Skip to content

Commit e412b59

Browse files
authored
Merge pull request #40717 from github/repo-sync
Repo sync
2 parents a9ee8cb + 745a7ff commit e412b59

File tree

27 files changed

+9112
-1655
lines changed

27 files changed

+9112
-1655
lines changed
-30 KB
Binary file not shown.
-19.8 KB
Binary file not shown.
-69.6 KB
Binary file not shown.
Binary file not shown.
-35.1 KB
Binary file not shown.

content/admin/configuring-settings/hardening-security-for-your-enterprise/restricting-access-to-githubcom-using-a-corporate-proxy.md

Lines changed: 15 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -61,6 +61,21 @@ This will prevent people on your network from accessing these endpoints with use
6161

6262
>[!NOTE] Access to `github.com/login` is required to create support tickets. To ensure users with support entitlements can request help, you may want to exempt these users from the restriction.
6363
64+
## Enabling access restrictions for multiple enterprises
65+
66+
Enterprise owners can enforce the restriction across multiple enterprise accounts.
67+
68+
1. Enable the feature for each enterprise account. See [Enabling access restrictions](#enabling-access-restrictions).
69+
1. Inject a header into all traffic going to certain supported endpoints. The header is in the following format.
70+
71+
```text
72+
sec-GitHub-allowed-enterprise: ENTERPRISE1-ID, ENTERPRISE2-ID, ENTERPRISE3-ID ... ENTERPRISE20-ID.
73+
```
74+
75+
Enterprise owners can find the correct enterprise ID to use in the header for each of the enterprises. See [Finding the header](#finding-the-header).
76+
77+
> [!NOTE] We currently support up to 20 unique enterprise IDs to be included in the header.
78+
6479
### Lifting the restriction for certain users
6580

6681
You may want to lift the restriction for certain users who need to contribute to open source resources using a personal account, or who may need to create support tickets in case of issues. To handle this, you must configure your network to inject the header only for users that you intend to restrict.

src/github-apps/data/fpt-2022-11-28/fine-grained-pat-permissions.json

Lines changed: 81 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -828,6 +828,60 @@
828828
"additional-permissions": false,
829829
"access": "read"
830830
},
831+
{
832+
"category": "orgs",
833+
"slug": "get-immutable-releases-settings-for-an-organization",
834+
"subcategory": "orgs",
835+
"verb": "get",
836+
"requestPath": "/orgs/{org}/settings/immutable-releases",
837+
"additional-permissions": false,
838+
"access": "read"
839+
},
840+
{
841+
"category": "orgs",
842+
"slug": "set-immutable-releases-settings-for-an-organization",
843+
"subcategory": "orgs",
844+
"verb": "put",
845+
"requestPath": "/orgs/{org}/settings/immutable-releases",
846+
"additional-permissions": false,
847+
"access": "write"
848+
},
849+
{
850+
"category": "orgs",
851+
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
852+
"subcategory": "orgs",
853+
"verb": "get",
854+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
855+
"additional-permissions": false,
856+
"access": "read"
857+
},
858+
{
859+
"category": "orgs",
860+
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
861+
"subcategory": "orgs",
862+
"verb": "put",
863+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
864+
"additional-permissions": true,
865+
"access": "write"
866+
},
867+
{
868+
"category": "orgs",
869+
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
870+
"subcategory": "orgs",
871+
"verb": "put",
872+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
873+
"additional-permissions": true,
874+
"access": "write"
875+
},
876+
{
877+
"category": "orgs",
878+
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
879+
"subcategory": "orgs",
880+
"verb": "delete",
881+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
882+
"additional-permissions": true,
883+
"access": "write"
884+
},
831885
{
832886
"category": "copilot",
833887
"slug": "get-copilot-metrics-for-a-team",
@@ -4326,6 +4380,33 @@
43264380
"additional-permissions": true,
43274381
"access": "write"
43284382
},
4383+
{
4384+
"category": "repos",
4385+
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
4386+
"subcategory": "repos",
4387+
"verb": "get",
4388+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
4389+
"additional-permissions": false,
4390+
"access": "read"
4391+
},
4392+
{
4393+
"category": "repos",
4394+
"slug": "enable-immutable-releases",
4395+
"subcategory": "repos",
4396+
"verb": "put",
4397+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
4398+
"additional-permissions": false,
4399+
"access": "write"
4400+
},
4401+
{
4402+
"category": "repos",
4403+
"slug": "disable-immutable-releases",
4404+
"subcategory": "repos",
4405+
"verb": "delete",
4406+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
4407+
"additional-permissions": false,
4408+
"access": "write"
4409+
},
43294410
{
43304411
"category": "interactions",
43314412
"slug": "get-interaction-restrictions-for-a-repository",

