diff --git a/content/code-security/tutorials/customize-code-scanning/index.md b/content/code-security/tutorials/customize-code-scanning/index.md index 59a94bbb8609..088e51c8a266 100644 --- a/content/code-security/tutorials/customize-code-scanning/index.md +++ b/content/code-security/tutorials/customize-code-scanning/index.md @@ -10,6 +10,8 @@ topics: - Code scanning - CodeQL contentType: tutorials +redirect_from: + - /code-security/how-tos/scan-code-for-vulnerabilities/customize-code-scanning children: - /evaluating-default-setup-for-code-scanning - /preparing-your-code-for-codeql-analysis diff --git a/content/copilot/concepts/agents/coding-agent/about-coding-agent.md b/content/copilot/concepts/agents/coding-agent/about-coding-agent.md index 19269104d15c..b3f0a3d9b17f 100644 --- a/content/copilot/concepts/agents/coding-agent/about-coding-agent.md +++ b/content/copilot/concepts/agents/coding-agent/about-coding-agent.md @@ -174,8 +174,8 @@ Users can include hidden messages in issues assigned to {% data variables.copilo ### Limitations in {% data variables.copilot.copilot_coding_agent %}'s software development workflow -* **{% data variables.product.prodname_copilot_short %} can only make changes in the same repository where it is creating its pull request**. When {% data variables.product.prodname_copilot_short %} is assigned an issue, it can only make changes in the repository where that issue is located. In addition, {% data variables.product.prodname_copilot_short %} cannot make changes across multiple repositories in one run. -* **{% data variables.product.prodname_copilot_short %} can only access context in the same repository as the assigned issue**. By default, an integration with the {% data variables.product.prodname_copilot_short %} MCP server provides {% data variables.product.prodname_copilot_short %} access to one repository at a time. You can, however, configure broader access. See [AUTOTITLE](/copilot/using-github-copilot/coding-agent/extending-copilot-coding-agent-with-mcp). +* **{% data variables.product.prodname_copilot_short %} can only make changes in the repository specified when you start a task**. {% data variables.product.prodname_copilot_short %} cannot make changes across multiple repositories in one run. +* **By default, {% data variables.product.prodname_copilot_short %} can only access context in the repository specified when you start a task**. The {% data variables.product.prodname_copilot_short %} MCP server is configured by default to allow {% data variables.product.prodname_copilot_short %} to access context (for example issues and historic pull requests) in the repository where it is working. You can, however, configure broader access. See [AUTOTITLE](/copilot/using-github-copilot/coding-agent/extending-copilot-coding-agent-with-mcp). * **{% data variables.product.prodname_copilot_short %} can only open one pull request at a time**. {% data variables.product.prodname_copilot_short %} will open exactly one pull request to address each task it is assigned. ### Limitations in {% data variables.copilot.copilot_coding_agent %}'s compatibility with other features diff --git a/content/copilot/how-tos/use-copilot-agents/coding-agent/create-a-pr.md b/content/copilot/how-tos/use-copilot-agents/coding-agent/create-a-pr.md index cb768a940a0b..7773049cb331 100644 --- a/content/copilot/how-tos/use-copilot-agents/coding-agent/create-a-pr.md +++ b/content/copilot/how-tos/use-copilot-agents/coding-agent/create-a-pr.md @@ -42,7 +42,7 @@ You can ask {% data variables.product.prodname_copilot_short %} to create a new * The [{% data variables.product.prodname_cli %}](#asking-copilot-to-create-a-pull-request-from-the-github-cli) * On [{% data variables.product.prodname_mobile %}](#asking-copilot-to-create-a-pull-request-from-github-mobile) * Your preferred IDE or agentic coding tool with [Model Context Protocol (MCP)](#asking-copilot-to-create-a-pull-request-from-the-github-mcp-server) support -* The [Raycast](#asking-copilot-to-create-a-pull-request-from-raycast) launcher on macOS +* The [Raycast](#asking-copilot-to-create-a-pull-request-from-raycast) launcher * The ["New repository" form](#asking-copilot-to-create-a-pull-request-from-the-new-repository-page) on {% data variables.product.github %} {% data variables.product.prodname_copilot_short %} will start working on the task, raise a pull request, then request a review from you when it's finished working. For more information, see [AUTOTITLE](/copilot/using-github-copilot/coding-agent/about-assigning-tasks-to-copilot). @@ -56,6 +56,7 @@ You can assign an issue to {% data variables.product.prodname_copilot_short %}: * On {% data variables.product.prodname_dotcom_the_website %} (see the [next section](#assigning-an-issue-to-copilot-on-githubcom)) * On [{% data variables.product.prodname_mobile %}](#assigning-an-issue-to-copilot-on-github-mobile) * Via the {% data variables.product.github %} API (see [later in this article](#assigning-an-issue-to-copilot-via-the-github-api)) +* Using the [Raycast launcher](#assigning-an-issue-to-copilot-from-raycast) * Using {% data variables.product.prodname_cli %} (see [`gh issue edit`](https://cli.github.com/manual/gh_issue_edit)) ### Assigning an issue to {% data variables.product.prodname_copilot_short %} on {% data variables.product.prodname_dotcom_the_website %} @@ -96,7 +97,7 @@ You can assign an issue to {% data variables.product.prodname_copilot_short %}: > [!TIP] > When you assign an issue to {% data variables.product.prodname_copilot_short %}, it gets sent the issue title, description, any comments that currently exist, and any additional instructions you provide. After assigning the issue, {% data variables.product.prodname_copilot_short %} will not be aware of, and therefore won't react to, any further comments that are added to the issue. If you have more information, or changes to the original requirement, add this as a comment in the pull request that {% data variables.product.prodname_copilot_short %} raises. -{% data reusables.copilot.optional-select-custom-agent %} +{% data reusables.copilot.optional-select-custom-agent-dotcom %} {% data reusables.copilot.optional-select-copilot-coding-agent-model %} You can also assign issues to {% data variables.product.prodname_copilot_short %} from other places on {% data variables.product.prodname_dotcom_the_website %}: @@ -418,6 +419,26 @@ gh api \ }' ``` +### Assigning an issue to {% data variables.product.prodname_copilot_short %} from Raycast + +{% data reusables.copilot.coding-agent.raycast-intro %} + +{% data reusables.copilot.coding-agent.raycast-setup %} +1. Open Raycast, search for "{% data variables.product.prodname_copilot_short %}," find the **Assign Issues to {% data variables.product.prodname_copilot_short %}** command, then press Enter. +1. Click **Sign in with {% data variables.product.github %}**, then complete the authentication flow. Raycast will re-open. +1. Select the repository you want {% data variables.product.prodname_copilot_short %} to work in. +1. Select the issue you want to assign to {% data variables.product.prodname_copilot_short %}. +1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. {% data variables.product.prodname_copilot_short %} will create a new branch based on this branch, then push the changes to a pull request targeting that branch. +{% data reusables.copilot.optional-select-custom-agent-generic %} +{% data reusables.copilot.optional-select-copilot-coding-agent-model %} +1. Optionally, provide additional instructions. These will be passed to {% data variables.product.prodname_copilot_short %} alongside your issue contents. +1. Press Command+Enter to assign the issue. + + {% data variables.product.prodname_copilot_short %} will start a new session. {% data variables.product.prodname_copilot_short %} will work on the task and push changes to its pull request, then add you as a reviewer when it has finished, triggering a notification. + + +{% data reusables.copilot.coding-agent.raycast-oauth-access-restrictions %} + ## Asking {% data variables.product.prodname_copilot_short %} to create a pull request from the agents tab or panel You can ask {% data variables.product.prodname_copilot_short %} to open a pull request from either the agents tab or the agents panel. The only difference is the entry point - once you see the "New agent task" form, the steps are the same. @@ -437,7 +458,7 @@ You can ask {% data variables.product.prodname_copilot_short %} to open a pull r For example, `Implement a user friendly message for common errors.` 1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. {% data variables.product.prodname_copilot_short %} will create a new branch based on this branch, then push the changes to a pull request. -{% data reusables.copilot.optional-select-custom-agent %} +{% data reusables.copilot.optional-select-custom-agent-dotcom %} 1. Click **{% octicon "paper-airplane" aria-label="Send now" %} Send now** or press Return. You will be taken to the agents tab, and {% data variables.product.prodname_copilot_short %} will start a new session, which will appear in the "Recent sessions" list below the prompt box. {% data variables.product.prodname_copilot_short %} will work on the task and push changes to its pull request, then add you as a reviewer when it has finished, triggering a notification. @@ -521,7 +542,7 @@ You can ask {% data variables.product.prodname_copilot_short %} to open a pull r For example, `/task Put backticks around file names and variables in output.` 1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. {% data variables.product.prodname_copilot_short %} will create a new branch based on this branch, then push the changes to a pull request targeting that branch. -{% data reusables.copilot.optional-select-custom-agent %} +{% data reusables.copilot.optional-select-custom-agent-dotcom %} 1. Click **{% octicon "paper-airplane" aria-label="Start task" %}** or press Enter. {% data variables.product.prodname_copilot_short %} will start a new session, which will appear in the list below the prompt box. {% data variables.product.prodname_copilot_short %} will work on the task and push changes to its pull request, then add you as a reviewer when it has finished, triggering a notification. @@ -592,14 +613,14 @@ To see all of the available options, run `gh agent-task create --help`. For example, `Implement a user friendly message for common errors.` 1. Select the repository you want {% data variables.product.prodname_copilot_short %} to work in. 1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. {% data variables.product.prodname_copilot_short %} will create a new branch based on this branch, then push the changes to a pull request targeting that branch. +{% data reusables.copilot.optional-select-custom-agent-generic %} {% data reusables.copilot.optional-select-copilot-coding-agent-model %} 1. Press Command+Enter to start the task. {% data variables.product.prodname_copilot_short %} will start a new session. {% data variables.product.prodname_copilot_short %} will work on the task and push changes to its pull request, then add you as a reviewer when it has finished, triggering a notification. -> [!NOTE] -> -> If you are unable to select a specific repository when starting a task, the organization that owns the repository may have enabled {% data variables.product.prodname_oauth_app %} access restrictions. To learn how to request approval for the "{% data variables.product.prodname_copilot %} for Raycast" {% data variables.product.prodname_oauth_app %}, see [AUTOTITLE](/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-your-membership-in-organizations/requesting-organization-approval-for-oauth-apps). + +{% data reusables.copilot.coding-agent.raycast-oauth-access-restrictions %} ## Asking {% data variables.product.prodname_copilot_short %} to create a pull request from the "New repository" page diff --git a/content/copilot/how-tos/use-copilot-agents/manage-agents.md b/content/copilot/how-tos/use-copilot-agents/manage-agents.md index 0ae7c0ddbe05..d51c72ba2655 100644 --- a/content/copilot/how-tos/use-copilot-agents/manage-agents.md +++ b/content/copilot/how-tos/use-copilot-agents/manage-agents.md @@ -24,7 +24,7 @@ category: * Open the Agents panel by clicking the {% octicon "agent" aria-label="The Agents icon" %} at the top of any page on {% data variables.product.github %} 1. Using the dropdown menu, select the repository you want the coding agent to work in. 1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. -{% data reusables.copilot.optional-select-custom-agent %} +{% data reusables.copilot.optional-select-custom-agent-dotcom %} 1. Optionally, select the **CURRENT-MODEL** {% octicon "chevron-down" aria-hidden="true" aria-label="chevron-down" %} dropdown menu, then click the AI model of your choice. 1. Type a prompt describing your request. For example: diff --git a/data/reusables/actions/supported-github-runners.md b/data/reusables/actions/supported-github-runners.md index 974a815e79ef..7f4808a693e1 100644 --- a/data/reusables/actions/supported-github-runners.md +++ b/data/reusables/actions/supported-github-runners.md @@ -36,7 +36,7 @@ For public repositories, jobs using the workflow labels shown in the table below windows-latest, windows-2025, - windows-2025-vs2026 ({% data variables.release-phases.public_preview %}), + windows-2025-vs2026 ({% data variables.release-phases.public_preview %}), windows-2022 diff --git a/data/reusables/copilot/coding-agent/new-agent-task-form-instructions.md b/data/reusables/copilot/coding-agent/new-agent-task-form-instructions.md index 2e38bcc185aa..67bf8ca896b0 100644 --- a/data/reusables/copilot/coding-agent/new-agent-task-form-instructions.md +++ b/data/reusables/copilot/coding-agent/new-agent-task-form-instructions.md @@ -4,7 +4,7 @@ For example, `Implement a user friendly message for common errors.` 1. Optionally, select a base branch for {% data variables.product.prodname_copilot_short %}'s pull request. {% data variables.product.prodname_copilot_short %} will create a new branch based on this branch, then push the changes to a pull request targeting that branch. -1. {% data reusables.copilot.optional-select-custom-agent %} +1. {% data reusables.copilot.optional-select-custom-agent-dotcom %} {% data reusables.copilot.optional-select-copilot-coding-agent-model %} 1. Click **{% octicon "paper-airplane" aria-label="Start task" %}** or press Enter. diff --git a/data/reusables/copilot/coding-agent/raycast-intro.md b/data/reusables/copilot/coding-agent/raycast-intro.md index e2baec59bcc2..f40d12899f12 100644 --- a/data/reusables/copilot/coding-agent/raycast-intro.md +++ b/data/reusables/copilot/coding-agent/raycast-intro.md @@ -1 +1 @@ -[Raycast](https://www.raycast.com/) is an extensible launcher for macOS. With the {% data variables.product.prodname_copilot %} extension for Raycast, you can start and track {% data variables.copilot.copilot_coding_agent %} tasks wherever you are on your computer. +[Raycast](https://www.raycast.com/) is an extensible launcher for Windows and macOS. With the {% data variables.product.prodname_copilot %} extension for Raycast, you can start and track {% data variables.copilot.copilot_coding_agent %} tasks wherever you are on your computer. diff --git a/data/reusables/copilot/coding-agent/raycast-oauth-access-restrictions.md b/data/reusables/copilot/coding-agent/raycast-oauth-access-restrictions.md new file mode 100644 index 000000000000..ddbb1fcb6073 --- /dev/null +++ b/data/reusables/copilot/coding-agent/raycast-oauth-access-restrictions.md @@ -0,0 +1,3 @@ +> [!NOTE] +> +> If you are unable to select a specific repository when starting a task, the organization that owns the repository may have enabled {% data variables.product.prodname_oauth_app %} access restrictions. To learn how to request approval for the "{% data variables.product.prodname_copilot %} for Raycast" {% data variables.product.prodname_oauth_app %}, see [AUTOTITLE](/account-and-profile/how-tos/setting-up-and-managing-your-personal-account-on-github/managing-your-membership-in-organizations/requesting-organization-approval-for-oauth-apps). \ No newline at end of file diff --git a/data/reusables/copilot/optional-select-custom-agent.md b/data/reusables/copilot/optional-select-custom-agent-dotcom.md similarity index 100% rename from data/reusables/copilot/optional-select-custom-agent.md rename to data/reusables/copilot/optional-select-custom-agent-dotcom.md diff --git a/data/reusables/copilot/optional-select-custom-agent-generic.md b/data/reusables/copilot/optional-select-custom-agent-generic.md new file mode 100644 index 000000000000..01cf636de879 --- /dev/null +++ b/data/reusables/copilot/optional-select-custom-agent-generic.md @@ -0,0 +1 @@ +1. Optionally, select a {% data variables.copilot.copilot_custom_agent_short %} with specialized behavior and tools from the dropdown menu. For more information, see [AUTOTITLE](/copilot/how-tos/use-copilot-agents/coding-agent/create-custom-agents). \ No newline at end of file diff --git a/data/reusables/rest-api/secondary-rate-limit-rest-graphql.md b/data/reusables/rest-api/secondary-rate-limit-rest-graphql.md index 5ce6995cb118..81bf3e084e75 100644 --- a/data/reusables/rest-api/secondary-rate-limit-rest-graphql.md +++ b/data/reusables/rest-api/secondary-rate-limit-rest-graphql.md @@ -7,6 +7,7 @@ You may encounter a secondary rate limit if you: * _Make too many requests per minute._ No more than 90 seconds of CPU time per 60 seconds of real time is allowed. No more than 60 seconds of this CPU time may be for the GraphQL API. You can roughly estimate the CPU time by measuring the total response time for your API requests. * _Make too many requests that consume excessive compute resources in a short period of time._ * _Create too much content on {% data variables.product.company_short %} in a short amount of time._ In general, no more than 80 content-generating requests per minute and no more than 500 content-generating requests per hour are allowed. Some endpoints have lower content creation limits. Content creation limits include actions taken on the {% data variables.product.company_short %} web interface as well as via the REST API and GraphQL API. +* _Make too many OAuth access token requests in a short period of time._ No more than 2,000 OAuth access token requests per hour are allowed for {% data variables.product.prodname_github_apps %} and {% data variables.product.prodname_oauth_apps %}. These secondary rate limits are subject to change without notice. You may also encounter a secondary rate limit for undisclosed reasons. diff --git a/data/variables/secret-scanning.yml b/data/variables/secret-scanning.yml index 49175ea71921..4c558333c338 100644 --- a/data/variables/secret-scanning.yml +++ b/data/variables/secret-scanning.yml @@ -17,9 +17,9 @@ roi-calculator: 'ROI calculator' pricing-calculator: 'pricing calculator' # Secret risk assessment call to action links. If changing the links below, also update the hard-coded link in /code-security/index.md -secret-risk-assessment-cta-link: '/code-security/securing-your-organization/understanding-your-organizations-exposure-to-leaked-secrets/assess-your-secret-risk' +secret-risk-assessment-cta-link: '/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/assess-your-secret-risk' secret-risk-assessment-cta-text: 'Find out how to run a free secret risk assessment' -secret-risk-assessment-cta-product: '[{% data variables.secret-scanning.secret-risk-assessment-cta-text %}](/code-security/securing-your-organization/understanding-your-organizations-exposure-to-leaked-secrets/viewing-the-secret-risk-assessment-report-for-your-organization#generating-an-initial-secret-risk-assessment)' +secret-risk-assessment-cta-product: '[{% data variables.secret-scanning.secret-risk-assessment-cta-text %}](/code-security/how-tos/secure-at-scale/configure-organization-security/configure-specific-tools/assess-your-secret-risk#generating-an-initial-secret-risk-assessment)' # Combined to provide a secret to demonstrate push protection. Dummy secret, no access. learner-example-secret-a: 'secret_scanning_ab85fc6f8d76' diff --git a/package-lock.json b/package-lock.json index bff3c9a13c19..d96ba32a256a 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13565,9 +13565,9 @@ } }, "node_modules/qs": { - "version": "6.14.1", - "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.1.tgz", - "integrity": "sha512-4EK3+xJl8Ts67nLYNwqw/dsFVnCf+qR7RgXSK9jEEm9unao3njwMDdmsdvoKBKHzxd7tCYz5e5M+SnMjdtXGQQ==", + "version": "6.14.2", + "resolved": "https://registry.npmjs.org/qs/-/qs-6.14.2.tgz", + "integrity": "sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==", "license": "BSD-3-Clause", "dependencies": { "side-channel": "^1.1.0"