Skip to content

Commit 755af92

Browse files
mchammer01Copilotjc-clark
authored
Remove Next steps and Further reading sections from secret protection journey articles (#61529)
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> Co-authored-by: Joe Clark <31087804+jc-clark@users.noreply.github.com>
1 parent 28631ac commit 755af92

18 files changed

Lines changed: 1 addition & 117 deletions

File tree

content/code-security/concepts/secret-security/about-push-protection.md

Lines changed: 0 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -89,16 +89,3 @@ After you enable push protection for repositories, you can customize it by:
8989
* Designating contributors who can bypass push protection and approve bypass requests for other contributors{% ifversion push-protection-org-enterprise-exemptions %}, or are exempt from push protection entirely{% endif %}{% ifversion push-protected-pattern-configuration %}
9090
* Configuring which secret patterns are included in push protection at the enterprise or organization level{% endif %}
9191

92-
## Next steps
93-
94-
To enable push protection:
95-
* **For a repository**, see [AUTOTITLE](/code-security/secret-scanning/enabling-secret-scanning-features/enabling-push-protection-for-your-repository).
96-
{% ifversion security-configurations-cloud -%}
97-
* **For an organization or enterprise**, you need to apply a {% data variables.product.prodname_security_configuration %}. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/establish-complete-coverage/applying-the-github-recommended-security-configuration-in-your-organization) and [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-enterprise-security/establish-complete-coverage/applying-the-github-recommended-security-configuration-to-your-enterprise).
98-
{% elsif security-configuration-enterprise-level -%}
99-
* **For an organization or enterprise**, you need to apply a {% data variables.product.prodname_security_configuration %}. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/establish-complete-coverage/creating-a-custom-security-configuration) and [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-enterprise-security/establish-complete-coverage/creating-a-custom-security-configuration-for-your-enterprise).
100-
{% else -%}
101-
* **For an organization**, you need to apply a {% data variables.product.prodname_security_configuration %}. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/establish-complete-coverage/creating-a-custom-security-configuration).
102-
{% endif %}
103-
104-
For a list of secrets and service providers supported by push protection, see [AUTOTITLE](/code-security/secret-scanning/introduction/supported-secret-scanning-patterns#supported-secrets).

content/code-security/concepts/secret-security/about-secret-scanning.md

Lines changed: 0 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -76,14 +76,3 @@ Validity checks are separate from {% data variables.product.prodname_secret_scan
7676
## How can I access this feature?
7777

7878
{% data reusables.gated-features.secret-scanning %}
79-
80-
## Next steps
81-
82-
* **If you've received an alert**, see [AUTOTITLE](/code-security/secret-scanning/managing-alerts-from-secret-scanning) to learn how to review, resolve, and remediate exposed secrets.
83-
{%- ifversion secret-risk-assessment %}
84-
* **If you're securing an organization**, see [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/assess-your-secret-risk) to determine your organization's exposure to leaked secrets.
85-
{% endif %}
86-
87-
## Further reading
88-
89-
* For a complete list of supported secrets and service providers, see [AUTOTITLE](/code-security/secret-scanning/introduction/supported-secret-scanning-patterns#supported-secrets).

content/code-security/concepts/secret-security/push-protection-metrics.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -34,7 +34,3 @@ You can see {% data variables.product.prodname_secret_scanning %} metrics for a
3434
* The `admin` role for the repository
3535
* A custom repository role with the "View {% data variables.product.prodname_secret_scanning %} alerts" fine-grained permissions for the repository
3636
* Access to alerts for the repository
37-
38-
## Next steps
39-
40-
To find your push protection metrics, see [AUTOTITLE](/code-security/how-tos/view-and-interpret-data/analyze-organization-data/viewing-metrics-for-secret-scanning-push-protection).

content/code-security/concepts/secret-security/secret-leakage-risks.md

Lines changed: 0 additions & 14 deletions
Original file line numberDiff line numberDiff line change
@@ -86,17 +86,3 @@ Encourage individual developers to enable push protection for their personal acc
8686
### 2. Detect existing secrets
8787

8888
Use **{% data variables.product.prodname_secret_scanning %}** to continuously monitor your repositories for hardcoded secrets and generate alerts when credentials are detected, enabling you to revoke and rotate compromised credentials quickly. Beyond default detection of provider patterns, you can expand scanning to non-provider patterns and define custom patterns for organization-specific secrets. This helps you gain visibility into secret sprawl across your organization.
89-
90-
## Next steps
91-
92-
To protect your organization from secret leakage:
93-
{% ifversion secret-risk-assessment %}
94-
1. Run a free secret risk assessment to understand your current exposure. {% data variables.secret-scanning.secret-risk-assessment-cta-product %}
95-
{% endif %}
96-
1. Enable push protection to prevent new secrets from being committed.
97-
1. Enable {% data variables.product.prodname_secret_scanning %} to begin detecting existing secret leaks.
98-
1. Establish secure credential management practices for your development teams.
99-
100-
{% ifversion secret-risk-assessment %}
101-
For an overview of {% data variables.product.github %}'s secret security features, see [AUTOTITLE](/code-security/concepts/secret-security/about-secret-security-with-github).
102-
{% endif %}

content/code-security/concepts/security-at-scale/best-practices-for-selecting-pilot-repositories.md

