Skip to content

Commit 761306c

Browse files
docs-botdocs-bot
authored
Merge pull request #43424 from github/repo-sync
Repo sync
2 parents e4d2fe5 + d9aa9e9 commit 761306c

File tree

66 files changed

+591983
-2445460
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

66 files changed

+591983
-2445460
lines changed

‎content/copilot/concepts/agents/coding-agent/about-coding-agent.md‎

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -133,10 +133,12 @@ You can customize {% data variables.copilot.copilot_coding_agent %} in a number
133133

134134
Security is a fundamental consideration when you enable {% data variables.copilot.copilot_coding_agent %}, as with any other AI agent. {% data variables.copilot.copilot_coding_agent %} has a strong base of built-in security protections that you can supplement by following best practice guidance.
135135

136-
* **Validated for security issues**: {% data variables.product.prodname_copilot_short %} analyzes the code created by {% data variables.copilot.copilot_coding_agent %} for security issues and attempts to resolve them prior to completing the pull request. This reduces the likelihood of the code generated by {% data variables.copilot.copilot_coding_agent %} introducing problems such as hardcoded secrets, insecure dependencies, and other vulnerabilities. Details about the analysis performed and the actions taken by {% data variables.copilot.copilot_coding_agent %} can be reviewed in the session log. See [AUTOTITLE](/copilot/how-tos/use-copilot-agents/coding-agent/track-copilot-sessions).
136+
* **Validated for code quality and security issues**: {% data reusables.copilot.coding-agent-validation-tools-intro %}
137137
* **{% data variables.product.prodname_codeql %}** is used to identify code security issues.
138138
* Newly introduced dependencies are checked against the **{% data variables.product.prodname_advisory_database %}** for malware advisories, and for any CVSS-rated High or Critical vulnerabilities.
139139
* **{% data variables.product.prodname_secret_scanning_caps %}** is used to detect sensitive information such as API keys, tokens, and other secrets.
140+
* Details about the analysis performed and the actions taken by {% data variables.copilot.copilot_coding_agent %} can be reviewed in the session log. See [AUTOTITLE](/copilot/how-tos/use-copilot-agents/coding-agent/track-copilot-sessions).
141+
* Optionally, you can disable one or more of the code quality and security validation tools used by {% data variables.copilot.copilot_coding_agent %}. See [AUTOTITLE](/copilot/how-tos/use-copilot-agents/coding-agent/configuring-agent-settings).
140142
* {% data variables.copilot.copilot_coding_agent %}'s security validation **does not require** a {% data variables.product.prodname_GHAS_cs_or_sp %} license.
141143
* **Subject to existing governance**: Organization settings and enterprise policies control availability. Any security policies and practices set up for the organization also apply to {% data variables.copilot.copilot_coding_agent %}.
142144
* **Restricted development environment**: {% data variables.copilot.copilot_coding_agent %} works in a sandbox development environment with internet access controlled by a firewall. It has read-only access to the repository it's assigned to work in.

‎content/copilot/get-started/resources-for-approval.md‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
---
22
title: Resources for getting approval of GitHub Copilot
33
shortTitle: Resources for approval
4-
intro: 'Get ready to adopt {% data variables.product.prodname_copilot_short %} by sending resources to legal and security teams in your company.'
4+
intro: 'Get ready to adopt {% data variables.product.prodname_copilot_short %} by sending resources to legal and security teams in your company.'
55
versions:
66
feature: copilot
77
contentType: get-started
@@ -50,7 +50,7 @@ If your company is not already using {% data variables.product.prodname_enterpri
5050
These teams need to know how {% data variables.product.prodname_copilot_short %} will work with your company's corporate network, authentication systems, and software distribution processes. They may need to learn about:
5151

