You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/code-security/security-overview/about-the-security-overview.md
+14-24Lines changed: 14 additions & 24 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -64,41 +64,33 @@ The application security team at your company can use the different views for bo
64
64
65
65
Organization owners and security managers for organizations have access to the security overview for their organizations. {% ifversion ghec or ghes > 3.6 or ghae > 3.6 %}Organization members can also access the organization-level security overview to view results for repositories where they have admin privileges or have been granted access to security alerts. For more information on managing security alert access, see "[Managing security and analysis settings for your repository](/github/administering-a-repository/managing-security-and-analysis-settings-for-your-repository)."{% endif %}
66
66
67
-
{% ifversion security-overview-single-repo-enablement or security-overview-org-risk-coverage %}
This view shows data about the repositories affected by different types of security alert.
72
72
73
-
- Use the **Type** and **Teams** drop-downs to add repository type and team filters.
74
-
- Click **Open alerts** or **Repositories affected** to show only repositories with a specific type of security alert.
73
+
- Use the **Teams** dropdown menu to show information only for the repositories owned by one or more teams.
74
+
- Click **NUMBER affected** or **NUMBER unaffected** in the header for any type of alert to show only the repositories with or without alerts of that type.
75
+
- Click any of the descriptions of "Open alerts" in the header to show only repositories with alerts of that type and category. For example, **1 critical** to show the repository with a critical alert for {% data variables.product.prodname_dependabot %}.
76
+
- Click **NUMBER Archived** to show only repositories that are archived.
77
+
- Click in the search box to show a list of the full set of available filters.
75
78
76
-
In addition, when you click in the search box, a list of the full set of filters available is shown.
77
-
78
-
79
+
79
80
80
81
81
82
### Security Coverage view
82
83
83
-
This view shows data about which repositories are using security features.
84
-
85
-
- Use the **Type** and **Teams** drop-downs to add repository type and team filters.
86
-
- Click **Alerts enabled** and other features listed in the header to see only repositories with those features enabled.
87
-
- Change any `FEATURE:enabled` filter to `FEATURE:not-enabled` in the search box to see repositories that haven't enabled a feature.
- For any repository, click **Security Settings** to enable security features that have a one-click setup.
90
-
91
-
In addition, when you click in the search box, a list of the full set of filters available is shown.
84
+
This view shows data about which security features are used by repositories in the organization. You can filter the view to show the repositories of interest using links, a dropdown menu, and a search field.
92
85
93
-
86
+
- Use the **Teams** dropdown to show information only for the repositories owned by one or more teams.
87
+
- Click **NUMBER enabled** or **NUMBER not enabled** in the header for any feature to show only the repositories with that feature enabled or not enabled.
88
+
- Click **NUMBER Archived** to show only repositories that are archived.
89
+
- Click in the search box to show a list of the full set of available filters.
94
90
95
-
{%- elsif security-overview-org-risk-coverage %}
96
-
- For any repository, click the ellipsis (**...**) then **Security Settings** to enable additional features.
91
+
In addition, you can click **{% octicon "gear" aria-label="" %} Security settings** for any repository to enable the security features that have a one-click setup.
97
92
98
-
In addition, when you click in the search box, a list of the full set of filters available is shown.
99
-
100
-
101
-
{% endif %}
93
+
102
94
103
95
{% else %}
104
96
@@ -108,8 +100,6 @@ In addition, when you click in the search box, a list of the full set of filters
108
100
109
101
For each repository in the security overview, you will see icons for each type of security feature and how many alerts there are of each type. If a security feature is not enabled for a repository, the icon for that feature will be grayed out. In addition, a risk score is calculated for each repository based on its code scanning, Dependabot and secret scanning alerts. This score is in beta and should be used with caution. Its algorithm and approach is subject to change.
110
102
111
-
112
-
113
103
| Icon | Meaning |
114
104
| -------- | -------- |
115
105
| {% octicon "code-square" aria-label="Code scanning alerts" %} | {% data variables.product.prodname_code_scanning_capc %} alerts. For more information, see "[About {% data variables.product.prodname_code_scanning %}](/code-security/secure-coding/about-code-scanning)." |
{% data reusables.organizations.navigate-to-org %}
33
33
{% data reusables.organizations.security-overview %}
34
-
1. Choose the overview you want to display from the options in the sidebar.
35
-
1. Use the drop-down filters and search box to focus on the information of greatest interest. The "Security Risk" and "Security Coverage" views also have an interactive header that you can use to filter results.
36
-
37
-
34
+
1. To display a summary view, in the sidebar, click **{% octicon "shield" %} Risk** or **{% octicon "meter" %} Coverage**.
35
+
1. Optionally, to focus on the information of greatest interest, select the **Teams** dropdown filter and search box.
36
+
1. Optionally, use links in the "{% data variables.product.prodname_dependabot %}", "{% data variables.product.prodname_code_scanning %}", and "{% data variables.product.prodname_secret_scanning %}" header summaries to filter results further.
37
+
38
+
{% data reusables.organizations.security-overview-feature-specific-page %}
38
39
39
40
{% else %}
40
41
41
42
{% data reusables.organizations.navigate-to-org %}
42
43
{% data reusables.organizations.security-overview %}
43
44
1. To view aggregate information about alert types, click **Show more**.
44
-
45
45
{% data reusables.organizations.filter-security-overview %}
46
46
{% ifversion security-overview-alert-views %}
47
47
{% data reusables.organizations.security-overview-feature-specific-page %}
48
-
48
+
49
49
{% endif %}
50
50
51
51
{% endif %}
@@ -57,7 +57,7 @@ shortTitle: View the security overview
57
57
{% data reusables.security-overview.security-coverage-single-repo-enablement %}
58
58
59
59
{% data reusables.enterprise-accounts.access-enterprise-on-dotcom %}
60
-
1. In the left sidebar, click {% octicon "shield" aria-label="The shield icon" %} **Code Security**.
60
+
1. In the left sidebar, click **{% octicon "shield" aria-label="" %} Code Security**.
0 commit comments