Skip to content

Commit fa2678e

Browse files
authored
Merge pull request #23344 from github/repo-sync
repo sync
2 parents 7e3cc6e + 5b47de1 commit fa2678e

File tree

5 files changed

+44
-17
lines changed

5 files changed

+44
-17
lines changed
Loading
Loading

content/code-security/secret-scanning/managing-alerts-from-secret-scanning.md

Lines changed: 37 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ shortTitle: Manage secret alerts
2121
---
2222

2323
{% data reusables.secret-scanning.beta %}
24-
{% data reusables.secret-scanning.secret-scanning-alerts-beta %}
24+
{% data reusables.secret-scanning.secret-scanning-alerts-beta %}
2525

2626
## Managing {% data variables.secret-scanning.alerts %}
2727

@@ -35,41 +35,61 @@ shortTitle: Manage secret alerts
3535

3636
{% data reusables.repositories.navigate-to-repo %}
3737
{% data reusables.repositories.sidebar-security %}
38-
1. In the left sidebar, click **Secret scanning alerts**.
38+
1. In the left sidebar, click **{% data variables.product.prodname_secret_scanning_caps %} alerts**.
3939
{% ifversion fpt or ghes or ghec %}
40-
!["Secret scanning alerts" tab](/assets/images/help/repository/sidebar-secrets.png)
40+
![Screenshot of the "{% data variables.product.prodname_secret_scanning_caps %} alerts" tab](/assets/images/help/repository/sidebar-secrets.png)
4141
{% endif %}
4242
{% ifversion ghae %}
43-
!["Secret scanning alerts" tab](/assets/images/enterprise/github-ae/repository/sidebar-secrets-ghae.png)
43+
![Screenshot of the "{% data variables.product.prodname_secret_scanning_caps %} alerts" tab](/assets/images/enterprise/github-ae/repository/sidebar-secrets-ghae.png)
4444
{% endif %}
45-
1. Under "Secret scanning" click the alert you want to view.
45+
1. Under "{% data variables.product.prodname_secret_scanning_caps %}" click the alert you want to view.
4646
{% ifversion fpt %}
47-
![List of alerts from secret scanning](/assets/images/help/repository/secret-scanning-alerts-click-alert-fpt.png)
47+
![Screenshot of the list of alerts from {% data variables.product.prodname_secret_scanning %}](/assets/images/help/repository/secret-scanning-alerts-click-alert-fpt.png)
4848
{% endif %}
4949
{% ifversion ghec %}
50-
![List of alerts from secret scanning](/assets/images/help/repository/secret-scanning-click-alert-ghec.png)
50+
![Screenshot of the list of alerts from {% data variables.product.prodname_secret_scanning %}](/assets/images/help/repository/secret-scanning-click-alert-ghec.png)
5151
{% endif %}
5252
{% ifversion ghes %}
53-
![List of alerts from secret scanning](/assets/images/help/repository/secret-scanning-click-alert-ghe.png)
53+
![Screenshot of the list of alerts from {% data variables.product.prodname_secret_scanning %}](/assets/images/help/repository/secret-scanning-click-alert-ghe.png)
5454
{% endif %}
5555
{% ifversion ghae %}
56-
![List of alerts from secret scanning](/assets/images/enterprise/github-ae/repository/secret-scanning-click-alert-ghae.png)
57-
{% endif %}{% ifversion secret-scanning-partner-documentation-link-UI %}
58-
1. To dismiss an alert, select the "Dismiss alert" dropdown menu and click a reason for resolving an alert.
56+
![Screenshot of the list of alerts from {% data variables.product.prodname_secret_scanning %}](/assets/images/enterprise/github-ae/repository/secret-scanning-click-alert-ghae.png)
57+
{% endif %}{% ifversion secret-scanning-validity-check %}
58+
1. Check the validity of the secret and follow the remediation steps.
5959