5252
* The allowlist required for a firewall or proxy to ensure {% data variables.product.prodname_copilot_short %} works as expected. See [AUTOTITLE](/copilot/reference/copilot-allowlist-reference).
53-
* The network protocol that {% data variables.product.prodname_copilot_short %} operates on by default, and your company's options for routing traffic through a proxy server and intercepting traffic. See [AUTOTITLE](/copilot/concepts/network-settings).
53+
* The network protocol that {% data variables.product.prodname_copilot_short %} operates on by default, and your company's options for routing traffic through a proxy server and intercepting traffic. See [AUTOTITLE](/copilot/concepts/network-settings).
5454
* The clients where users will be using {% data variables.product.prodname_copilot_short %}.
5555
* Your enterprise can enable or disable {% data variables.product.prodname_copilot_short %} in IDEs, on {% data variables.product.prodname_mobile %}, in the CLI, and on the {% data variables.product.github %} website.
5656
* If your company distributes approved software for users, IT teams may need to approve the supported versions of IDEs. See [AUTOTITLE](/copilot/reference/copilot-feature-matrix).

‎content/copilot/how-tos/use-copilot-agents/coding-agent/configuring-agent-settings.md‎

Lines changed: 16 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -9,13 +9,28 @@ category:
99
- Configure Copilot
1010
---
1111

12+
## Enabling or disabling built-in code quality and security validation tools
13+
14+
{% data reusables.copilot.coding-agent-validation-tools-intro %}
15+
16+
Optionally, you can choose to disable these tools to help {% data variables.product.prodname_copilot_short %} work faster or avoid conflicts with other code quality or security products you're using.
17+
18+
You must be a repository administrator to configure these settings.
19+
20+
{% data reusables.repositories.navigate-to-repo %}
21+
{% data reusables.repositories.sidebar-settings %}
22+
1. In the "Code & automation" section of the sidebar, click **{% data variables.product.prodname_copilot_short %}** then **{% data variables.copilot.copilot_coding_agent_short_cap_c %}**.
23+
1. In the "Validation tools" section, toggle the tool, or tools, you want to enable or disable.
24+
1225
## Allowing {% data variables.product.prodname_actions %} workflows to run automatically when {% data variables.product.prodname_copilot_short %} pushes
1326

1427
{% data reusables.copilot.coding-agent-workflow-run-approval-default %}
1528

1629
> [!WARNING] Allowing {% data variables.product.prodname_actions %} workflows to run without approval may allow unreviewed code written by {% data variables.product.prodname_copilot_short %} to gain write access to your repository or access your {% data variables.product.prodname_actions %} secrets.
1730
31+
You must be a repository administrator to configure these settings.
32+
1833
{% data reusables.repositories.navigate-to-repo %}
1934
{% data reusables.repositories.sidebar-settings %}
2035
1. In the "Code & automation" section of the sidebar, click **{% data variables.product.prodname_copilot_short %}** then **{% data variables.copilot.copilot_coding_agent_short %}**.
21-
1. In the "Actions workflow approval" section, disable the **Require approval for workflow runs** setting.
36+
1. In the "Actions workflow approval" section, disable the **Require approval for workflow runs** setting.

‎content/copilot/how-tos/use-copilot-agents/coding-agent/index.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,10 +20,10 @@ children:
2020
- /integrate-coding-agent-with-linear
2121
- /integrate-coding-agent-with-azure-boards
2222
- /changing-the-ai-model
23+
- /configuring-agent-settings
2324
- /customize-the-agent-environment
2425
- /customize-the-agent-firewall
2526
- /use-hooks
26-
- /configuring-agent-settings
2727
- /troubleshoot-coding-agent
2828
redirect_from:
2929
- /copilot/using-github-copilot/using-copilot-coding-agent-to-work-on-tasks