src/github-apps/data/fpt-2022-11-28/fine-grained-pat.json

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3498,6 +3498,42 @@
34983498
"verb": "delete",
34993499
"requestPath": "/orgs/{org}/security-managers/teams/{team_slug}"
35003500
},
3501+
{
3502+
"slug": "get-immutable-releases-settings-for-an-organization",
3503+
"subcategory": "orgs",
3504+
"verb": "get",
3505+
"requestPath": "/orgs/{org}/settings/immutable-releases"
3506+
},
3507+
{
3508+
"slug": "set-immutable-releases-settings-for-an-organization",
3509+
"subcategory": "orgs",
3510+
"verb": "put",
3511+
"requestPath": "/orgs/{org}/settings/immutable-releases"
3512+
},
3513+
{
3514+
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
3515+
"subcategory": "orgs",
3516+
"verb": "get",
3517+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
3518+
},
3519+
{
3520+
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
3521+
"subcategory": "orgs",
3522+
"verb": "put",
3523+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
3524+
},
3525+
{
3526+
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
3527+
"subcategory": "orgs",
3528+
"verb": "put",
3529+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
3530+
},
3531+
{
3532+
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
3533+
"subcategory": "orgs",
3534+
"verb": "delete",
3535+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
3536+
},
35013537
{
35023538
"slug": "list-hosted-compute-network-configurations-for-an-organization",
35033539
"subcategory": "network-configurations",
@@ -4396,6 +4432,24 @@
43964432
"verb": "post",
43974433
"requestPath": "/repos/{owner}/{repo}/hooks/{hook_id}/tests"
43984434
},
4435+
{
4436+
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
4437+
"subcategory": "repos",
4438+
"verb": "get",
4439+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4440+
},
4441+
{
4442+
"slug": "enable-immutable-releases",
4443+
"subcategory": "repos",
4444+
"verb": "put",
4445+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4446+
},
4447+
{
4448+
"slug": "disable-immutable-releases",
4449+
"subcategory": "repos",
4450+
"verb": "delete",
4451+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4452+
},
43994453
{
44004454
"slug": "list-repository-languages",
44014455
"subcategory": "repos",

src/github-apps/data/fpt-2022-11-28/server-to-server-permissions.json

Lines changed: 99 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1010,6 +1010,72 @@
10101010
"server-to-server": true,
10111011
"additional-permissions": false
10121012
},
1013+
{
1014+
"category": "orgs",
1015+
"slug": "get-immutable-releases-settings-for-an-organization",
1016+
"subcategory": "orgs",
1017+
"verb": "get",
1018+
"requestPath": "/orgs/{org}/settings/immutable-releases",
1019+
"access": "read",
1020+
"user-to-server": true,
1021+
"server-to-server": true,
1022+
"additional-permissions": false
1023+
},
1024+
{
1025+
"category": "orgs",
1026+
"slug": "set-immutable-releases-settings-for-an-organization",
1027+
"subcategory": "orgs",
1028+
"verb": "put",
1029+
"requestPath": "/orgs/{org}/settings/immutable-releases",
1030+
"access": "write",
1031+
"user-to-server": true,
1032+
"server-to-server": true,
1033+
"additional-permissions": false
1034+
},
1035+
{
1036+
"category": "orgs",
1037+
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
1038+
"subcategory": "orgs",
1039+
"verb": "get",
1040+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
1041+
"access": "read",
1042+
"user-to-server": true,
1043+
"server-to-server": true,
1044+
"additional-permissions": false
1045+
},
1046+
{
1047+
"category": "orgs",
1048+
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
1049+
"subcategory": "orgs",
1050+
"verb": "put",
1051+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories",
1052+
"access": "write",
1053+
"user-to-server": true,
1054+
"server-to-server": true,
1055+
"additional-permissions": true
1056+
},
1057+
{
1058+
"category": "orgs",
1059+
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
1060+
"subcategory": "orgs",
1061+
"verb": "put",
1062+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
1063+
"access": "write",
1064+
"user-to-server": true,
1065+
"server-to-server": true,
1066+
"additional-permissions": true
1067+
},
1068+
{
1069+
"category": "orgs",
1070+
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
1071+
"subcategory": "orgs",
1072+
"verb": "delete",
1073+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}",
1074+
"access": "write",
1075+
"user-to-server": true,
1076+
"server-to-server": true,
1077+
"additional-permissions": true
1078+
},
10131079
{
10141080
"category": "copilot",
10151081
"slug": "get-copilot-metrics-for-a-team",
@@ -5356,6 +5422,39 @@
53565422
"server-to-server": true,
53575423
"additional-permissions": true
53585424
},
5425+
{
5426+
"category": "repos",
5427+
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
5428+
"subcategory": "repos",
5429+
"verb": "get",
5430+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
5431+
"access": "read",
5432+
"user-to-server": true,
5433+
"server-to-server": true,
5434+
"additional-permissions": false
5435+
},
5436+
{
5437+
"category": "repos",
5438+
"slug": "enable-immutable-releases",
5439+
"subcategory": "repos",
5440+
"verb": "put",
5441+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
5442+
"access": "write",
5443+
"user-to-server": true,
5444+
"server-to-server": true,
5445+
"additional-permissions": false
5446+
},
5447+
{
5448+
"category": "repos",
5449+
"slug": "disable-immutable-releases",
5450+
"subcategory": "repos",
5451+
"verb": "delete",
5452+
"requestPath": "/repos/{owner}/{repo}/immutable-releases",
5453+
"access": "write",
5454+
"user-to-server": true,
5455+
"server-to-server": true,
5456+
"additional-permissions": false
5457+
},
53595458
{
53605459
"category": "interactions",
53615460
"slug": "get-interaction-restrictions-for-a-repository",

