Skip to content

Commit abb5cd7

Browse files
authored
Merge pull request github#36338 from github/repo-sync
Repo sync
2 parents c0cbfe9 + fa14840 commit abb5cd7

File tree

3 files changed

+9
-4
lines changed

3 files changed

+9
-4
lines changed

content/code-security/dependabot/working-with-dependabot/configuring-access-to-private-registries-for-dependabot.md

+6-1
Original file line numberDiff line numberDiff line change
@@ -121,7 +121,12 @@ If your private registry is configured with an IP allow list, you can find the I
121121

122122
When you give {% data variables.product.prodname_dependabot %} access to one or more registries, external code execution is automatically disabled to protect your code from compromised packages. However, some version updates may fail.
123123

124-
If you need to allow {% data variables.product.prodname_dependabot %} to access a private package registry and enable limited external code execution, you can set `insecure-external-code-execution` to `allow`. Any external code execution will only have access to the package managers in the registries associated with the enclosing `updates` setting. There is no access allowed to any of the registries defined in the top level `registries` configuration.
124+
If you need to allow {% data variables.product.prodname_dependabot %} to access a private package registry and enable limited external code execution, you can set `insecure-external-code-execution` to `allow`. Allowing {% data variables.product.prodname_dependabot %} to execute external code in the manifest during updates is not as scary as it sounds:
125+
126+
* Any external code execution will only have access to the package managers in the registries associated with the enclosing `updates` setting.
127+
* There is no access allowed to any of the registries defined in the top level `registries` configuration.
128+
129+
It is common for tooling, such as `bundler`, `mix`, `pip`, and `swift`, to allow the execution of external code by default.
125130

126131
In this example, the configuration file allows {% data variables.product.prodname_dependabot %} to access the `ruby-github` private package registry. In the same `updates`setting, `insecure-external-code-execution`is set to `allow`, which means that the code executed by dependencies will only access the `ruby-github` registry, and not the `dockerhub` registry.
127132
{% raw %}

content/copilot/about-github-copilot/what-is-github-copilot.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -43,7 +43,7 @@ redirect_from:
4343

4444
* In your IDE
4545
* In {% data variables.product.prodname_mobile %}, as a chat interface
46-
* In {% data variables.product.prodname_windows_terminal %} Canary, through the Terminal Chat chat interface
46+
* In {% data variables.product.prodname_windows_terminal %} Canary, through the Terminal Chat interface
4747
* On the command line, through the {% data variables.product.prodname_cli %}
4848
* On the {% data variables.product.github %} website
4949

content/support/contacting-github-support/viewing-and-updating-support-tickets.md

+2-2
Original file line numberDiff line numberDiff line change
@@ -65,11 +65,11 @@ You can also comment on tickets opened by someone else and associated with your
6565

6666
## Requesting a callback
6767

68-
If your account includes {% data variables.contact.premium_support %}, you can request a callback for urgent or high priority tickets. From the ticket, click **Request a callback from GitHub Support**.
68+
You can request a callback for urgent or high priority tickets{% ifversion ghec %} if your account includes {% data variables.contact.premium_support %}{% endif %}. From the ticket, click **Request a callback from GitHub Support**.
6969

7070
## Requesting an escalation
7171

72-
If your account includes {% data variables.contact.premium_support %}, you can request to escalate a ticket if it was opened at a lower priority but the issue has become more urgent. From the ticket, click **Request an escalation**. For more information about requesting an escalation, see [AUTOTITLE](/support/learning-about-github-support/about-github-premium-support#assigning-a-priority-to-a-support-ticket).
72+
You can request to escalate a ticket if it was opened at a lower priority but the issue has become more urgent{% ifversion ghec %} if your account includes {% data variables.contact.premium_support %}{% endif %}. From the ticket, click **Request an escalation**. For more information about requesting an escalation, see [AUTOTITLE](/support/learning-about-github-support/about-github-premium-support#assigning-a-priority-to-a-support-ticket).
7373

7474
{% endif %}
7575

0 commit comments

Comments
 (0)