Skip to content

Repo sync #37766

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 5 commits into from
Apr 25, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,7 @@ With {% data variables.product.prodname_emus %}, you can control the user accoun

{% data variables.enterprise.prodname_managed_users_caps %}:

* Cannot install {% data variables.product.prodname_github_apps %} on their user accounts, unless the app is an internal app. See [AUTOTITLE](/apps/using-github-apps/internal-github-apps).
* Cannot install {% data variables.product.prodname_github_apps %} on their user accounts, unless the app is an privileged app. See [AUTOTITLE](/apps/using-github-apps/privileged-github-apps).
* Can install {% data variables.product.prodname_github_apps %} on a repository if the app doesn't request organization permissions and if the {% data variables.enterprise.prodname_managed_user %} has admin access to the repository.
* Can install {% data variables.product.prodname_github_apps %} on an organization if the {% data variables.enterprise.prodname_managed_user %} is an organization owner.
* Can purchase and install paid {% data variables.product.prodname_github_apps %} only if the {% data variables.enterprise.prodname_managed_user %} is an enterprise owner.
Expand Down
2 changes: 1 addition & 1 deletion content/apps/oauth-apps/using-oauth-apps/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,6 +13,6 @@ children:
- /authorizing-oauth-apps
- /reviewing-your-authorized-oauth-apps
- /connecting-with-third-party-applications
- /internal-oauth-apps
- /privileged-oauth-apps
---

31 changes: 0 additions & 31 deletions content/apps/oauth-apps/using-oauth-apps/internal-oauth-apps.md

This file was deleted.

33 changes: 33 additions & 0 deletions content/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,33 @@
---
title: Privileged OAuth apps
intro: 'Some {% data variables.product.prodname_oauth_apps %} are privileged apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.'
versions:
fpt: '*'
ghes: '*'
ghec: '*'
shortTitle: Privileged apps
redirect_from:
- /apps/oauth-apps/using-oauth-apps/internal-oauth-apps
---

Some {% data variables.product.prodname_oauth_apps %} are privileged apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, even if an organization owner has restricted access by {% data variables.product.prodname_oauth_apps %} to the organization's data, users can still authorize these apps and use them to access data from the organization.

Some of these privileged apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_oauth_apps %}.

These privileged apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %}

These {% data variables.product.prodname_oauth_apps %} are :

* Gist
* Git Credential Manager
* {% data variables.product.prodname_android %}
* {% data variables.product.prodname_cli %}
* {% data variables.product.prodname_github_codespaces %} for JetBrains
* {% data variables.product.prodname_desktop %}
* {% data variables.product.prodname_education %}
* github-importer-production <!-- markdownlint-disable-line GHD034 -->
* {% data variables.product.prodname_ios %}
* {% data variables.product.company_short %} Support
* JetBrains IDE Integration
* {% data variables.product.prodname_vs %}
* {% data variables.product.prodname_vscode %}
Original file line number Diff line number Diff line change
Expand Up @@ -27,4 +27,4 @@ shortTitle: Review OAuth apps
{% ifversion fpt or ghec %}
* [AUTOTITLE](/get-started/exploring-integrations/about-integrations){% endif %}
* [AUTOTITLE](/apps/using-github-apps/reviewing-your-authorized-integrations)
* [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps)
* [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps)
2 changes: 1 addition & 1 deletion content/apps/using-github-apps/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,5 +22,5 @@ children:
- /reviewing-and-revoking-authorization-of-github-apps
- /reviewing-and-modifying-installed-github-apps
- /saml-and-github-apps
- /internal-github-apps
- /privileged-github-apps
---
32 changes: 0 additions & 32 deletions content/apps/using-github-apps/internal-github-apps.md

This file was deleted.

34 changes: 34 additions & 0 deletions content/apps/using-github-apps/privileged-github-apps.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,34 @@
---
title: Privileged GitHub Apps
intro: 'Some {% data variables.product.prodname_github_apps %} are privileged apps, owned by {% data variables.product.company_short %}, that are granted special capabilities.'
versions:
fpt: '*'
ghes: '*'
ghec: '*'
shortTitle: Privileged apps
redirect_from:
- /apps/using-github-apps/internal-github-apps
---

Some {% data variables.product.prodname_github_apps %} are privileged apps. These apps are owned by {% data variables.product.company_short %} and are granted special capabilities. For example, users can authorize these apps and use them to access data from an organization without requiring approval by the organization.

Some of these privileged apps are automatically included with {% data variables.product.company_short %} and do not require user authorization. These apps will not appear in your list of authorized {% data variables.product.prodname_github_apps %} or in your list of installed {% data variables.product.prodname_github_apps %}.{% ifversion ghec %}{% data variables.product.prodname_emus %} are allowed to install these privileged apps on their user account, while standard, unprivileged apps cannot be installed on {% data variables.product.prodname_emus %} user accounts.{% endif %}

These privileged apps will appear in the user security log, but will not appear in organization{% ifversion ghes or ghec %} or enterprise{% endif %} audit logs. {% ifversion ghes or ghec %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log), [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization), and [AUTOTITLE](/admin/monitoring-activity-in-your-enterprise/reviewing-audit-logs-for-your-enterprise/about-the-audit-log-for-your-enterprise).{% else %}For more information, see [AUTOTITLE](/authentication/keeping-your-account-and-data-secure/reviewing-your-security-log) and [AUTOTITLE](/organizations/keeping-your-organization-secure/managing-security-settings-for-your-organization/reviewing-the-audit-log-for-your-organization).{% endif %}

These {% data variables.product.prodname_github_apps %} are:

* Actions
* {% data variables.product.prodname_dependabot %}
* Git Src Migrator
* {% data variables.product.prodname_GHAS %}
* {% data variables.product.prodname_classroom %}
* {% data variables.product.prodname_github_codespaces %}
* {% data variables.product.prodname_copilot %} Plugin
* {% data variables.product.github %} Merge Queue
* {% data variables.product.prodname_pages %}
* {% data variables.product.github %} Project Automation
* {% data variables.product.github %} Team Synchronization
* Microsoft Teams for {% data variables.product.github %}
* OpenGraph (`custom-og-image`)
* Slack
Original file line number Diff line number Diff line change
Expand Up @@ -74,4 +74,4 @@ In addition to reviewing {% data variables.product.prodname_github_apps %} that
## Further reading

* [AUTOTITLE](/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps)
* [AUTOTITLE](/apps/using-github-apps/internal-github-apps)
* [AUTOTITLE](/apps/using-github-apps/privileged-github-apps)
Original file line number Diff line number Diff line change
Expand Up @@ -38,4 +38,4 @@ The authorization can only be revoked by the person who authorized the {% data v

* [AUTOTITLE](/apps/using-github-apps/reviewing-and-modifying-installed-github-apps)
* [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/reviewing-your-authorized-applications-oauth)
* [AUTOTITLE](/apps/using-github-apps/internal-github-apps)
* [AUTOTITLE](/apps/using-github-apps/privileged-github-apps)
Original file line number Diff line number Diff line change
Expand Up @@ -208,4 +208,9 @@ Yes. Billing managers for organizations or enterprises can connect Azure subscri

Yes. During an **{% data variables.product.prodname_emu %} trial**, you can use metered products up to the included limits. To exceed the included limits, you’ll need to link an Azure subscription.

### What should I do if I see a banner saying my Azure ID is missing?

If you see this banner, it means your Azure payment method information is missing. To avoid service interruptions for your enterprise or organization, make sure to add this information before the date provided in the alert.

If you have questions or if you believe you are seeing this banner by mistake, contact {% data variables.contact.contact_support_page %}.
{% endif %}
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ shortTitle: '{% data variables.product.prodname_oauth_app %} restrictions'

{% data reusables.organizations.restricted-app-access-requests %}

Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize internal {% data variables.product.prodname_oauth_apps %} apps and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps).
Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize privileged {% data variables.product.prodname_oauth_apps %} apps and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps).

{% data reusables.organizations.oauth_app_restrictions_default %}

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -17,7 +17,7 @@ shortTitle: Restrict {% data variables.product.prodname_oauth_apps %}

{% data reusables.organizations.oauth_app_restrictions_default %}

Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize internal {% data variables.product.prodname_oauth_apps %} and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/internal-oauth-apps).
Even if you restrict {% data variables.product.prodname_oauth_apps %} access in your organization, users can still authorize privileged {% data variables.product.prodname_oauth_apps %} and use them to access data from the organization. For more information, see [AUTOTITLE](/apps/oauth-apps/using-oauth-apps/privileged-oauth-apps).

> [!WARNING]
> * Enabling {% data variables.product.prodname_oauth_app %} access restrictions will revoke organization access for all previously authorized {% data variables.product.prodname_oauth_apps %} and SSH keys. For more information, see [AUTOTITLE](/organizations/managing-oauth-access-to-your-organizations-data/about-oauth-app-access-restrictions).
Expand Down
4 changes: 2 additions & 2 deletions src/links/lib/excluded-links.yml
Original file line number Diff line number Diff line change
Expand Up @@ -89,8 +89,8 @@
- startsWith: https://platform.openai.com/docs/api-reference/
- is: https://azuredownloads-g3ahgwb5b8bkbxhd.b01.azurefd.net/github-copilot/
- is: https://www.anthropic.com/claude/sonnet
- is: https://www.psiexams.com/en-gb/become-psi-test-center/computer-specifications/
- is: https://buymeacoffee.com/
- is: https://www.psiexams.com/become-psi-test-center/computer-specifications/
- is: https://www.buymeacoffee.com/
- startsWith: https://www.crashplan.com/
- is: https://info.figshare.com/user-guide/how-to-connect-figshare-with-your-github-account/
- is: https://www.anthropic.com/news/claude-3-5-sonnet
Expand Down
10 changes: 5 additions & 5 deletions src/secret-scanning/data/public-docs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -681,7 +681,7 @@
ghes: '>=3.14'
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
hasPushProtection: false
hasValidityCheck: false
isduplicate: false
- provider: Baidu
Expand Down Expand Up @@ -1671,7 +1671,7 @@
fpt: '*'
ghec: '*'
ghes: '>=3.14'
isPublic: false
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
hasValidityCheck: false
Expand All @@ -1685,7 +1685,7 @@
fpt: '*'
ghec: '*'
ghes: '>=3.14'
isPublic: false
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
hasValidityCheck: false
Expand All @@ -1709,7 +1709,7 @@
fpt: '*'
ghec: '*'
ghes: '*'
isPublic: false
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}'
Expand All @@ -1733,7 +1733,7 @@
fpt: '*'
ghec: '*'
ghes: '*'
isPublic: false
isPublic: true
isPrivateWithGhas: true
hasPushProtection: true
hasValidityCheck: false
Expand Down
4 changes: 2 additions & 2 deletions src/secret-scanning/lib/config.json
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
{
"sha": "ffca37e2cc351a0ec7615acd72426408e097e422",
"blob-sha": "13c60ac1ef34f0cc397a4a4d89196124caf01ef2",
"sha": "a9dfd88ea981d4183fb5e8f771e9940baa7a98d3",
"blob-sha": "c94c1e5db1a71673aad3accda99d5a57fe6a9db0",
"targetFilename": "code-security/secret-scanning/introduction/supported-secret-scanning-patterns"
}
Loading