ドキュメントには頻繁に更新が加えられ、その都度公開されています。本ページの翻訳はまだ未完成な部分があることをご了承ください。最新の情報については、英語のドキュメンテーションをご参照ください。本ページの翻訳に問題がある場合はこちらまでご連絡ください。

Configuring notifications for vulnerable dependencies

Optimize how you receive notifications about security alerts.

ここには以下の内容があります:

About notifications for vulnerable dependencies

When GitHub Enterprise Server detects vulnerable dependencies in your repositories, it sends security alerts.

Your site administrator needs to enable security alerts for vulnerable dependencies for your GitHub Enterprise Server instance before you can use the feature. For more information, see "Enabling alerts for vulnerable dependencies on GitHub Enterprise Server."

By default, if your site administrator has configured email for notifications on your enterprise, you will receive security alerts by email.

Site administrators can also enable security alerts without notifications. 詳しい情報については、「GitHub Enterprise Serverの脆弱性のある依存関係に関するセキュリティアラートの有効化」を参照してください。

Configuring notifications for security alerts

You can configure notification settings for yourself or your organization from the Manage notifications drop-down shown at the top of each page. 詳しい情報については、「通知を設定する」を参照してください。

You can choose the delivery method for notifications about security alerts on repositories that you are watching, as well as the frequency at which the notifications are sent to you.

By default, if your site administrator has configured email for notifications on your instance, you will receive security alerts:

  • by email, an email is sent every time a vulnerability is found (Email each time a vulnerability is found option)
  • in the user interface, as warnings in your repository's file and code views (UI alerts option)
  • on the command line, as warnings that are displayed as callbacks when you push to repositories with vulnerabilities (Command Line option)
  • in your inbox, as web notifications (Web option)

You can customize the way you are notified about security alerts. For example, you can receive a weekly digest email summarizing alerts for up to 10 of your repositories using the Email a digest summary of vulnerabilities and Weekly security email digest options.

Security alerts options

Note: You can filter your GitHub inbox notifications to show security alerts. 詳しい情報については「インボックスからの通知の管理」を参照してください。

Email notifications for security alerts that affect one or more repositories include the X-GitHub-Severity header field. You can use the value of the X-GitHub-Severity header field to filter email notifications for security alerts. For more information, see "Configuring notifications."

How to reduce the noise from notifications for vulnerable dependencies

If you are concerned about receiving too many notifications for security alerts, we recommend you opt into the weekly email digest, or turn off notifications while keeping security alerts enabled. You can still navigate to see your security alerts in your repository's Security tab.

参考リンク

Did this doc help you?

Privacy policy

Help us make these docs great!

All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.

Make a contribution

OR, learn how to contribute.