‎content/rest/copilot/copilot-coding-agent-management.md‎

Lines changed: 16 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,16 @@
1+
---
2+
title: REST API endpoints for Copilot coding agent management
3+
shortTitle: Copilot coding agent management
4+
intro: Use the REST API to manage settings for {% data variables.copilot.copilot_coding_agent %}.
5+
versions: # DO NOT MANUALLY EDIT. CHANGES WILL BE OVERWRITTEN BY A 🤖
6+
fpt: '*'
7+
ghec: '*'
8+
topics:
9+
- API
10+
autogenerated: rest
11+
allowTitleToDifferFromFilename: true
12+
---
13+
14+
<!-- Content after this section is automatically generated -->
15+
16+

‎content/rest/copilot/index.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,7 @@ intro: >-
77
autogenerated: rest
88
allowTitleToDifferFromFilename: true
99
children:
10+
- /copilot-coding-agent-management
1011
- /copilot-content-exclusion-management
1112
- /copilot-custom-agents
1213
- /copilot-metrics

‎data/reusables/copilot/coding-agent-validation-tools-intro.md‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
By default, {% data variables.copilot.copilot_coding_agent %} checks code it generates for security issues and gets a second opinion on its code with {% data variables.copilot.copilot_code-review_short %}. It attempts to resolve issues identified prior to completing the pull request. This improves code quality and reduces the likelihood of the code generated by {% data variables.copilot.copilot_coding_agent %} introducing problems such as hardcoded secrets, insecure dependencies, and other vulnerabilities.

‎src/article-api/liquid-renderers/rest-tags.ts‎

Lines changed: 0 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -150,8 +150,6 @@ export class RestStatusCode {
150150
if (description.trim()) {
151151
lines.push(` ${description.trim()}`)
152152
}
153-
} else if (statusCode.httpStatusMessage) {
154-
lines.push(`- **${statusCode.httpStatusCode}** - ${statusCode.httpStatusMessage}`)
155153
} else {
156154
lines.push(`- **${statusCode.httpStatusCode}**`)
157155
}

