Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitbc84eea

Browse files
authored
Merge pull request#41948 from github/repo-sync
Repo sync
2 parentsdcb3eaf +263203c commitbc84eea

File tree

53 files changed

+495
-178
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

53 files changed

+495
-178
lines changed

‎content/actions/how-tos/manage-runners/use-proxy-servers.md‎

Lines changed: 1 addition & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,11 +22,7 @@ contentType: how-tos
2222

2323
If your runner needs to communicate via a proxy server, you can configure proxy settings using environment variables or system-level configurations.
2424

25-
| Variable| Description| Example|
26-
| -------------| -----------------------------------------------------------------------------------------------------| -------------------------------------------------------------------------------------------|
27-
|`https_proxy`| Proxy URL for HTTPS traffic. You can include basic authentication if required.|`http://proxy.local`<br>`http://192.168.1.1:8080`<br>`http://username:password@proxy.local`|
28-
|`http_proxy`| Proxy URL for HTTP traffic. You can include basic authentication if required.|`http://proxy.local`<br>`http://192.168.1.1:8080`<br>`http://username:password@proxy.local`|
29-
|`no_proxy`| A comma-separated list of hosts or IP addresses that should bypass the proxy. Some clients only honor IP addresses when connections are made directly to the IP rather than a hostname.|`example.com`<br>`example.com,myserver.local:443,example.org`|
25+
{% data reusables.actions.actions-proxy-environment-variables-table %}
3026

3127
The proxy environment variables are read when the runner application starts, so you must set the environment variables before configuring or starting the runner application. If your proxy configuration changes, you must restart the runner application.
3228

‎content/admin/data-residency/network-details-for-ghecom.md‎

Lines changed: 40 additions & 45 deletions
Original file line numberDiff line numberDiff line change
@@ -12,14 +12,18 @@ redirect_from:
1212

1313
To access your enterprise on {% data variables.enterprise.data_residency_site %}, client systems must:
1414

15-
* Trustthe following SSH key fingerprints
16-
* Have access tothe following hostnames and IP addresses
15+
* Trust{% data variables.product.github %}'s SSH key fingerprints
16+
* Have access to{% data variables.product.github %}'s hostnames and IP addresses
1717

1818
##{% data variables.product.github %}'s SSH key fingerprints
1919

20-
*`SHA256:PYES2CtancLX+w0+VvwWRQclfulUkqj6hpZmcKFAO3w` (RSA)
21-
*`SHA256:TKoEXigNsj5b6XaSOSf20L0y3cuNx41WWM+l4AAK9k4` (ECDSA)
22-
*`SHA256:LqPvjvQugr3MmzVYw9M3gT7won8/lUPZCSvmNydl7vU` (Ed25519)
20+
To find these details, use the`/meta` API endpoint for your instance. For example, using the {% data variables.product.prodname_cli %}:
21+
22+
```shell
23+
gh api /meta --hostname octocorp.ghe.com
24+
```
25+
26+
For more information, see[AUTOTITLE](/rest/meta/meta).
2327

2428
##{% data variables.product.github %}'s hostnames
2529

@@ -36,8 +40,6 @@ To access your enterprise on {% data variables.enterprise.data_residency_site %}
3640

3741
###The EU
3842

39-
These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in the EU.
40-
4143
| Ranges for egress traffic| Ranges for ingress traffic|
4244
|--------------------------|---------------------------|
4345
| 108.143.221.96/28| 108.143.197.176/28|
@@ -49,8 +51,6 @@ These are {% data variables.product.company_short %}'s IP address ranges for ent
4951

5052
###Australia
5153

52-
These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in Australia.
53-
5454
| Ranges for egress traffic| Ranges for ingress traffic|
5555
|--------------------------|---------------------------|
5656
| 20.5.34.240/28| 4.237.73.192/28|
@@ -59,14 +59,20 @@ These are {% data variables.product.company_short %}'s IP address ranges for ent
5959

