Skip to content

Commit 0c47490

Browse files
chore: minor tweaks after test run (#61)
* fix: update docs to reflect exercise terminology * chore: cleanup readme * chore: step 1 fixes
1 parent 66298ff commit 0c47490

File tree

2 files changed

+12
-28
lines changed

2 files changed

+12
-28
lines changed

.github/steps/1-dependency-graph.md

Lines changed: 10 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -20,31 +20,32 @@ GitHub offers a range of features to help you understand the dependencies in you
2020

2121
**We recommend opening another browser tab to work through the following activities so you can keep these instructions open for reference.**
2222

23-
Dependency graph is enabled by default for all new public repositories. If you're working in a public repository, you can go straight to "Activity 1.2: Add a new dependency and view your dependency graph." For private or internal repositories, you'll need to enable Dependency graph.
23+
>[!NOTE]
24+
> Dependency graph is enabled by default for all new public repositories.
2425
2526
1. Navigate to the **Settings** tab.
2627
1. Click **Code Security**.
27-
1. **Enable** "Dependency graph."
28+
1. Verify **Dependency Graph** is **Enabled**
2829

2930
### :keyboard: Activity 1.2: Add a new dependency and view your dependency graph
3031

3132
1. Navigate to the **Code** tab and locate the `code/src/AttendeeSite` folder.
32-
1. Add the following content to the `package-lock.json` file after the third to last bracket `}` and before the last two brackets.
33+
1. Commit the following content on the `main` branch to the `package-lock.json` file as the last item on the `dependencies` map _(after the third to last bracket `}` and before the last two brackets)_
3334

34-
> 🪧 **Note:** You can edit and commit the file on github.com directly or hit the `.` key to open the lightweight editor to edit and commit changes.
35+
> 🪧 **Note:** You can edit and commit the file on github.com directly or hit the `.` key to open the lightweight editor to edit and commit changes.
3536
36-
```json
37-
,
37+
```json
38+
,
3839
"follow-redirects": {
3940
"version": "1.14.1",
4041
"resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.14.1.tgz",
4142
"integrity": "sha512-HWqDgT7ZEkqRzBvc2s64vSZ/hfOceEol3ac/7tKwzuvEyWx3/4UegXh5oBOIotkGsObyk3xznnSRVADBgWSQVg=="
4243
}
43-
```
44-
44+
```
45+
4546
1. Navigate to the **Insights** tab.
4647
1. Select **Dependency graph** from the side navigation bar.
4748
1. Review all the dependencies on the **Dependencies** tab.
4849
1. Search for `follow-redirects` and review the new dependency you just added.
4950
![Screen Shot showing the "follow-redirects" dependency.](https://user-images.githubusercontent.com/6351798/196288729-734e3319-c5d7-4f35-a19c-676c12f0e27d.png)
50-
1. With the new dependency added, Mona should already be busy checking your work. Give her a moment and keep watch in the comments. You will see her respond with progress info and the next lesson.
51+
1. With the new dependency added, Mona should already be busy checking your work. Give her a moment and keep watch in the comments. You will see her respond with progress info and the next lesson.

README.md

Lines changed: 2 additions & 19 deletions
Original file line numberDiff line numberDiff line change
@@ -1,24 +1,7 @@
1-
<header>
2-
3-
<!--
4-
<<< Author notes: Course header >>>
5-
Include a 1280×640 image, course title in sentence case, and a concise description in emphasis.
6-
In your repository settings: enable template repository, add your 1280×640 social image, auto delete head branches.
7-
Add your open source license, GitHub uses MIT license.
8-
-->
9-
101
# Secure your repository's supply chain
112

123
_Secure your supply chain, understand dependencies in your environment, know about vulnerabilities in those dependencies and patch them._
134

14-
</header>
15-
16-
<!--
17-
<<< Author notes: Course start >>>
18-
Include start button, a note about Actions minutes,
19-
and tell the learner why they should take the course.
20-
-->
21-
225
## Welcome
236

247
GitHub helps you secure your supply chain, from understanding the dependencies in your environment, to knowing about vulnerabilities in those dependencies and patching them.
@@ -27,9 +10,9 @@ GitHub helps you secure your supply chain, from understanding the dependencies i
2710
- **What you'll learn**: How to view repository dependencies, view Dependabot alerts, and enable Dependabot security and version updates
2811
- **What you'll build**: Repository dependencies, Dependabot alerts, pull requests to fix dependencies and version updates
2912
- **Prerequisites**: None
30-
- **Timing**: This course can be completed in under an hour
13+
- **Timing**: This exercise can be completed in under an hour
3114

32-
In this course, you will explore:
15+
In this exercise, you will explore:
3316

3417
1. Dependency graph
3518
2. Dependency alerts

0 commit comments

Comments
 (0)