Skip to content

Commit b82aea0

Browse files
[EDI] Exploring dependencies (#59229)
Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
1 parent fe413ec commit b82aea0

File tree

5 files changed

+37
-27
lines changed

5 files changed

+37
-27
lines changed

content/code-security/concepts/supply-chain-security/about-the-dependency-graph.md

Lines changed: 16 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -60,9 +60,23 @@ For more information on how {% data variables.product.github %} helps you unders
6060

6161
{% ifversion fpt or ghec %}
6262

63-
## Dependents included
63+
## Dependents and "used by" data
6464

65-
For public repositories, only public repositories that depend on it or on packages that it publishes are reported. This information is not reported for private repositories.{% endif %}
65+
For public repositories, the dependency graph lists dependents. These are other public repositories that depend on the repository or on packages that it publishes. This information is not reported for private repositories.
66+
67+
{% data reusables.dependency-graph.used-by %} Clicking any item in this section takes you to the **Dependents** tab of the dependency graph.
68+
69+
Your repository will have a "Used by" section if:
70+
* The dependency graph is enabled for the repository.
71+
* Your repository contains a package that is published on a supported package ecosystem. See [AUTOTITLE](/code-security/supply-chain-security/understanding-your-software-supply-chain/dependency-graph-supported-package-ecosystems#supported-package-ecosystems).
72+
* Within the ecosystem, your package has a link to a _public_ repository where the source is stored.
73+
* More than 100 repositories depend on your package.
74+
75+
![Screenshot of the "Used by" section for a repository showing the summary of "13.4m" with details of 8 avatars and "+13,435,819."](/assets/images/help/repository/used-by-section.png)
76+
77+
The "Used by" section represents a single package from the repository. If you have admin permissions to a repository that contains multiple packages, you can choose which package the "Used by" section represents. See [AUTOTITLE](/code-security/how-tos/view-and-interpret-data/change-used-by-data).
78+
79+
{% endif %}
6680

6781
## What you can do with the dependency graph
6882

content/code-security/how-tos/secure-your-supply-chain/secure-your-dependencies/exploring-the-dependencies-of-a-repository.md

Lines changed: 0 additions & 25 deletions
Original file line numberDiff line numberDiff line change
@@ -81,31 +81,6 @@ If vulnerabilities have been detected in the repository, these are shown at the
8181

8282
For public repositories, the dependents view shows how the repository is used by other repositories. To show only the repositories that contain a library in a package manager, click **NUMBER Packages** immediately above the list of dependent repositories. The dependent counts are approximate and may not always match the dependents listed.
8383

84-
## Enabling and disabling the dependency graph
85-
86-
{% data reusables.dependabot.enabling-disabling-dependency-graph-private-repo-public-fork %}
87-
88-
## Changing the "Used by" package
89-
90-
You may notice some repositories have a "Used by" section in the sidebar of the **Code** tab. Your repository will have a "Used by" section if:
91-
* The dependency graph is enabled for the repository (see the above section for more details).
92-
* Your repository contains a package that is published on a [supported package ecosystem](/code-security/supply-chain-security/understanding-your-software-supply-chain/dependency-graph-supported-package-ecosystems#supported-package-ecosystems).
93-
* Within the ecosystem, your package has a link to a _public_ repository where the source is stored.
94-
* More than 100 repositories depend on your package.
95-
96-
The "Used by" section shows the number of public references to the package that were found, and displays the avatars of some of the owners of the dependent projects.
97-
98-
![Screenshot of the "Used by" section for a repository showing the summary of "13.4m" with details of 8 avatars and "+13,435,819."](/assets/images/help/repository/used-by-section.png)
99-
100-
Clicking any item in this section takes you to the **Dependents** tab of the dependency graph.
101-
102-
The "Used by" section represents a single package from the repository. If you have admin permissions to a repository that contains multiple packages, you can choose which package the "Used by" section represents.
103-
104-
{% data reusables.repositories.navigate-to-repo %}
105-
{% data reusables.repositories.sidebar-settings %}
106-
{% data reusables.repositories.navigate-to-code-security-and-analysis %}
107-
1. Under "{% data variables.product.UI_advanced_security %}", click the drop-down menu in the "Used by counter" section and choose a package.
108-
10984
{% endif %}
11085

11186
## Further reading
Lines changed: 19 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,19 @@
1+
---
2+
title: Changing the "used by" data for a repository
3+
shortTitle: Change "used by" data
4+
intro: Display your repository's dependents for a different package.
5+
permissions: 'Repository administrators'
6+
versions:
7+
fpt: '*'
8+
ghec: '*'
9+
contentType: how-tos
10+
---
11+
12+
{% data reusables.dependency-graph.used-by %} For more information, see [AUTOTITLE](/code-security/concepts/supply-chain-security/about-the-dependency-graph#dependents-and-used-by-data).
13+
14+
If you have admin permissions to a repository that contains multiple packages, you can choose which package the "Used by" section represents.
15+
16+
{% data reusables.repositories.navigate-to-repo %}
17+
{% data reusables.repositories.sidebar-settings %}
18+
{% data reusables.repositories.navigate-to-code-security-and-analysis %}
19+
1. Under "{% data variables.product.UI_advanced_security %}", click the drop-down menu in the "Used by counter" section and choose a package.

content/code-security/how-tos/view-and-interpret-data/index.md

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -20,4 +20,5 @@ children:
2020
- /viewing-code-scanning-logs
2121
- /viewing-dependabot-job-logs
2222
- /metrics-for-custom-patterns
23+
- /change-used-by-data
2324
---
Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
Some repositories have a "Used by" section in the sidebar of the **Code** tab. This section shows the number of public references to a package that were found, and displays the avatars of some of the owners of the dependent projects.

0 commit comments

Comments
 (0)