Skip to content

Commit 4b8b75e

Browse files
vgrllecoursenmattpollardlucascostilarsxschneider
authored
GitHub Enterprise Server 3.4 release candidate (github#24754)
Co-authored-by: Laura Coursen <[email protected]> Co-authored-by: Matt Pollard <[email protected]> Co-authored-by: Vanessa <[email protected]> Co-authored-by: Lucas Costi <[email protected]> Co-authored-by: Lars Schneider <[email protected]> Co-authored-by: Jared Murrell <[email protected]> Co-authored-by: Jules Parker <[email protected]> Co-authored-by: Docubot <[email protected]> Co-authored-by: Martin Lopes <[email protected]> Co-authored-by: Laura Coursen <[email protected]> Co-authored-by: Sarita Iyer <[email protected]> Co-authored-by: Sarita Iyer <[email protected]> Co-authored-by: Matt Pollard <[email protected]> Co-authored-by: hubwriter <[email protected]> Co-authored-by: Steve Guntrip <[email protected]> Co-authored-by: Lucas Costi <[email protected]> Co-authored-by: Lars Schneider <[email protected]> Co-authored-by: Jared Murrell <[email protected]> Co-authored-by: github-openapi-bot <[email protected]> Co-authored-by: github-openapi-bot <[email protected]>
1 parent 6bcbc68 commit 4b8b75e

File tree

182 files changed

+647122
-939
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

182 files changed

+647122
-939
lines changed
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading
Loading

content/actions/deployment/security-hardening-your-deployments/using-openid-connect-with-reusable-workflows.md

+1
Original file line numberDiff line numberDiff line change
@@ -9,6 +9,7 @@ versions:
99
fpt: '*'
1010
ghae: 'issue-4757-and-5856'
1111
ghec: '*'
12+
ghes: '>=3.5'
1213
type: how_to
1314
topics:
1415
- Workflows

content/actions/learn-github-actions/contexts.md

+2
Original file line numberDiff line numberDiff line change
@@ -728,6 +728,8 @@ The `inputs` context contains input properties passed to a reusable workflow. Th
728728

729729
There are no standard properties in the `inputs` context, only those which are defined in the reusable workflow file.
730730

731+
{% data reusables.actions.reusable-workflows-ghes-beta %}
732+
731733
For more information, see "[Reusing workflows](/actions/learn-github-actions/reusing-workflows)".
732734

733735
| Property name | Type | Description |

content/actions/learn-github-actions/usage-limits-billing-and-administration.md

+2
Original file line numberDiff line numberDiff line change
@@ -73,6 +73,8 @@ In addition to the usage limits, you must ensure that you use {% data variables.
7373
{% ifversion fpt or ghes > 3.3 or ghec %}
7474
## Billing for reusable workflows
7575

76+
{% data reusables.actions.reusable-workflows-ghes-beta %}
77+
7678
If you reuse a workflow, billing is always associated with the caller workflow. Assignment of {% data variables.product.prodname_dotcom %}-hosted runners is always evaluated using only the caller's context. The caller cannot use {% data variables.product.prodname_dotcom %}-hosted runners from the called repository.
7779

7880
For more information see, "[Reusing workflows](/actions/learn-github-actions/reusing-workflows)."

content/actions/using-workflows/reusing-workflows.md

+1
Original file line numberDiff line numberDiff line change
@@ -16,6 +16,7 @@ topics:
1616
---
1717

1818
{% data reusables.actions.enterprise-beta %}
19+
{% data reusables.actions.reusable-workflows-ghes-beta %}
1920
{% data reusables.actions.enterprise-github-hosted-runners %}
2021

2122
## Overview

content/actions/using-workflows/triggering-a-workflow.md

+2
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,8 @@ You can use activity types and filters to further control when your workflow wil
130130
{% ifversion fpt or ghes > 3.3 or ghae-issue-4757 or ghec %}
131131
## Defining inputs, outputs, and secrets for reusable workflows
132132

