docs

docs copied to clipboard

Dependabot Actions troubleshooting suggestions might be insecure

3

### Code of Conduct - [x] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? https://github.com/github/docs/blob/e2f952a115fc4cb3d34281b1fa472ac3cd33e7da/data/reusables/dependabot/dependabot-on-actions-troubleshooting-workflows.md?plain=1#L7-L8 ### What part(s)...

Marcono1234

Remove references to long outdated and unmaintained `github-pages` gem from the docs

9

### Code of Conduct - [x] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? As per this comment...

0xdevalias

Which operator is a ternary exactly?

2

### Code of Conduct - [x] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? https://docs.github.com/en/actions/writing-workflows/choosing-what-your-workflow-does/evaluate-expressions-in-workflows-and-actions#example ### What part(s)...

AndrewCushing

Add Dependabot permissions warnings

8

### Why: Dependabot intentionally has no built-in automerge feature (https://github.com/dependabot/dependabot-core/issues/1973#issuecomment-640918321), and in the past permissions for Dependabot workflows were changed to read-only by default ([changelog entry](https://github.blog/changelog/2021-02-19-github-actions-workflows-triggered-by-dependabot-prs-will-run-with-read-only-permissions/)). If I understand it...

Marcono1234

Fix typos in Creating Redis service containers docs

2

### Why: Closes: - ### What's being changed: This pull request fixes a few minor typos in the 'Creating Redis service containers' documentation. ### Check off the following: - [...

duffuniverse

docs: security hardening info for actions untrusted content

2

### Why: The [Security hardening for GitHub Actions documentation](https://docs.github.com/en/actions/security-for-github-actions/security-guides/security-hardening-for-github-actions#using-third-party-actions) currently has no content or recommendations covering untrusted contents being checked out and executed in Actions workflow runs. Someone recently shared...

wrslatz

`Only the top 5,000 results will be included, prioritized by severity.` does not describe actual deployed behavior

2

### Code of Conduct - [x] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? https://docs.github.com/en/code-security/code-scanning/integrating-with-code-scanning/sarif-support-for-code-scanning#validating-your-sarif-file ### What part(s)...

jsoref

State correct permissions for requesting a reviewer via the API

9

### Code of Conduct - [X] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? https://docs.github.com/en/rest/pulls/review-requests?apiVersion=2022-11-28#request-reviewers-for-a-pull-request ### What part(s)...

NovemberTang

Fix typos, logic errors and language

4

### Why: Typos and unclear language make docs hard to read, logic errors (e.g. commands to "enable" a service, under the "disable" service heading) mean that unexpected system behavior may...

sau226

Update documentation for dependabot version updates in monorepos

1

### Code of Conduct - [x] I have read and agree to the GitHub Docs project's [Code of Conduct](https://github.com/github/docs/blob/main/.github/CODE_OF_CONDUCT.md) ### What article on docs.github.com is affected? https://docs.github.com/en/code-security/dependabot/ecosystems-supported-by-dependabot/supported-ecosystems-and-repositories ### What part(s)...

dsotirakis