6060
###US
6161

62-
These are {% data variables.product.company_short %}'s IP address ranges for enterprises hosted in the US.
63-
6462
| Ranges for egress traffic| Ranges for ingress traffic|
6563
|--------------------------|---------------------------|
6664
| 20.221.76.128/28| 74.249.180.192/28|
6765
| 135.233.115.208/28| 48.214.149.96/28|
6866
| 20.118.27.192/28| 172.202.123.176/28|
6967

68+
###Japan
69+
70+
| Ranges for egress traffic| Ranges for ingress traffic|
71+
|--------------------------|-----------------------------|
72+
| 74.226.88.192/28| 74.226.88.240/28|
73+
| 40.81.180.112/28| 40.81.176.224/28|
74+
| 4.190.169.192/28| 4.190.169.240/28|
75+
7076
##Supported regions for Azure private networking
7177

7278
If you use Azure private networking for {% data variables.product.company_short %}-hosted runners, the supported Azure regions on {% data variables.enterprise.data_residency_site %} differ from those on {% data variables.product.prodname_dotcom_the_website %}.
@@ -95,6 +101,14 @@ If you use Azure private networking for {% data variables.product.company_short
95101
| arm64|`centralus`,`eastus2`,`westus3`|
96102
| GPU|`centralus`,`eastus2`,`westus3`|
97103

104+
###Supported regions in Japan
105+
106+
| Runner type| Supported regions|
107+
| -----------| -----------------|
108+
| x64|`japaneast`,`japanwest`|
109+
| arm64|`japaneast`,`japanwest`|
110+
| GPU|`japaneast`|
111+
98112
###IP ranges for Azure private networking
99113

100114
####EU
@@ -113,17 +127,30 @@ EU region:
113127
* 20.240.220.192/28
114128
* 20.240.211.208/28
115129

116-
####Austrailia
130+
####Australia
117131

118132
Actions IPs:
119133
* 4.147.140.77
120134
* 20.53.114.78
121135

122-
Austraila region:
136+
Australia region:
123137
* 4.237.73.192/28
124138
* 20.5.226.112/28
125139
* 20.248.163.176/28
126140

141+
####Japan
142+
143+
Actions IPs:
144+
145+
* 20.63.233.164
146+
* 172.192.153.164
147+
148+
Japan region:
149+
150+
74.226.88.241
151+
40.81.176.225
152+
4.190.169.240
153+
127154
####Required for all regions
128155

129156
*`Storage` service tag
@@ -160,35 +187,3 @@ Austraila region:
160187
##IP ranges for {% data variables.product.prodname_importer_proper_name %}
161188

162189
If you're running a migration to your enterprise with {% data variables.product.prodname_importer_proper_name %}, you may need to add certain ranges to an IP allow list. See[AUTOTITLE](/migrations/using-github-enterprise-importer/migrating-between-github-products/managing-access-for-a-migration-between-github-products#configuring-ip-allow-lists-for-migrations).
163-
164-
###Required in the EU
165-
166-
* 4.231.155.80/29
167-
* 4.225.9.96/29
168-
* 51.12.152.184/29
169-
* 20.199.6.80/29
170-
* 51.12.144.32/29
171-
* 20.199.1.232/29
172-
* 51.12.152.240/29
173-
* 20.19.101.136/29
174-
* 74.241.131.48/28
175-
* 51.12.252.16/28
176-
* 20.240.211.176/28
177-
* 108.143.221.96/28
178-
* 20.61.46.32/28
179-
* 20.224.62.160/28
180-
181-
###Required in Australia
182-
183-
* 20.213.241.72/29
184-
* 20.11.90.48/29
185-
* 20.5.34.240/28
186-
* 20.5.146.128/28
187-
* 68.218.155.16/28
188-
189-
###Required in the US
190-
191-
* 130.213.245.128/28
192-
* 20.171.204.144/28
193-
* 20.171.204.176/28
194-
* 4.150.167.192/28

‎content/admin/managing-code-security/securing-your-enterprise/creating-a-custom-security-configuration-for-your-enterprise.md‎