133+
{% data reusables.actions.reusable-workflows-ghes-beta %}
134+
133135
You can define inputs and secrets that a reusable workflow should receive from a calling workflow. You can also specify outputs that a reusable workflow will make available to a calling workflow. For more information, see "[Reusing workflows](/actions/using-workflows/reusing-workflows)."
134136

135137
{% endif %}

content/actions/using-workflows/workflow-syntax-for-github-actions.md

+4
Original file line numberDiff line numberDiff line change
@@ -56,6 +56,8 @@ The name of your workflow. {% data variables.product.prodname_dotcom %} displays
5656
{% ifversion fpt or ghes > 3.3 or ghae-issue-4757 or ghec %}
5757
## `on.workflow_call`
5858

59+
{% data reusables.actions.reusable-workflows-ghes-beta %}
60+
5961
Use `on.workflow_call` to define the inputs and outputs for a reusable workflow. You can also map the secrets that are available to the called workflow. For more information on reusable workflows, see "[Reusing workflows](/actions/using-workflows/reusing-workflows)."
6062

6163
### `on.workflow_call.inputs`
@@ -881,6 +883,8 @@ Additional Docker container resource options. For a list of options, see "[`dock
881883
{% ifversion fpt or ghes > 3.3 or ghae-issue-4757 or ghec %}
882884
## `jobs.<job_id>.uses`
883885

886+
{% data reusables.actions.reusable-workflows-ghes-beta %}
887+
884888
The location and version of a reusable workflow file to run as a job. {% ifversion fpt or ghec or ghes > 3.4 or ghae-issue-6000 %}Use one of the following syntaxes:{% endif %}
885889

886890
{% data reusables.actions.reusable-workflow-calling-syntax %}

content/admin/code-security/index.md

+13
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,13 @@
1+
---
2+
title: Managing code security for your enterprise
3+
shortTitle: Manage code security
4+
intro: "You can build security into your developers' workflow with features that keep secrets and vulnerabilities out of your codebase, and that maintain your software supply chain."
5+
versions:
6+
ghes: '*'
7+
ghec: '*'
8+
topics:
9+
- Enterprise
10+
children:
11+
- /managing-github-advanced-security-for-your-enterprise
12+
- /managing-supply-chain-security-for-your-enterprise
13+
---

content/admin/advanced-security/configuring-code-scanning-for-your-appliance.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/configuring-code-scanning-for-your-appliance.md

+1
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ miniTocMaxHeadingLevel: 3
77
redirect_from:
88
- /enterprise/admin/configuration/configuring-code-scanning-for-your-appliance
99
- /admin/configuration/configuring-code-scanning-for-your-appliance
10+
- /admin/advanced-security/configuring-code-scanning-for-your-appliance
1011
versions:
1112
ghes: '*'
1213
type: how_to

content/admin/advanced-security/configuring-secret-scanning-for-your-appliance.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/configuring-secret-scanning-for-your-appliance.md

+1
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,7 @@ product: '{% data reusables.gated-features.secret-scanning %}'
66
miniTocMaxHeadingLevel: 3
77
redirect_from:
88
- /admin/configuration/configuring-secret-scanning-for-your-appliance
9+
- /admin/advanced-security/configuring-secret-scanning-for-your-appliance
910
versions:
1011
ghes: '*'
1112
type: how_to

content/admin/advanced-security/deploying-github-advanced-security-in-your-enterprise.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/deploying-github-advanced-security-in-your-enterprise.md

+2
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
title: Deploying GitHub Advanced Security in your enterprise
33
intro: 'Learn how to plan, prepare, and implement a phased approach for rolling out {% data variables.product.prodname_GH_advanced_security %} (GHAS) in your enterprise.'
44
product: '{% data reusables.gated-features.advanced-security %}'
5+
redirect_from:
6+
- /admin/advanced-security/deploying-github-advanced-security-in-your-enterprise
57
miniTocMaxHeadingLevel: 3
68
versions:
79
ghes: '*'

content/admin/advanced-security/enabling-github-advanced-security-for-your-enterprise.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/enabling-github-advanced-security-for-your-enterprise.md

