Skip to content

Repo sync #37579

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 16, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -17,8 +17,6 @@ When a repository uses code stored in a private registry, some security features

## {% data variables.product.prodname_code_scanning_caps %} default setup access to private registries

{% data reusables.code-scanning.preview-org-private-registry %}

{% data variables.product.prodname_code_scanning_caps %} default setup analyzes {% data variables.code-scanning.no_build_support %} code without building it. If you do not define access to the private registries your organization uses, then {% data variables.product.prodname_code_scanning %} will only gather necessary data from dependencies available in public registries. Most times, this is enough for surfacing most of the vulnerabilities. However, in some cases the lack of access can lead to false negative results, that is, {% data variables.product.prodname_code_scanning %} is unable to detect a vulnerability in the code because it does not have all the information it needs to analyze the code. For example, some of the data flow paths may not be detected because steps are defined in dependencies that are not accessible and {% data variables.product.prodname_code_scanning %} does not know how to interpret them.

When you configure access to the private registries used in your organization, {% data variables.product.prodname_code_scanning %} has access to all the information it needs and is much less likely to miss a vulnerability.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -12,7 +12,5 @@ autogenerated: rest
allowTitleToDifferFromFilename: true
---

> [!NOTE]
> The ability to use the REST API to manage private registries is currently in {% data variables.release-phases.public_preview %} and subject to change.

<!-- Content after this section is automatically generated -->
1 change: 1 addition & 0 deletions data/features/org-private-registry.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,3 +4,4 @@
versions:
fpt: '*'
ghec: '*'
ghes: '>=3.18'
Loading