60-
![Screenshot of the dropdown menu for dismissing an alert from secret scanning showing link to partner documentation](/assets/images/help/repository/secret-scanning-dismiss-alert-web-ui-link-partner-documentation.png)
60+
![Screenshot of the validity check for a {% data variables.product.company_short %} token](/assets/images/help/repository/secret-scanning-validity-check.png)
61+
62+
{% note %}
63+
64+
**Note:** Validity check for {% data variables.product.company_short %} tokens is currently in public beta and subject to change.
65+
66+
{% endnote %}
67+
68+
{% data variables.product.company_short %} provides information about the validity of the secret, for {% data variables.product.company_short %} tokens only.
69+
70+
| Validity | Result |
71+
|-------------------------|--------------------------------------------------------------------------------|
72+
| Active secret | {% data variables.product.company_short %} confirmed this secret is active |
73+
| Active secret | {% data variables.product.company_short %} checked with this secret's provider and found that the secret is active |
74+
| Possibly active secret | {% data variables.product.company_short %} does not support validation checks for this token type yet |
75+
| Possibly active secret | {% data variables.product.company_short %} could not verify this secret |
76+
| Secret appears inactive | You should make sure no unauthorized access has already occurred |
77+
{% endif %}{% ifversion secret-scanning-partner-documentation-link-UI %}
78+
1. To dismiss an alert, select the "Close as" dropdown menu and click a reason for resolving an alert.
79+
80+
![Screenshot of the dropdown menu for dismissing an alert from {% data variables.product.prodname_secret_scanning %} showing link to partner documentation](/assets/images/help/repository/secret-scanning-dismiss-alert-web-ui-link-partner-documentation.png)
6181

6282
{% else %}
63-
1. To dismiss an alert, select the "Mark as" dropdown menu and click a reason for resolving an alert.
83+
2. To dismiss an alert, select the "Mark as" dropdown menu and click a reason for resolving an alert.
6484

65-
![Screenshot of the dropdown menu for resolving an alert from secret scanning](/assets/images/enterprise/3.2/repository/secret-scanning-resolve-alert-ghe.png)
85+
![Screenshot of the dropdown menu for resolving an alert from {% data variables.product.prodname_secret_scanning %}](/assets/images/enterprise/3.2/repository/secret-scanning-resolve-alert-ghe.png)
6686

6787
{% endif %}{% ifversion secret-scanning-dismissal-comment %}
68-
1. Optionally, add a dismissal comment. The dismissal comment will be added to the alert timeline and can be used as justification during auditing and reporting. You can view the history of all dismissed alerts and dismissal comments in the alert timeline. You can also retrieve or set a comment by using the {% data variables.product.prodname_secret_scanning_caps %} API. The comment is contained in the `resolution_comment` field. For more information, see "[{% data variables.product.prodname_secret_scanning_caps %}](/rest/secret-scanning#update-a-secret-scanning-alert)" in the REST API documentation.
88+
3. Optionally, add a dismissal comment. The dismissal comment will be added to the alert timeline and can be used as justification during auditing and reporting. You can view the history of all dismissed alerts and dismissal comments in the alert timeline. You can also retrieve or set a comment by using the {% data variables.product.prodname_secret_scanning_caps %} API. The comment is contained in the `resolution_comment` field. For more information, see "[{% data variables.product.prodname_secret_scanning_caps %}](/rest/secret-scanning#update-a-secret-scanning-alert)" in the REST API documentation.
6989

70-
![Screenshot showing how to dismiss an alert via the "Dismiss alert" dropdown, with the option to add a dismissal comment](/assets/images/help/repository/secret-scanning-dismissal-comment.png)
90+
![Screenshot showing how to dismiss an alert via the "Dismiss alert" dropdown, with the option to add a dismissal comment](/assets/images/help/repository/secret-scanning-dismissal-comment.png)
7191

72-
1. Click **Dismiss alert**.
92+
4. Click **Close alert**.
7393
{% endif %}
7494

7595
## Securing compromised secrets
Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
# Reference: #8576.
2+
# Documentation for secret scanning: validity check for GitHub tokens.
3+
versions:
4+
fpt: '*'
5+
ghec: '*'
6+
ghes: '>=3.9'
7+
ghae: '>=3.9'

0 commit comments

Comments
 (0)