+5-3
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,8 @@ title: Enabling GitHub Advanced Security for your enterprise
33
shortTitle: Enabling GitHub Advanced Security
44
intro: 'You can configure {% data variables.product.product_name %} to include {% data variables.product.prodname_GH_advanced_security %}. This provides extra features that help users find and fix security problems in their code.'
55
product: '{% data reusables.gated-features.ghas %}'
6+
redirect_from:
7+
- /admin/advanced-security/enabling-github-advanced-security-for-your-enterprise
68
versions:
79
ghes: '*'
810
type: how_to
@@ -56,7 +58,7 @@ For guidance on a phased deployment of GitHub Advanced Security, see "[Deploying
5658

5759
- {% data variables.product.prodname_code_scanning_capc %}, see "[Configuring {% data variables.product.prodname_code_scanning %} for your appliance](/admin/advanced-security/configuring-code-scanning-for-your-appliance#prerequisites-for-code-scanning)."
5860
- {% data variables.product.prodname_secret_scanning_caps %}, see "[Configuring {% data variables.product.prodname_secret_scanning %} for your appliance](/admin/advanced-security/configuring-secret-scanning-for-your-appliance#prerequisites-for-secret-scanning)."{% endif %}
59-
- {% data variables.product.prodname_dependabot %}, see "[Enabling the dependency graph and {% data variables.product.prodname_dependabot_alerts %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-the-dependency-graph-and-dependabot-alerts-for-your-enterprise)."
61+
- {% data variables.product.prodname_dependabot %}, see "[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
6062

6163
## Enabling and disabling {% data variables.product.prodname_GH_advanced_security %} features
6264

@@ -91,7 +93,7 @@ For example, you can enable any {% data variables.product.prodname_GH_advanced_s
9193
```shell
9294
ghe-config app.secret-scanning.enabled true
9395
```
94-
- To enable {% data variables.product.prodname_dependabot %}, enter the following {% ifversion ghes > 3.1 %}command{% else %}commands{% endif %}.
96+
- To enable the dependency graph, enter the following {% ifversion ghes > 3.1 %}command{% else %}commands{% endif %}.
9597
{% ifversion ghes > 3.1 %}```shell
9698
ghe-config app.dependency-graph.enabled true
9799
```
@@ -110,7 +112,7 @@ For example, you can enable any {% data variables.product.prodname_GH_advanced_s
110112
```shell
111113
ghe-config app.secret-scanning.enabled false
112114
```
113-
- To disable {% data variables.product.prodname_dependabot_alerts %}, enter the following {% ifversion ghes > 3.1 %}command{% else %}commands{% endif %}.
115+
- To disable the dependency graph, enter the following {% ifversion ghes > 3.1 %}command{% else %}commands{% endif %}.
114116
{% ifversion ghes > 3.1 %}```shell
115117
ghe-config app.dependency-graph.enabled false
116118
```

content/admin/advanced-security/index.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/index.md

+3-2
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,12 @@
11
---
22
title: Managing GitHub Advanced Security for your enterprise
3-
shortTitle: Managing GitHub Advanced Security
4-
intro: 'You can configure {% data variables.product.prodname_advanced_security %} and manage use by your enterprise to suit your organization''s needs.'
3+
shortTitle: GitHub Advanced Security
4+
intro: "You can configure {% data variables.product.prodname_advanced_security %} and manage use by your enterprise to suit your organization's needs."
55
product: '{% data reusables.gated-features.ghas %}'
66
redirect_from:
77
- /enterprise/admin/configuration/configuring-advanced-security-features
88
- /admin/configuration/configuring-advanced-security-features
9+
- /admin/advanced-security
910
versions:
1011
ghes: '*'
1112
ghec: '*'

content/admin/advanced-security/overview-of-github-advanced-security-deployment.md content/admin/code-security/managing-github-advanced-security-for-your-enterprise/overview-of-github-advanced-security-deployment.md

