Skip to content

Commit df55c69

Browse files
authored
Merge pull request #20566 from github/jules-extend-ghas-enabling-docs
Extend advanced security command line instructions
2 parents 3b0bec3 + ab1ae41 commit df55c69

1 file changed

Lines changed: 32 additions & 8 deletions

File tree

content/admin/advanced-security/enabling-github-advanced-security-for-your-enterprise.md

Lines changed: 32 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -33,6 +33,7 @@ When you enable {% data variables.product.prodname_GH_advanced_security %} for y
3333

3434
- {% data variables.product.prodname_code_scanning_capc %}, see "[Configuring {% data variables.product.prodname_code_scanning %} for your appliance](/admin/advanced-security/configuring-code-scanning-for-your-appliance#prerequisites-for-code-scanning)."
3535
- {% data variables.product.prodname_secret_scanning_caps %}, see "[Configuring {% data variables.product.prodname_secret_scanning %} for your appliance](/admin/advanced-security/configuring-secret-scanning-for-your-appliance#prerequisites-for-secret-scanning)."{% endif %}
36+
- {% data variables.product.prodname_dependabot %}, see "[Enabling alerts for vulnerable dependencies on {% data variables.product.prodname_ghe_server %}](/admin/configuration/managing-connections-between-github-enterprise-server-and-github-enterprise-cloud/enabling-alerts-for-vulnerable-dependencies-on-github-enterprise-server)."
3637

3738
## Checking whether your license includes {% data variables.product.prodname_GH_advanced_security %}
3839

@@ -72,22 +73,45 @@ When {% data variables.product.product_name %} has finished restarting, you're r
7273

7374
You can enable or disable features programmatically on {% data variables.product.product_location %}. For more information about the administrative shell and command-line utilities for {% data variables.product.prodname_ghe_server %}, see "[Accessing the administrative shell (SSH)](/admin/configuration/accessing-the-administrative-shell-ssh)" and "[Command-line utilities](/admin/configuration/command-line-utilities#ghe-config)."
7475

75-
For example, you can enable {% data variables.product.prodname_code_scanning %} with your infrastructure-as-code tooling when you deploy an instance for staging or disaster recovery.
76+
For example, you can enable any {% data variables.product.prodname_GH_advanced_security %} feature with your infrastructure-as-code tooling when you deploy an instance for staging or disaster recovery.
7677

7778
1. SSH into {% data variables.product.product_location %}.
78-
1. Enable {% data variables.product.prodname_code_scanning %}.
79+
1. Enable features for {% data variables.product.prodname_GH_advanced_security %}.
80+
81+
- To enable {% data variables.product.prodname_code_scanning_capc %}, enter the following commands.
82+
7983
```shell
8084
ghe-config app.minio.enabled true
81-
ghe-config app.code-scanning.enabled true
85+
ghe-config app.code-scanning.enabled true
86+
```
87+
- To enable {% data variables.product.prodname_secret_scanning_caps %}, enter the following command.
88+
89+
```shell
90+
ghe-config app.secret-scanning.enabled true
91+
```
92+
- To enable {% data variables.product.prodname_dependabot %}, enter the following commands.
93+
```shell
94+
ghe-config app.github.dependency-graph-enabled true
95+
ghe-config app.github.vulnerability-alerting-and-settings-enabled true
8296
```
83-
2. Optionally, disable {% data variables.product.prodname_code_scanning %}.
97+
2. Optionally, disable features for {% data variables.product.prodname_GH_advanced_security %}.
98+
99+
- To disable {% data variables.product.prodname_code_scanning %}, enter the following commands.
84100
```shell
85101
ghe-config app.minio.enabled false
86102
ghe-config app.code-scanning.enabled false
87103
```
88-
3. Apply the configuration.
104+
- To disable {% data variables.product.prodname_secret_scanning %}, enter the following command.
105+
```shell
106+
ghe-config app.secret-scanning.enabled false
107+
```
108+
- To disable {% data variables.product.prodname_dependabot %}, enter the following commands.
89109
```shell
90-
ghe-config-apply
91-
```
110+
ghe-config app.github.dependency-graph-enabled false
111+
ghe-config app.github.vulnerability-alerting-and-settings-enabled false
112+
```
92113

93-
{% ifversion ghes > 2.22 %}To enable and disable {% data variables.product.prodname_secret_scanning %} in the same way, set: `ghe-config app.secret-scanning.enabled` true or false and apply the configuration.{% endif %}
114+
3. Apply the configuration.
115+
```shell
116+
ghe-config-apply
117+
```

0 commit comments

Comments
 (0)