance/administering-your-instance-from-the-web-ui/accessing-the-management-console
|
||||
- /admin/administering-your-instance/administering-your-instance-from-the-web-ui/troubleshooting-access-to-the-management-console
|
||||
---
|
||||
|
||||
|
|
|
@ -20,6 +20,12 @@ redirect_from:
|
|||
- /github/setting-up-and-managing-your-enterprise/enforcing-policies-for-advanced-security-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-policies-for-advanced-security-in-your-enterprise-account
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-advanced-security-in-your-enterprise
|
||||
- /admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise
|
||||
- /articles/enforcing-a-policy-on-dependency-insights
|
||||
- /articles/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise-account/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
shortTitle: Code security & analysis
|
||||
---
|
||||
{% ifversion security-feature-enablement-policies %}
|
||||
|
@ -27,15 +33,34 @@ shortTitle: Code security & analysis
|
|||
## About policies for code security and analysis in your enterprise
|
||||
|
||||
You can enforce policies to manage the use of code security and analysis features within organizations owned by your enterprise. You can allow or disallow people with admin access to a repository to enable or disable the security and analysis features.
|
||||
|
||||
Additionally, you can enforce policies for the use of {% data variables.product.prodname_GH_advanced_security %} in your enterprise's organizations and repositories.
|
||||
{% else %}
|
||||
|
||||
## About policies for {% data variables.product.prodname_GH_advanced_security %} in your enterprise
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% data reusables.advanced-security.ghas-helps-developers %} For more information, see "[AUTOTITLE](/get-started/learning-about-github/about-github-advanced-security)."
|
||||
|
||||
{% ifversion ghes or ghec %}If you purchase a license for {% data variables.product.prodname_GH_advanced_security %}, any{% else %}Any{% endif %} organization{% ifversion ghec %} owned by your enterprise{% endif %} on {% data variables.location.product_location %} can use {% data variables.product.prodname_advanced_security %} features. You can enforce policies to control how members of your enterprise on {% data variables.product.product_name %} use {% data variables.product.prodname_advanced_security %}.
|
||||
{% ifversion ghes %}If you purchase a license for {% data variables.product.prodname_GH_advanced_security %}, any{% else %}Any{% endif %} organization on {% data variables.location.product_location %} can use {% data variables.product.prodname_advanced_security %} features. You can enforce policies to control how members of your enterprise on {% data variables.product.product_name %} use {% data variables.product.prodname_advanced_security %}.
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion ghec %}
|
||||
|
||||
## Enforcing a policy for visibility of dependency insights
|
||||
|
||||
Dependency insights show all packages that repositories within your enterprise's organizations depend on. Dependency insights include aggregated information about security advisories and licenses. For more information, see "[AUTOTITLE](/organizations/collaborating-with-groups-in-organizations/viewing-insights-for-your-organization)."
|
||||
|
||||
Across all organizations owned by your enterprise, you can control whether organization members can view dependency insights. You can also allow owners to administer the setting on the organization level. For more information, see "[AUTOTITLE](/organizations/managing-organization-settings/changing-the-visibility-of-your-organizations-dependency-insights)."
|
||||
|
||||
{% data reusables.enterprise-accounts.access-enterprise %}
|
||||
{% data reusables.enterprise-accounts.policies-tab %}
|
||||
1. Under "{% octicon "law" aria-hidden="true" %} Policies", click **Code security and analysis**.
|
||||
1. Under "Dependency insights", review the information about changing the setting.
|
||||
1. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %}
|
||||
1. Under "Dependency insights", select the the dropdown menu and click a policy.
|
||||
|
||||
{% endif %}
|
||||
|
||||
{% ifversion security-feature-enablement-policies-dependabot %}
|
||||
|
||||
|
|
|
@ -1,35 +0,0 @@
|
|||
---
|
||||
title: Enforcing policies for dependency insights in your enterprise
|
||||
intro: 'You can enforce policies for dependency insights within your enterprise''s organizations, or allow policies to be set in each organization.'
|
||||
permissions: Enterprise owners can enforce policies for dependency insights in an enterprise.
