Skip to content

Commit

Permalink
Update GitHub documentation links
Browse files Browse the repository at this point in the history
- Update Dependabot documentation links.
- Remove language from GitHub documentation URLs.

Signed-off-by: martincostello <martin@martincostello.com>
  • Loading branch information
martincostello committed Jul 26, 2023
1 parent c855ebc commit d4be466
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ short: Checks that GitHub workflows do not have default write permissions
motivation: >
If no permissions are declared, a workflow's GitHub token's permissions default to write for all scopes.
This include write permissions to push to the repository, to read encrypted secrets, etc.
For more information, see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token.
For more information, see https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token.
implementation: >
The rule is implemented by checking whether the `permissions` keyword is defined at the top of the workflow,
and that no write permissions are given.
Expand Down
4 changes: 2 additions & 2 deletions probes/toolDependabotInstalled/def.yml
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,6 @@ outcome:
remediation:
effort: Low
text:
- Follow the instructions from https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates.
- Follow the instructions from https://docs.github.com/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates.
markdown:
- Follow the instructions from [the official documentation](https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates).
- Follow the instructions from [the official documentation](https://docs.github.com/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates).

0 comments on commit d4be466

Please sign in to comment.