Repo sync

content/billing/concepts/product-billing/github-advanced-security.md

@@ -86,9 +86,21 @@ For information about features that consume {% data variables.product.prodname_c
 
 Push protection for {% data variables.secret-scanning.ai-detected-secrets %} consumes **{% data variables.product.prodname_secret_protection %} {% data variables.product.prodname_ai_credits_short %}**.
 
-{% data variables.product.prodname_ai_credit_singular %} usage applies to your organization. The number of {% data variables.product.prodname_ai_credits_short %} consumed will depend on the amount of file content scanned during a push. Charging by content scanned ensures pricing is fair and predictable for organizations.
+The number of {% data variables.product.prodname_ai_credits_short %} consumed will depend on the amount of file content scanned during a push. Charging by content scanned ensures pricing is fair and predictable for organizations.
 
-Usage is billed to the organization that owns the repository. You can view usage under **{% data variables.product.prodname_ai_credit_singular %} consumption** for the **{% data variables.product.prodname_secret_protection %} {% data variables.product.prodname_ai_credits_short %}** SKU in your AI usage insights.
+Usage is billed to the organization that owns the repository:
+
+* For repositories owned by an organization in an enterprise, usage counts toward the enterprise's pool of {% data variables.product.prodname_ai_credits_short %}, not the individual pool of the user who pushes.
+* For repositories owned by a standalone organization, usage counts toward the organization's pool of {% data variables.product.prodname_ai_credits_short %}.
+* For repositories owned by an enterprise-managed user in their user namespace, usage counts toward the repository owner.
+
+The exception is a repository in the personal namespace of a {% data variables.enterprise.prodname_managed_user %}:
+
+* Usage for that repository counts toward the repository owner's individual pool of {% data variables.product.prodname_ai_credits_short %}, regardless of who pushes.
+* Organization-owned repositories in an enterprise with {% data variables.enterprise.prodname_managed_users %} still use the enterprise's pool.
+* Otherwise, push protection for {% data variables.secret-scanning.ai-detected-secrets %} does not consume users' individual {% data variables.product.prodname_ai_credits_short %}.
+
+You can view usage under **{% data variables.product.prodname_ai_credit_singular %} consumption** for the **{% data variables.product.prodname_secret_protection %} {% data variables.product.prodname_ai_credits_short %}** SKU in your AI usage insights.
 
 Each push that is scanned can consume {% data variables.product.prodname_ai_credits_short %}, even when no potential secret is identified and the push is not blocked, as the model is still providing value by scanning the push.
 

content/code-security/how-tos/secure-your-secrets/prevent-future-leaks/enable-ai-push-protection.md

@@ -17,6 +17,8 @@ When you enable push protection for {% data variables.secret-scanning.ai-detecte
 
 Push protection for {% data variables.secret-scanning.ai-detected-secrets %} consumes {% data variables.product.prodname_ai_credits_short %} in addition to your {% data variables.product.prodname_GH_secret_protection %} or {% data variables.product.prodname_GHAS %} license. See [AUTOTITLE](/code-security/concepts/secret-security/push-protection#generic-secrets-found-with-ai) and [AUTOTITLE](/billing/concepts/product-billing/github-advanced-security#secret-protection-ai-credits).
 
+Usage is billed to the organization that owns the repository. For organization-owned repositories in an enterprise, usage counts toward the enterprise's pool of {% data variables.product.prodname_ai_credits_short %}. Only repositories in the personal namespace of a {% data variables.enterprise.prodname_managed_user %} consume the repository owner's individual pool, regardless of who pushes. Otherwise, users' individual pools are not charged.
+
 ## Prerequisites
 
 * Your repository must have {% data variables.product.prodname_GH_secret_protection %} or {% data variables.product.prodname_GHAS %} enabled.

content/rest/dependabot/index.md

@@ -14,6 +14,7 @@ children:
   - /alert-dismissal-requests
   - /alerts
   - /repository-access
+  - /runner-settings
   - /secrets
 redirect_from:
   - /rest/reference/dependabot

content/rest/dependabot/runner-settings.md

@@ -0,0 +1,14 @@
+---
+title: REST API endpoints for {% data variables.product.prodname_dependabot %} runner settings
+shortTitle: Runner settings
+intro: Use the REST API to get and set {% data variables.product.prodname_dependabot %} runner settings.
+versions: # DO NOT MANUALLY EDIT. CHANGES WILL BE OVERWRITTEN BY A 🤖
+  fpt: '*'
+  ghec: '*'
+autogenerated: rest
+allowTitleToDifferFromFilename: true
+category:
+  - Secure code and manage vulnerabilities
+---
+
+<!-- Content after this section is automatically generated -->