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -69,7 +69,8 @@ When creating a security configuration, keep in mind that:
6969
>When both "{% data variables.product.prodname_code_security %}" and Dependency graph are enabled, this enables dependency review, see[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).{%- ifversion maven-transitive-dependencies %}
7070
***Automatic dependency submission**. To learn about automatic dependency submission, see[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository).{%- endif %}
7171
***{% data variables.product.prodname_dependabot %} alerts**. To learn about {% data variables.product.prodname_dependabot %}, see[AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts).
72-
***Security updates**. To learn about security updates, see[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates).{% ifversion fpt or ghec %}
72+
***Security updates**. To learn about security updates, see[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates).{% ifversion dependabot-delegated-alert-dismissal %}
73+
***Prevent direct alert dismissals**. To learn more, see[AUTOTITLE](/code-security/dependabot/dependabot-alerts/enable-delegated-alert-dismissal).{% endif %}{% ifversion fpt or ghec %}
7374
1. For "Private vulnerability reporting", choose whether you want to enable, disable, or keep the existing settings. To learn about private vulnerability reporting, see[AUTOTITLE](/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository).{% endif %}
7475
1. Optionally, in the "Policy" section, you can use additional options to control how the configuration is applied:
7576
***Use as default for newly created repositories**. Select the**None** {% octicon "triangle-down" aria-hidden="true" aria-label="triangle-down" %} dropdown menu, then click**Public**,**Private and internal**, or**All repositories**.
@@ -108,7 +109,8 @@ When creating a security configuration, keep in mind that:
108109
>When both "{% data variables.product.prodname_GHAS %}" and Dependency graph are enabled, this enables dependency review, see[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review).{%- ifversion maven-transitive-dependencies %}
109110
***Automatic dependency submission**. To learn about automatic dependency submission, see[AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/configuring-automatic-dependency-submission-for-your-repository).{%- endif %}
110111
***{% data variables.product.prodname_dependabot %} alerts**. To learn about {% data variables.product.prodname_dependabot %}, see[AUTOTITLE](/code-security/dependabot/dependabot-alerts/about-dependabot-alerts).
111-
***Security updates**. To learn about security updates, see[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates).{% ifversion fpt or ghec %}
112+
***Security updates**. To learn about security updates, see[AUTOTITLE](/code-security/dependabot/dependabot-security-updates/about-dependabot-security-updates).{% ifversion dependabot-delegated-alert-dismissal %}
113+
***Prevent direct alert dismissals**. To learn more, see[AUTOTITLE](/code-security/dependabot/dependabot-alerts/enable-delegated-alert-dismissal).{% endif %}{% ifversion fpt or ghec %}
112114
1. For "Private vulnerability reporting", choose whether you want to enable, disable, or keep the existing settings. To learn about private vulnerability reporting, see[AUTOTITLE](/code-security/security-advisories/working-with-repository-security-advisories/configuring-private-vulnerability-reporting-for-a-repository).{% endif %}
113115
1. Optionally, in the "Policy" section, you can use additional options to control how the configuration is applied:
114116
***Use as default for newly created repositories**. Select the**None** {% octicon "triangle-down" aria-hidden="true" aria-label="triangle-down" %} dropdown menu, then click**Public**,**Private and internal**, or**All repositories**.

‎content/admin/overview/establishing-a-governance-framework-for-your-enterprise.md‎

