Dependency graph and Dependabot alerts no longer enabled by default since 2025/06/17
維護者通常 1 天內回覆
還沒有人認領這個 Issue。
評估
- 難度
- 2/5
- 預估耗時
- 1-3 小時
- 新手友好度
- 69/100
- Issue 類型
- 文件
- 描述清晰度
- 描述清楚
- 活躍度
- 活躍
- 技術堆疊
- typescript
研究方向
Issue 提到了四個受影響的文件頁面：相依性圖形概念頁面、兩篇 Dependabot 指南，以及安全性與分析設定頁面。首先在文件儲存庫中找到這些頁面，並對照連結的 changelog 檢查目前的措辭。更新聲稱公開儲存庫預設會啟用相依性圖形或警示的內容；當四個頁面都準確描述目前行為時，即表示完成。
由索引模型根據 Issue 內容生成。
描述
Code of Conduct
- I have read and agree to the GitHub Docs project's Code of Conduct
What article on docs.github.com is affected?
Based on this blog post Dependency graph now defaults to off and personally reproduced, Dependency graph and Dependabot alerts are no longer enabled by default.
A few docs still mention the old behavior:
- https://docs.github.com/en/code-security/concepts/supply-chain-security/dependency-graph - The alert box mentions "Public repositories (on by default)"
- https://docs.github.com/en/[email protected]/code-security/getting-started/quickstart-for-securing-your-repository#managing-dependabot-alerts - Public repositories are enabled by default...
- https://docs.github.com/en/repositories/managing-your-repositorys-settings-and-features/enabling-features-for-your-repository/managing-security-and-analysis-settings-for-your-repository#enabling-or-disabling-security-and-analysis-features-for-public-repositories - Other features are permanently enabled for public repositories, such as the dependency graph, which shows you all the libraries and packages that your repository depends upon.
- https://docs.github.com/en/[email protected]/admin/configuring-settings/configuring-github-connect/enabling-dependabot-for-your-enterprise#enabling-dependabot-alerts - Public repositories are always enabled by default.
What part(s) of the article would you like to see updated?
Please see above links - we should update the reflect current behavior that Dependency graph and Dependabot alerts must be explicitly enabled even in public repos.
Additional information
See snippet of a screenshot for a new public repo.
Disclosure: The security features under my personal account are all in a disabled state - but I'm unable to recall whether I'd turned them off myself or if OFF is their default state (docs here don't mention the default state for the features in a personal account). If I'd turned them off myself, then likely the OFF state for the dependency graph and alerts is my fault; but if they're in the default state, then I think this issue remains valid.
Happy to raise a PR is the issue is valid.
- 主要語言
- TypeScript
- 星號
- 21.1k
- 分支
- 69.3k
- 平均合併
- 12 小時 11 分鐘
- 30 天內合併 PR
- 90
環境準備
在瀏覽器裡用你自己的 GitHub 帳號啟動這個專案的開發容器。
- 提供 Dockerfile 或 Docker Compose 檔案
- 有 Pull Request 範本
- 閱讀貢獻指南
從這裡開始
- 先讀完整個 Issue，再讀專案的貢獻指南。
- 在 Issue 下留言說明你要接手 —— 這能避免兩個人做同樣的事。
- Fork 儲存庫，在一個分支上完成修改。
- 送出 Pull Request，並在描述裡引用這個 Issue 編號。
github/docs 的其他 Issue
-
`Managing a branch protection rule` should mention that `merge queues` for `private repositories` are only supported by `enterprise plans`可能已有人在做 @Kiddo4993 於 1 天前認領。 未關閉content driver persona help wanted
難度 1/5 1 小時以內 新手友好度 86/100
維護者通常 1 天內回覆
-
actions builder persona content
難度 1/5 1 小時以內 新手友好度 86/100
維護者通常 1 天內回覆
-
Remove models already deprecated (GPT-4o, GPT-5.1 series, Gemini 3 Pro) from "Model multipliers for annual plans on request-based billing (legacy)"可能重新可做 關聯的 PR 已關閉且未合併。 未關閉builder persona content driver persona
難度 1/5 1-3 小時 新手友好度 82/100
維護者通常 1 天內回覆
-
builder persona
難度 1/5 1-3 小時 新手友好度 88/100
維護者通常 1 天內回覆
-
builder persona content copilot
難度 1/5 1-3 小時 新手友好度 72/100
維護者通常 1 天內回覆
相似的 Issue
-
fix(worker): keep normal prepare waiting states failure-free可能已有人在做 @LichKing-2234 今天認領。 未關閉agent:codex priority:P1
難度 2/5 1-3 小時 新手友好度 72/100
AgoraIO-Extensions/agent-infra#3745 ·
維護者通常 1 天內回覆
-
The five-line work window can drop its oldest line: the per-line byte share ignores the JSON framing可能已有人在做 @Eapp1e 今天認領。 未關閉
難度 2/5 1-3 小時 新手友好度 84/100
makecindy/cindy#7973 · 1 則留言 ·
維護者通常 1 天內回覆
-
community first-timers-only good first issue hacktoberfest help wanted low hanging fruit up-for-grabs
難度 1/5 1 小時以內 新手友好度 78/100
lingdojo/kana-dojo#33337 · 1 則留言 · 5 個 reaction ·
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 76/100
維護者通常 1 天內回覆
-
難度 2/5 1-3 小時 新手友好度 78/100
code-yeongyu/senpi#4917 · 1 則留言 ·
維護者通常 1 天內回覆