You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: .github/steps/1-dependency-graph.md
+10-9Lines changed: 10 additions & 9 deletions
Original file line number
Diff line number
Diff line change
@@ -20,31 +20,32 @@ GitHub offers a range of features to help you understand the dependencies in you
20
20
21
21
**We recommend opening another browser tab to work through the following activities so you can keep these instructions open for reference.**
22
22
23
-
Dependency graph is enabled by default for all new public repositories. If you're working in a public repository, you can go straight to "Activity 1.2: Add a new dependency and view your dependency graph." For private or internal repositories, you'll need to enable Dependency graph.
23
+
>[!NOTE]
24
+
> Dependency graph is enabled by default for all new public repositories.
24
25
25
26
1. Navigate to the **Settings** tab.
26
27
1. Click **Code Security**.
27
-
1.**Enable**"Dependency graph."
28
+
1.Verify **Dependency Graph**is **Enabled**
28
29
29
30
### :keyboard: Activity 1.2: Add a new dependency and view your dependency graph
30
31
31
32
1. Navigate to the **Code** tab and locate the `code/src/AttendeeSite` folder.
32
-
1.Add the following content to the `package-lock.json` file after the third to last bracket `}` and before the last two brackets.
33
+
1.Commit the following content on the `main` branch to the `package-lock.json` file as the last item on the `dependencies` map _(after the third to last bracket `}` and before the last two brackets)_
33
34
34
-
> 🪧 **Note:** You can edit and commit the file on github.com directly or hit the `.` key to open the lightweight editor to edit and commit changes.
35
+
> 🪧 **Note:** You can edit and commit the file on github.com directly or hit the `.` key to open the lightweight editor to edit and commit changes.
1. Select **Dependency graph** from the side navigation bar.
47
48
1. Review all the dependencies on the **Dependencies** tab.
48
49
1. Search for `follow-redirects` and review the new dependency you just added.
49
50

50
-
1. With the new dependency added, Mona should already be busy checking your work. Give her a moment and keep watch in the comments. You will see her respond with progress info and the next lesson.
51
+
1. With the new dependency added, Mona should already be busy checking your work. Give her a moment and keep watch in the comments. You will see her respond with progress info and the next lesson.
Copy file name to clipboardExpand all lines: README.md
+2-19Lines changed: 2 additions & 19 deletions
Original file line number
Diff line number
Diff line change
@@ -1,24 +1,7 @@
1
-
<header>
2
-
3
-
<!--
4
-
<<< Author notes: Course header >>>
5
-
Include a 1280×640 image, course title in sentence case, and a concise description in emphasis.
6
-
In your repository settings: enable template repository, add your 1280×640 social image, auto delete head branches.
7
-
Add your open source license, GitHub uses MIT license.
8
-
-->
9
-
10
1
# Secure your repository's supply chain
11
2
12
3
_Secure your supply chain, understand dependencies in your environment, know about vulnerabilities in those dependencies and patch them._
13
4
14
-
</header>
15
-
16
-
<!--
17
-
<<< Author notes: Course start >>>
18
-
Include start button, a note about Actions minutes,
19
-
and tell the learner why they should take the course.
20
-
-->
21
-
22
5
## Welcome
23
6
24
7
GitHub helps you secure your supply chain, from understanding the dependencies in your environment, to knowing about vulnerabilities in those dependencies and patching them.
@@ -27,9 +10,9 @@ GitHub helps you secure your supply chain, from understanding the dependencies i
27
10
-**What you'll learn**: How to view repository dependencies, view Dependabot alerts, and enable Dependabot security and version updates
28
11
-**What you'll build**: Repository dependencies, Dependabot alerts, pull requests to fix dependencies and version updates
29
12
-**Prerequisites**: None
30
-
-**Timing**: This course can be completed in under an hour
13
+
-**Timing**: This exercise can be completed in under an hour
0 commit comments