data/reusables/copilot/github-app-download-button.md

@@ -1 +1 @@
-<a href="https://github.com/features/ai/github-app?utm_source=app-download-docs&utm_medium=docs&utm_campaign=universe-2026" target="_blank" class="btn btn-primary mt-3 mr-3 no-underline js-os-download" data-os-download-mac="https://gh.io/copilot-app-mac" data-os-download-mac-intel="https://gh.io/copilot-app-mac-intel" data-os-download-windows="https://gh.io/copilot-app-win64" data-os-download-windows-arm="https://gh.io/copilot-app-win-arm" data-os-download-linux="https://gh.io/copilot-app-linux">{% octicon "desktop-download" aria-hidden="true" %} <span class="js-os-download-label">Download the {% data variables.copilot.github_copilot_app %}</span></a>
+<a href="https://github.com/features/ai/github-app?utm_source=app-download-docs&utm_medium=docs&utm_campaign=universe-2026" target="_blank" class="btn btn-primary mt-3 mr-3 no-underline js-os-download" data-os-download-mac="https://gh.io/copilot-app-mac" data-os-download-mac-intel="https://gh.io/copilot-app-mac-intel" data-os-download-windows="https://gh.io/copilot-app-win64" data-os-download-windows-arm="https://gh.io/copilot-app-win-arm" data-os-download-linux="https://gh.io/copilot-app-linux" data-os-download-linux-arm="https://github.com/github/app/releases/latest/download/GitHub-Copilot-linux-arm64.AppImage">{% octicon "desktop-download" aria-hidden="true" %} <span class="js-os-download-label">Download the {% data variables.copilot.github_copilot_app %}</span></a>

src/github-apps/data/fpt-2022-11-28/fine-grained-pat-permissions.json

@@ -4815,6 +4815,24 @@
         "additional-permissions": false,
         "access": "write"
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "read"
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "write"
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/fpt-2022-11-28/fine-grained-pat.json

@@ -2918,6 +2918,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/fpt-2022-11-28/server-to-server-permissions.json

@@ -6098,6 +6098,28 @@
         "server-to-server": true,
         "additional-permissions": false
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "read",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "write",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/fpt-2022-11-28/server-to-server-rest.json

@@ -2872,6 +2872,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/fpt-2022-11-28/user-to-server-rest.json

@@ -3106,6 +3106,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/fpt-2026-03-10/fine-grained-pat-permissions.json

@@ -4815,6 +4815,24 @@
         "additional-permissions": false,
         "access": "write"
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "read"
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "write"
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/fpt-2026-03-10/fine-grained-pat.json

@@ -2918,6 +2918,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/fpt-2026-03-10/server-to-server-permissions.json

@@ -6098,6 +6098,28 @@
         "server-to-server": true,
         "additional-permissions": false
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "read",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "write",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/fpt-2026-03-10/server-to-server-rest.json

@@ -2872,6 +2872,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/fpt-2026-03-10/user-to-server-rest.json

@@ -3106,6 +3106,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/ghec-2022-11-28/fine-grained-pat-permissions.json

@@ -5406,6 +5406,24 @@
         "additional-permissions": false,
         "access": "write"
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "read"
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "additional-permissions": false,
+        "access": "write"
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/ghec-2022-11-28/fine-grained-pat.json

@@ -2920,6 +2920,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/ghec-2022-11-28/server-to-server-permissions.json

@@ -8393,6 +8393,28 @@
         "server-to-server": true,
         "additional-permissions": false
       },
+      {
+        "category": "dependabot",
+        "slug": "get-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "get",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "read",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
+      {
+        "category": "dependabot",
+        "slug": "set-repository-dependabot-runner-settings",
+        "subcategory": "runner-settings",
+        "verb": "put",
+        "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings",
+        "access": "write",
+        "user-to-server": true,
+        "server-to-server": true,
+        "additional-permissions": false
+      },
       {
         "category": "deployments",
         "slug": "create-or-update-an-environment",

src/github-apps/data/ghec-2022-11-28/server-to-server-rest.json

@@ -3120,6 +3120,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",

src/github-apps/data/ghec-2022-11-28/user-to-server-rest.json

@@ -3330,6 +3330,18 @@
       "verb": "patch",
       "requestPath": "/repos/{owner}/{repo}/dependabot/alerts/{alert_number}"
     },
+    {
+      "slug": "get-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "get",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
+    {
+      "slug": "set-repository-dependabot-runner-settings",
+      "subcategory": "runner-settings",
+      "verb": "put",
+      "requestPath": "/repos/{owner}/{repo}/dependabot/runner-settings"
+    },
     {
       "slug": "list-repository-secrets",
       "subcategory": "secrets",