‎src/audit-logs/data/fpt/organization.json‎

Lines changed: 172 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -515,6 +515,172 @@
515515
],
516516
"docs_reference_titles": "Managing your payment and billing information"
517517
},
518+
{
519+
"action": "billing.cost_center_create",
520+
"description": "A cost center was created for a business or organization.",
521+
"docs_reference_links": "N/A",
522+
"fields": [
523+
"@timestamp",
524+
"_document_id",
525+
"action",
526+
"actor",
527+
"actor_id",
528+
"business",
529+
"business_id",
530+
"hashed_token",
531+
"org",
532+
"org_id",
533+
"programmatic_access_type",
534+
"repo",
535+
"repo_id",
536+
"repository",
537+
"repository_id",
538+
"request_access_security_header",
539+
"request_id",
540+
"token_id",
541+
"token_scopes",
542+
"user",
543+
"user_id",
544+
"user_agent",
545+
"name",
546+
"created_at",
547+
"operation_type"
548+
]
549+
},
550+
{
551+
"action": "billing.cost_center_delete",
552+
"description": "A cost center was deleted from a business or organization.",
553+
"docs_reference_links": "N/A",
554+
"fields": [
555+
"@timestamp",
556+
"_document_id",
557+
"action",
558+
"actor",
559+
"actor_id",
560+
"business",
561+
"business_id",
562+
"hashed_token",
563+
"org",
564+
"org_id",
565+
"programmatic_access_type",
566+
"repo",
567+
"repo_id",
568+
"repository",
569+
"repository_id",
570+
"request_access_security_header",
571+
"request_id",
572+
"token_id",
573+
"token_scopes",
574+
"user",
575+
"user_id",
576+
"user_agent",
577+
"created_at",
578+
"operation_type"
579+
]
580+
},
581+
{
582+
"action": "billing.cost_center_resource_added",
583+
"description": "A resource was added to a cost center for a business or organization.",
584+
"docs_reference_links": "N/A",
585+
"fields": [
586+
"@timestamp",
587+
"_document_id",
588+
"action",
589+
"actor",
590+
"actor_id",
591+
"business",
592+
"business_id",
593+
"hashed_token",
594+
"org",
595+
"org_id",
596+
"programmatic_access_type",
597+
"repo",
598+
"repo_id",
599+
"repository",
600+
"repository_id",
601+
"request_access_security_header",
602+
"request_id",
603+
"token_id",
604+
"token_scopes",
605+
"user",
606+
"user_id",
607+
"user_agent",
608+
"name",
609+
"resource_id",
610+
"resource_type",
611+
"created_at",
612+
"operation_type",
613+
"actor_is_bot"
614+
]
615+
},
616+
{
617+
"action": "billing.cost_center_resource_removed",
618+
"description": "A resource was removed from a cost center for a business or organization.",
619+
"docs_reference_links": "N/A",
620+
"fields": [
621+
"@timestamp",
622+
"_document_id",
623+
"action",
624+
"actor",
625+
"actor_id",
626+
"business",
627+
"business_id",
628+
"hashed_token",
629+
"org",
630+
"org_id",
631+
"programmatic_access_type",
632+
"repo",
633+
"repo_id",
634+
"repository",
635+
"repository_id",
636+
"request_access_security_header",
637+
"request_id",
638+
"token_id",
639+
"token_scopes",
640+
"user",
641+
"user_id",
642+
"user_agent",
643+
"name",
644+
"resource_id",
645+
"resource_type",
646+
"created_at",
647+
"operation_type",
648+
"actor_is_bot"
649+
]
650+
},
651+
{
652+
"action": "billing.cost_center_update",
653+
"description": "A cost center was updated for a business or organization.",
654+
"docs_reference_links": "N/A",
655+
"fields": [
656+
"@timestamp",
657+
"_document_id",
658+
"action",
659+
"actor",
660+
"actor_id",
661+
"business",
662+
"business_id",
663+
"hashed_token",
664+
"org",
665+
"org_id",
666+
"programmatic_access_type",
667+
"repo",
668+
"repo_id",
669+
"repository",
670+
"repository_id",
671+
"request_access_security_header",
672+
"request_id",
673+
"token_id",
674+
"token_scopes",
675+
"user",
676+
"user_id",
677+
"user_agent",
678+
"name",
679+
"created_at",
680+
"operation_type",
681+
"actor_is_bot"
682+
]
683+
},
518684
{
519685
"action": "billing_customer.azure_subscription_linked",
520686
"description": "Azure subscription has been linked on this account.",
@@ -23630,7 +23796,8 @@
2363023796
"security_configuration_code_scanning_delegated_alert_dismissal",
2363123797
"security_configuration_code_security_sku_enabled",
2363223798
"security_configuration_secret_protection_sku_enabled",
23633-
"security_configuration_dependabot_delegated_alert_dismissal"
23799+
"security_configuration_dependabot_delegated_alert_dismissal",
23800+
"security_configuration_secret_scanning_extended_metadata"
2363423801
]
2363523802
},
2363623803
{
@@ -23754,7 +23921,8 @@
2375423921
"security_configuration_code_scanning_delegated_alert_dismissal",
2375523922
"security_configuration_code_security_sku_enabled",
2375623923
"security_configuration_secret_protection_sku_enabled",
23757-
"security_configuration_dependabot_delegated_alert_dismissal"
23924+
"security_configuration_dependabot_delegated_alert_dismissal",
23925+
"security_configuration_secret_scanning_extended_metadata"
2375823926
]
2375923927
},
2376023928
{
@@ -23842,7 +24010,8 @@
2384224010
"security_configuration_code_scanning_delegated_alert_dismissal",
2384324011
"security_configuration_code_security_sku_enabled",
2384424012
"security_configuration_secret_protection_sku_enabled",
23845-
"security_configuration_dependabot_delegated_alert_dismissal"
24013+
"security_configuration_dependabot_delegated_alert_dismissal",
24014+
"security_configuration_secret_scanning_extended_metadata"
2384624015
]
2384724016
},
2384824017
{

0 commit comments

Comments
 (0)