Skip to content

Commit 210dcce

Browse files
[K9VULN-5717] Add steps for SCA (#29937)
* Add steps for SCA * Update content/en/security/code_security/dev_tool_int/github_pull_requests/_index.md Co-authored-by: Joe Peeples <[email protected]> * Update content/en/security/code_security/dev_tool_int/github_pull_requests/_index.md Co-authored-by: Joe Peeples <[email protected]> --------- Co-authored-by: Joe Peeples <[email protected]>
1 parent c2da34f commit 210dcce

File tree

1 file changed

+3
-1
lines changed
  • content/en/security/code_security/dev_tool_int/github_pull_requests

1 file changed

+3
-1
lines changed

content/en/security/code_security/dev_tool_int/github_pull_requests/_index.md

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -68,10 +68,11 @@ Configure PR comment settings globally for all repositories or tailor them indiv
6868
To configure PR comments for all repositories:
6969

7070
1. In Datadog, navigate to [**Security** > **Code Security** > **Settings**][7].
71-
1. In **Repository Settings**, click **Global PR Comment Configuration**.
71+
1. In **Repository Settings**, click **Global PR Comment Configuration**.
7272
1. Configure the settings:
7373
- **Enable PR comments for all scan types and severities**: Enable this to apply PR comments across all types and severities.
7474
- **Enable for Static Analysis (SAST)**: Toggle this option to enable PR comments for SAST. If enabled, specify a minimum severity threshold. Additionally, select **Exclude PR comments if violations are detected in test files** to prevent comments on issues found in test files.
75+
- **Enable for Software Composition Analysis (SCA)**: Toggle this option to enable PR comments for SCA. If enabled, specify a minimum severity threshold. Additionally, select **Exclude PR comments if violations are detected in test or dev dependencies** to prevent comments on issues found in dependencies existing only in development or test environments.
7576
- **Enable for Infrastructure-as-Code (IaC)**: Toggle this option to enable PR comments for IaC. If enabled, specify a minimum severity threshold.
7677
1. Click **Save**.
7778

@@ -82,6 +83,7 @@ To configure PR comments for a single repository:
8283
1. Configure the settings:
8384
- **Enable PR comments for all scan types and severities**: Enable this to apply PR comments across all types and severities.
8485
- **Enable for Static Analysis (SAST)**: Toggle this option to enable PR comments for SAST. If enabled, specify a minimum severity threshold. Additionally, select **Exclude PR comments if violations are detected in test files** to prevent comments on issues found in test files.
86+
- **Enable for Software Composition Analysis (SCA)**: Toggle this option to enable PR comments for SCA. If enabled, specify a minimum severity threshold. Additionally, select **Exclude PR comments if violations are detected in test or dev dependencies** to prevent comments on issues found in dependencies existing only in development or test environments.
8587
- **Enable for Infrastructure-as-Code (IaC)**: Toggle this option to enable PR comments for IaC. If enabled, specify a minimum severity threshold.
8688
- **Block all comments in this repository**: Enable this to disable all comments for this repository, overriding global settings.
8789
1. Click **Save Configuration**.

0 commit comments

Comments
 (0)