Lines changed: 0 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -83,15 +83,3 @@ Take these steps to set your pilot up for success.
8383
* Confirm repository owners agree to participate. Unwilling teams generate negative feedback that doesn't reflect actual product issues.
8484
* Identify champions within each pilot team. Champions answer questions and keep feedback flowing.
8585
* Document baseline metrics like commit frequency and contributor count. These baselines help you measure pilot impact.
86-
87-
## Further reading
88-
89-
* [Identify repositories for secret protection](https://support.github.com/product-guides/github-advanced-security-secret-protection/get-started/identify-repositories-for-secret-protection) in the GitHub Advanced Security product guides
90-
91-
{% ifversion secret-risk-assessment %}
92-
93-
## Next steps
94-
95-
Now that you've selected your pilot repositories, review pricing and configure {% data variables.product.prodname_GH_secret_protection %}. See [AUTOTITLE](/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/protect-your-secrets).
96-
97-
{% endif %}

content/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/assess-your-secret-risk.md

Lines changed: 0 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -34,6 +34,3 @@ category:
3434

3535
{% data reusables.secret-risk-assessment.notification-report-ready %}
3636

37-
## Next steps
38-
39-
Now that you've generated a {% data variables.product.prodname_secret_risk_assessment %} report for your organization, learn how to interpret the results. See [AUTOTITLE](/code-security/securing-your-organization/understanding-your-organizations-exposure-to-leaked-secrets/interpreting-secret-risk-assessment-results).

content/code-security/how-tos/secure-at-scale/configure-organization-security/establish-complete-coverage/applying-a-custom-security-configuration.md

Lines changed: 0 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -35,11 +35,3 @@ To learn how to create a {% data variables.product.prodname_custom_security_conf
3535
> If you apply an enforced configuration, this information is reported in the list of repositories. An enforced configuration means that repository owners are blocked from changing features that have been enabled or disabled in the configuration, but features that are not set aren't enforced.
3636
3737
After you apply a configuration, each repository's configuration status reflects the result of the operation—for example, `attached`, `attaching`, or `failed`. For the full list of statuses and recommended actions, see [AUTOTITLE](/code-security/reference/security-at-scale/security-configuration-statuses).
38-
39-
## Next steps
40-
41-
To learn how to monitor security alerts in your organization, see [AUTOTITLE](/code-security/how-tos/view-and-interpret-data/analyze-organization-data/find-insecure-repositories).
42-
43-
{% data reusables.security-configurations.edit-configuration-next-step %}
44-
45-
{% data reusables.security-configurations.troubleshooting-next-step %}

content/code-security/how-tos/secure-your-secrets/customize-leak-detection/defining-custom-patterns-for-secret-scanning.md

Lines changed: 0 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -93,8 +93,3 @@ Before defining a custom pattern, you must ensure that you enable secret scannin
9393
{% indented_data_reference reusables.secret-scanning.push-protection-enterprise-note spaces=3 %}
9494

9595
After your pattern is created, {% data variables.product.prodname_secret_scanning %} scans for any secrets in repositories within your organizations with {% data variables.product.prodname_GH_secret_protection %} enabled, including their entire Git history on all branches. Organization owners and repository administrators will be alerted to any secrets found, and can review the alert in the repository where the secret is found. For more information on viewing {% data variables.secret-scanning.alerts %}, see [AUTOTITLE](/code-security/secret-scanning/managing-alerts-from-secret-scanning).
96-
97-
## Further reading
98-
99-
* [AUTOTITLE](/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/managing-custom-patterns)
100-
* [AUTOTITLE](/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/metrics-for-custom-patterns)

content/code-security/how-tos/secure-your-secrets/detect-secret-leaks/enabling-ai-powered-generic-secret-detection.md

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -36,11 +36,10 @@ You must configure {% data variables.secret-scanning.generic-secret-detection %}
3636

3737
1. Create a new {% data variables.product.prodname_custom_security_configuration %}, or edit an existing one. See [AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization/creating-a-custom-security-configuration#creating-a-custom-security-configuration).
3838
1. When creating the custom security configuration, ensure that "{% data variables.product.prodname_secret_protection %}" is set to **Enabled**, and that the dropdown menu for "Scan for generic secrets" is also set to **Enabled**.
39-
1. Apply the {% data variables.product.prodname_custom_security_configuration %} to one or more repositories. For more information, see [Applying a {% data variables.product.prodname_custom_security_configuration %}](/code-security/securing-your-organization/meeting-your-specific-security-needs-with-custom-security-configurations/applying-a-custom-security-configuration).
39+
1. Apply the {% data variables.product.prodname_custom_security_configuration %} to one or more repositories. For more information, see [AUTOTITLE](/code-security/securing-your-organization/meeting-your-specific-security-needs-with-custom-security-configurations/applying-a-custom-security-configuration).
4040

4141
For information on how to view alerts for generic secrets that have been detected using AI, see [AUTOTITLE](/code-security/secret-scanning/managing-alerts-from-secret-scanning/viewing-alerts).
4242

4343
## Further reading
4444

4545
* [AUTOTITLE](/code-security/secret-scanning/copilot-secret-scanning/responsible-ai-generic-secrets)
46-
* [AUTOTITLE](/code-security/secret-scanning/introduction/about-secret-scanning)

content/code-security/how-tos/secure-your-secrets/detect-secret-leaks/enabling-secret-scanning-for-non-provider-patterns.md

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,3 @@ For more information about non-provider patterns, see "{% ifversion fpt or ghec
3333
### Enabling detection of non-provider patterns for an organization
3434

3535
You can enable scanning for non-provider patterns at the organization level by applying a custom security configuration. For more information, see [AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization/creating-a-custom-security-configuration).
36-
37-
## Further reading
38-
39-
* [AUTOTITLE](/code-security/secret-scanning/managing-alerts-from-secret-scanning)

0 commit comments

Comments
 (0)