+2
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,8 @@
22
title: Overview of GitHub Advanced Security deployment
33
intro: 'Help your company successfully prepare to adopt {% data variables.product.prodname_GH_advanced_security %} (GHAS) by reviewing and understanding these best practices, rollout examples, and our enterprise-tested phased approach.'
44
product: '{% data variables.product.prodname_GH_advanced_security %} is a set of security features designed to make enterprise code more secure. It is available for {% data variables.product.prodname_ghe_server %} 3.0 or higher, {% data variables.product.prodname_ghe_cloud %}, and open source repositories. To learn more about the features, included in {% data variables.product.prodname_GH_advanced_security %}, see "[About GitHub Advanced Security](/get-started/learning-about-github/about-github-advanced-security)."'
5+
redirect_from:
6+
- /admin/advanced-security/overview-of-github-advanced-security-deployment
57
miniTocMaxHeadingLevel: 3
68
versions:
79
ghes: '*'
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
---
2+
title: About supply chain security for your enterprise
3+
intro: 'You can enable features that help your developers understand and update the dependencies their code relies on.'
4+
shortTitle: About supply chain security
5+
permissions: ''
6+
versions:
7+
ghes: '*'
8+
ghae: issue-4864
9+
type: how_to
10+
topics:
11+
- Enterprise
12+
- Security
13+
- Dependency graph
14+
---
15+
16+
You can allow users to identify their projects' dependencies by enabling the dependency graph for {% data variables.product.product_location %}. For more information, see "[Enabling the dependency graph for your enterprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/enabling-the-dependency-graph-for-your-enterprise)."
17+
18+
You can also allow users on {% data variables.product.product_location %} to find and fix vulnerabilities in their code dependencies by enabling {% data variables.product.prodname_dependabot_alerts %}{% ifversion ghes > 3.2 %} and {% data variables.product.prodname_dependabot_updates %}{% endif %}. For more information, see "[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
19+
20+
After you enable {% data variables.product.prodname_dependabot_alerts %}, you can view vulnerability data from the {% data variables.product.prodname_advisory_database %} on {% data variables.product.product_location %} and manually sync the data. For more information, see "[Viewing the vulnerability data for your enterprise](/admin/code-security/managing-supply-chain-security-for-your-enterprise/viewing-the-vulnerability-data-for-your-enterprise)."
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,60 @@
1+
---
2+
title: Enabling the dependency graph for your enterprise
3+
intro: "You can allow users to identify their projects' dependencies by enabling the dependency graph."
4+
shortTitle: Enable dependency graph
5+
permissions: 'Site administrators can enable the dependency graph.'
6+
versions:
7+
ghes: '*'
8+
type: how_to
9+
topics:
10+
- Enterprise
11+
- Security
12+
- Dependency graph
13+
---
14+
15+
## About the dependency graph
16+
17+
{% data reusables.dependabot.about-the-dependency-graph %} For more information, see "[About the dependency graph](/github/visualizing-repository-data-with-graphs/about-the-dependency-graph)"
18+
19+
After you enable the dependency graph for your enterprise, you can enable {% data variables.product.prodname_dependabot %} to detect vulnerable dependencies in your repository{% ifversion ghes > 3.2 %} and automatically fix the vulnerabilities{% endif %}. For more information, see "[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
20+
21+
{% ifversion ghes > 3.1 %}
22+
You can enable the dependency graph via the {% data variables.enterprise.management_console %} or the administrative shell. We recommend using the {% data variables.enterprise.management_console %} unless {% data variables.product.product_location %} uses clustering.
23+
24+
## Enabling the dependency graph via the {% data variables.enterprise.management_console %}
25+
26+
If your {% data variables.product.product_location %} uses clustering, you cannot enable the dependency graph with the {% data variables.enterprise.management_console %} and must use the administrative shell instead. For more information, see "[Enabling the dependency graph via the administrative shell](#enabling-the-dependency-graph-via-the-administrative-shell)."
27+
28+
{% data reusables.enterprise_site_admin_settings.sign-in %}
29+
{% data reusables.enterprise_site_admin_settings.access-settings %}
30+
{% data reusables.enterprise_site_admin_settings.management-console %}
31+
{% data reusables.enterprise_management_console.advanced-security-tab %}
32+
1. Under "Security," click **Dependency graph**.
33+
![Checkbox to enable or disable the dependency graph](/assets/images/enterprise/3.2/management-console/enable-dependency-graph-checkbox.png)
34+
{% data reusables.enterprise_management_console.save-settings %}
35+
1. Click **Visit your instance**.
36+
37+
## Enabling the dependency graph via the administrative shell
38+
39+
{% endif %}{% ifversion ghes < 3.2 %}
40+
## Enabling the dependency graph
41+
{% endif %}
42+
{% data reusables.enterprise_site_admin_settings.sign-in %}
43+
1. In the administrative shell, enable the dependency graph on {% data variables.product.product_location %}:
44+
{% ifversion ghes > 3.1 %}```shell
45+
ghe-config app.dependency-graph.enabled true
46+
```
47+
{% else %}```shell
48+
ghe-config app.github.dependency-graph-enabled true
49+
ghe-config app.github.vulnerability-alerting-and-settings-enabled true
50+
```{% endif %}
51+
{% note %}
52+
53+
**Note**: For more information about enabling access to the administrative shell via SSH, see "[Accessing the administrative shell (SSH)](/enterprise/{{ currentVersion }}/admin/configuration/accessing-the-administrative-shell-ssh)."
54+
55+
{% endnote %}
56+
2. Apply the configuration.
57+
```shell
58+
$ ghe-config-apply
59+
```
60+
3. Return to {% data variables.product.prodname_ghe_server %}.
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,14 @@
1+
---
2+
title: Managing supply chain security for your enterprise
3+
shortTitle: Supply chain security
4+
intro: "You can visualize, maintain, and secure the dependencies in your developers' software supply chain."
5+
versions:
6+
ghes: '*'
7+
ghae: issue-4864
8+
topics:
9+
- Enterprise
10+
children:
11+
- /about-supply-chain-security-for-your-enterprise
12+
- /enabling-the-dependency-graph-for-your-enterprise
13+
- /viewing-the-vulnerability-data-for-your-enterprise
14+
---
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,27 @@
1+
---
2+
title: Viewing the vulnerability data for your enterprise
3+
intro: 'You can view vulnerability data from the {% data variables.product.prodname_advisory_database %} on {% data variables.product.product_location %}.'
4+
shortTitle: View vulnerability data
5+
permissions: 'Site administrators can view vulnerability data on {% data variables.product.product_location %}.'
6+
versions:
7+
ghes: '*'
8+
ghae: issue-4864
9+
type: how_to
10+
topics:
11+
- Enterprise
12+
- Security
13+
- Dependency graph
14+
---
15+
16+
If {% data variables.product.prodname_dependabot_alerts %} are enabled for your enterprise, you can view all vulnerabilities that were downloaded to {% data variables.product.product_location %} from the {% data variables.product.prodname_advisory_database %}.
17+
18+
You can manually sync vulnerability data from {% data variables.product.prodname_dotcom_the_website %} to update the list.
19+
20+
Before you can view vulnerability data, you must enable {% data variables.product.prodname_dependabot_alerts %}. For more information, see "[Enabling {% data variables.product.prodname_dependabot %} for your enterprise](/admin/configuration/configuring-github-connect/enabling-dependabot-for-your-enterprise)."
21+
22+
{% data reusables.enterprise_site_admin_settings.access-settings %}
23+
2. In the left sidebar, click **Vulnerabilities**.
24+
![Vulnerabilities tab in the site admin sidebar](/assets/images/enterprise/business-accounts/vulnerabilities-tab.png)
25+
3. To sync vulnerability data, click **Sync Vulnerabilities now**.
26+
![Sync vulnerabilities now button](/assets/images/enterprise/site-admin-settings/sync-vulnerabilities-button.png)
27+

0 commit comments

Comments
 (0)