|
||||
redirect_from:
|
||||
- /articles/enforcing-a-policy-on-dependency-insights
|
||||
- /articles/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise-account/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise/setting-policies-for-organizations-in-your-enterprise-account/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
versions:
|
||||
ghec: '*'
|
||||
type: how_to
|
||||
topics:
|
||||
- Dependencies
|
||||
- Enterprise
|
||||
- Organizations
|
||||
- Policies
|
||||
shortTitle: Policies for dependency insights
|
||||
---
|
||||
|
||||
## About policies for dependency insights in your enterprise
|
||||
|
||||
Dependency insights show all packages that repositories within your enterprise's organizations depend on. Dependency insights include aggregated information about security advisories and licenses. For more information, see "[AUTOTITLE](/organizations/collaborating-with-groups-in-organizations/viewing-insights-for-your-organization)."
|
||||
|
||||
## Enforcing a policy for visibility of dependency insights
|
||||
|
||||
Across all organizations owned by your enterprise, you can control whether organization members can view dependency insights. You can also allow owners to administer the setting on the organization level. For more information, see "[AUTOTITLE](/organizations/managing-organization-settings/changing-the-visibility-of-your-organizations-dependency-insights)."
|
||||
|
||||
{% data reusables.enterprise-accounts.access-enterprise %}
|
||||
{% data reusables.enterprise-accounts.policies-tab %}
|
||||
1. Under "{% octicon "law" aria-hidden="true" %} Policies", click **Code security and analysis**.
|
||||
1. Under "Dependency insights", review the information about changing the setting.
|
||||
1. {% data reusables.enterprise-accounts.view-current-policy-config-orgs %}
|
||||
1. Under "Dependency insights", select the the dropdown menu and click a policy.
|
|
@ -20,7 +20,6 @@ children:
|
|||
- /restricting-email-notifications-for-your-enterprise
|
||||
- /enforcing-policies-for-github-sponsors-in-your-enterprise
|
||||
- /enforcing-policies-for-security-settings-in-your-enterprise
|
||||
- /enforcing-policies-for-dependency-insights-in-your-enterprise
|
||||
- /enforcing-policies-for-github-actions-in-your-enterprise
|
||||
- /enforcing-policies-for-github-copilot-in-your-enterprise
|
||||
- /enforcing-policies-for-github-codespaces-in-your-enterprise
|
||||
|
@ -28,4 +27,3 @@ children:
|
|||
- /enforcing-policies-for-personal-access-tokens-in-your-enterprise
|
||||
shortTitle: Enforce policies
|
||||
---
|
||||
|
||||
|
|
|
@ -64,4 +64,4 @@ With dependency insights you can view vulnerabilities, licenses, and other impor
|
|||
- "[AUTOTITLE](/organizations/collaborating-with-groups-in-organizations/about-organizations)"
|
||||
- "[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/exploring-the-dependencies-of-a-repository)"
|
||||
- "[AUTOTITLE](/organizations/managing-organization-settings/changing-the-visibility-of-your-organizations-dependency-insights)"{% ifversion ghec %}
|
||||
- "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise)"{% endif %}
|
||||
- "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise#enforcing-a-policy-for-visibility-of-dependency-insights)"{% endif %}
|
||||
|
|
|
@ -15,7 +15,7 @@ shortTitle: Change insight visibility
|
|||
Organization owners can set limitations for viewing organization dependency insights. All members of an organization can view organization dependency insights by default.
|
||||
|
||||
{% ifversion ghec %}
|
||||
Enterprise owners can set limitations for viewing organization dependency insights on all organizations in your enterprise account. For more information, see "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise)."
|
||||
Enterprise owners can set limitations for viewing organization dependency insights on all organizations in your enterprise account. For more information, see "[AUTOTITLE](/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise#enforcing-a-policy-for-visibility-of-dependency-insights)."
|
||||
{% endif %}
|
||||
|
||||
{% data reusables.profile.access_org %}
|
||||
|
|
|
@ -230,7 +230,7 @@
|
|||
- /github/setting-up-and-managing-your-enterprise/managing-organizations-in-your-enterprise-account/streaming-the-audit-logs-for-organizations-in-your-enterprise-account
|
||||
- /admin/user-management/managing-organizations-in-your-enterprise/streaming-the-audit-logs-for-organizations-in-your-enterprise-account
|
||||
|
||||
/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-dependency-insights-in-your-enterprise
|
||||
/enterprise-cloud@latest/admin/policies/enforcing-policies-for-your-enterprise/enforcing-policies-for-code-security-and-analysis-for-your-enterprise
|
||||
- /articles/enforcing-a-policy-on-dependency-insights
|
||||
- /articles/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
- /github/setting-up-and-managing-your-enterprise-account/enforcing-a-policy-on-dependency-insights-in-your-enterprise-account
|
||||
|
|
Загрузка…
Ссылка в новой задаче