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -122,7 +122,10 @@ You may want to set up an approval process for better control over who in your e
122122
123123
Approval processes are available for:
124124
* Bypasses of push protection—You can choose who is allowed to bypass push protection, and add a review and approval cycle for pushes containing secrets from all other contributors. For more information about**delegated bypass for push protection**, see[AUTOTITLE](/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/delegated-bypass-for-push-protection/about-delegated-bypass-for-push-protection).{% ifversion security-delegated-alert-dismissal %}
125-
* Dismissals of alerts for {% data variables.product.prodname_code_scanning %} and {% data variables.product.prodname_secret_scanning %}—You can provide additional control and visibility over alert assessment by ensuring that only designated individuals can dismiss (or close) alerts. For more information about**delegated alert dismissal**, see[AUTOTITLE](/code-security/code-scanning/managing-your-code-scanning-configuration/enabling-delegated-alert-dismissal-for-code-scanning) and[AUTOTITLE](/code-security/code-scanning/managing-your-code-scanning-configuration/enabling-delegated-alert-dismissal-for-code-scanning).
125+
* Dismissals of alerts for {% data variables.product.prodname_code_scanning %}{% ifversion dependabot-delegated-alert-dismissal %}, {% data variables.product.prodname_dependabot %},{% endif %} and {% data variables.product.prodname_secret_scanning %}—You can provide additional control and visibility over alert assessment by ensuring that only designated individuals can dismiss (or close) alerts. For more information about**delegated alert dismissal**, see the following articles:
126+
*[AUTOTITLE](/code-security/code-scanning/managing-your-code-scanning-configuration/enabling-delegated-alert-dismissal-for-code-scanning){% ifversion dependabot-delegated-alert-dismissal %}
127+
*[AUTOTITLE](/code-security/dependabot/dependabot-alerts/enable-delegated-alert-dismissal){% endif %}
128+
*[AUTOTITLE](/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/enabling-delegated-alert-dismissal-for-secret-scanning)
126129

127130
{% endif %}
128131

‎content/authentication/keeping-your-account-and-data-secure/about-githubs-ip-addresses.md‎

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -19,13 +19,7 @@ topics:
1919
shortTitle:GitHub's IP addresses
2020
---
2121

22-
You can retrieve a list of the IP addresses for {% data variables.product.prodname_dotcom_the_website %} from the[meta](https://api.github.com/meta) API endpoint. For more information, see[AUTOTITLE](/rest/meta).
23-
24-
{% ifversion ghec %}
25-
26-
If you access {% data variables.product.github %} on a subdomain of {% data variables.enterprise.data_residency_site %}, the meta endpoint does not return IP ranges for your subdomain. See[AUTOTITLE](/admin/data-residency/network-details-for-ghecom#githubs-ip-addresses).
27-
28-
{% endif %}
22+
You can retrieve a list of the IP addresses for your {% data variables.product.github %} environment from the[meta](https://api.github.com/meta) API endpoint. For more information, see[AUTOTITLE](/rest/meta).
2923

3024
>[!NOTE]
3125
>The list of {% data variables.product.prodname_dotcom %} IP addresses returned by the Meta API is not intended to be an exhaustive list. For example, IP addresses for some {% data variables.product.prodname_dotcom %} services might not be listed, such as LFS or {% data variables.product.prodname_registry %}.

‎content/code-security/code-scanning/index.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,4 +25,5 @@ children:
2525
-/integrating-with-code-scanning
2626
-/troubleshooting-code-scanning
2727
-/troubleshooting-sarif-uploads
28+
-/reference
2829
---

‎content/code-security/code-scanning/managing-code-scanning-alerts/triaging-code-scanning-alerts-in-pull-requests.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -127,7 +127,7 @@ Anyone with push access to a pull request can fix a {% data variables.product.pr
127127
When {% data variables.copilot.copilot_autofix_short %} is enabled for a repository, alerts are displayed in pull requests as normal and information from any alerts found by {% data variables.product.prodname_code_scanning %} is automatically sent to the LLM for processing. When LLM analysis is complete, any results are published as comments on relevant alerts. For more information, see[AUTOTITLE](/code-security/code-scanning/managing-code-scanning-alerts/responsible-use-autofix-code-scanning).
128128