src/github-apps/data/fpt-2022-11-28/server-to-server-rest.json

Lines changed: 54 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3434,6 +3434,42 @@
34343434
"verb": "delete",
34353435
"requestPath": "/orgs/{org}/security-managers/teams/{team_slug}"
34363436
},
3437+
{
3438+
"slug": "get-immutable-releases-settings-for-an-organization",
3439+
"subcategory": "orgs",
3440+
"verb": "get",
3441+
"requestPath": "/orgs/{org}/settings/immutable-releases"
3442+
},
3443+
{
3444+
"slug": "set-immutable-releases-settings-for-an-organization",
3445+
"subcategory": "orgs",
3446+
"verb": "put",
3447+
"requestPath": "/orgs/{org}/settings/immutable-releases"
3448+
},
3449+
{
3450+
"slug": "list-selected-repositories-for-immutable-releases-enforcement",
3451+
"subcategory": "orgs",
3452+
"verb": "get",
3453+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
3454+
},
3455+
{
3456+
"slug": "set-selected-repositories-for-immutable-releases-enforcement",
3457+
"subcategory": "orgs",
3458+
"verb": "put",
3459+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories"
3460+
},
3461+
{
3462+
"slug": "enable-a-selected-repository-for-immutable-releases-in-an-organization",
3463+
"subcategory": "orgs",
3464+
"verb": "put",
3465+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
3466+
},
3467+
{
3468+
"slug": "disable-a-selected-repository-for-immutable-releases-in-an-organization",
3469+
"subcategory": "orgs",
3470+
"verb": "delete",
3471+
"requestPath": "/orgs/{org}/settings/immutable-releases/repositories/{repository_id}"
3472+
},
34373473
{
34383474
"slug": "list-hosted-compute-network-configurations-for-an-organization",
34393475
"subcategory": "network-configurations",
@@ -4522,6 +4558,24 @@
45224558
"verb": "post",
45234559
"requestPath": "/repos/{owner}/{repo}/hooks/{hook_id}/tests"
45244560
},
4561+
{
4562+
"slug": "check-if-immutable-releases-are-enabled-for-a-repository",
4563+
"subcategory": "repos",
4564+
"verb": "get",
4565+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4566+
},
4567+
{
4568+
"slug": "enable-immutable-releases",
4569+
"subcategory": "repos",
4570+
"verb": "put",
4571+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4572+
},
4573+
{
4574+
"slug": "disable-immutable-releases",
4575+
"subcategory": "repos",
4576+
"verb": "delete",
4577+
"requestPath": "/repos/{owner}/{repo}/immutable-releases"
4578+
},
45254579
{
45264580
"slug": "list-repository-languages",
45274581
"subcategory": "repos",

0 commit comments

Comments
 (0)