📖 Update GitHub documentation links (ossf#3318)

- Update Dependabot documentation links. - Remove language from GitHub documentation URLs. Signed-off-by: martincostello <[email protected]> Signed-off-by: Allen Shearin <[email protected]>
kgangerlm · Nov 13, 2023 · 893c642 · 893c642
1 parent 58f892a
commit 893c642
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/checks/evaluation/permissions/gitHubWorkflowPermissionsTopNoWrite.yml b/checks/evaluation/permissions/gitHubWorkflowPermissionsTopNoWrite.yml
@@ -17,7 +17,7 @@ short: Checks that GitHub workflows do not have default write permissions
 motivation: >
   If no permissions are declared, a workflow's GitHub token's permissions default to write for all scopes.
   This include write permissions to push to the repository, to read encrypted secrets, etc.
-  For more information, see https://docs.github.com/en/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token. 
+  For more information, see https://docs.github.com/actions/security-guides/automatic-token-authentication#permissions-for-the-github_token. 
 implementation: >
   The rule is implemented by checking whether the `permissions` keyword is defined at the top of the workflow,
   and that no write permissions are given.

diff --git a/probes/toolDependabotInstalled/def.yml b/probes/toolDependabotInstalled/def.yml
@@ -27,6 +27,6 @@ outcome:
 remediation:
   effort: Low
   text:
-    - Follow the instructions from https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates.
+    - Follow the instructions from https://docs.github.com/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates.
   markdown:
-    - Follow the instructions from [the official documentation](https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates).
+    - Follow the instructions from [the official documentation](https://docs.github.com/code-security/dependabot/dependabot-version-updates/about-dependabot-version-updates).