129129
>[!NOTE]
130-
>* {% data variables.copilot.copilot_autofix_short %} supports a subset of {% data variables.product.prodname_codeql %} queries. For information about the availability of {% data variables.copilot.copilot_autofix_short %}, see the query tables linked from[AUTOTITLE](/code-security/code-scanning/managing-your-code-scanning-configuration/codeql-query-suites#query-lists-for-the-default-query-suites).
130+
>* {% data variables.copilot.copilot_autofix_short %} supports a subset of {% data variables.product.prodname_codeql %} queries. For information about the availability of {% data variables.copilot.copilot_autofix_short %}, see the query tables linked from[AUTOTITLE](/code-security/code-scanning/reference/code-ql-built-in-queries).
131131
>* When analysis is complete, all relevant results are published to the pull request at once. If at least one alert in your pull request has an {% data variables.copilot.copilot_autofix_short %} suggestion, you should assume that the LLM has finished identifying potential fixes for your code.
132132
>* On alerts generated from queries that are not supported by {% data variables.copilot.copilot_autofix_short %}, you will see a note telling you that the query is not supported. If a suggestion for a supported query fails to generate, you will see a note on the alert prompting you to try pushing another commit or to contact support.
133133
>* {% data variables.copilot.copilot_autofix_short %} for {% data variables.product.prodname_code_scanning %} alerts won't be able to generate a fix for every alert in every situation. The feature operates on a best-effort basis and is not guaranteed to succeed 100% of the time. For information about the limitations of automatically generated fixes, see[Limitations of suggestions](/code-security/code-scanning/managing-code-scanning-alerts/about-autofix-for-codeql-code-scanning#limitations-of-suggestions).

‎content/code-security/code-scanning/managing-your-code-scanning-configuration/codeql-query-suites.md‎

Lines changed: 3 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title:CodeQL query suites
33
shortTitle:CodeQL query suites
4-
intro:'You can choose from different built-in {% data variables.product.prodname_codeql %} query suites to use in your {% data variables.product.prodname_codeql %} {% data variables.product.prodname_code_scanning %} setup.'
4+
intro:You can choose from different built-in {% data variables.product.prodname_codeql %} query suites to use in your {% data variables.product.prodname_codeql %} {% data variables.product.prodname_code_scanning %} setup.
55
product:'{% data reusables.gated-features.codeql %}'
66
versions:
77
fpt:'*'
@@ -14,6 +14,7 @@ type: reference
1414
topics:
1515
-Code scanning
1616
-CodeQL
17+
contentType:other
1718
---
1819

1920
##About {% data variables.product.prodname_codeql %} query suites
@@ -43,11 +44,7 @@ The built-in {% data variables.product.prodname_codeql %} query suites, `default
4344
* Relative to the`default` query suite, the`security-extended` suite may return a greater number of false positive {% data variables.product.prodname_code_scanning %} results.
4445
* This query suite is available for use with default setup for {% data variables.product.prodname_code_scanning %}, and is referred to as the "Extended" query suite on {% data variables.product.prodname_dotcom %}.
4546

46-
##Query lists for the default query suites
47-
48-
For each language, the following article lists which queries are included in the`default` and the`security-extended` suites. {% ifversion code-scanning-autofix %}Where {% data variables.copilot.copilot_autofix_short %} is available for a language, details of which queries are supported are also included.{% endif %}
49-
50-
{% data reusables.code-scanning.codeql-query-tables.links-to-all-tables %}
47+
For a complete list of queries included in each query suite for every language, see[AUTOTITLE](/code-security/code-scanning/reference).
5148

5249
##Further reading
5350

‎content/code-security/code-scanning/managing-your-code-scanning-configuration/enabling-delegated-alert-dismissal-for-code-scanning.md‎

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,3 +46,7 @@ You must configure delegated dismissal for your enterprise using a custom securi
4646
1. Apply the security configuration to all (or selected) repositories in your enterprise. See[AUTOTITLE](/admin/managing-code-security/securing-your-enterprise/applying-a-custom-security-configuration-to-your-enterprise).
4747

4848
To learn more about security configurations, see[AUTOTITLE](/code-security/securing-your-organization/introduction-to-securing-your-organization-at-scale/about-enabling-security-features-at-scale).
49+
50+
##Next steps
51+
52+
Now that you have enabled delegated alert dismissal for {% data variables.product.prodname_code_scanning %}, you should regularly review alert dismissal requests to maintain an accurate alert count and unblock your developers. See[AUTOTITLE](/code-security/security-overview/review-alert-dismissal-requests).

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp