You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
_GitHub Copilot generated this pull request._ #7185
related : https://github.com/github/dependabot-updates/issues/14571
The has:vulnerable-calls Dependabot alerts filter is no longer supported, but the overview dashboard filter reference still documents it, causing user confusion. Only has:patch remains valid.
Changes
content/code-security/reference/security-at-scale/overview-dashboard-filters.md — dropped vulnerable-calls from the has qualifier row, leaving only patch.
Removed the trailing "For more information" link, which pointed specifically at the vulnerable-calls detection section and no longer has a referent after the edit.
-|`has`|Display {% data variables.product.prodname_dependabot_alerts %} for vulnerabilities where either a secure version is already available (`patch`) or where at least one call from the repository to a vulnerable function is detected (`vulnerable-calls`). For more information, see [AUTOTITLE](/code-security/how-tos/manage-security-alerts/manage-dependabot-alerts/view-dependabot-alerts).|+|`has`|Display {% data variables.product.prodname_dependabot_alerts %} for vulnerabilities where a secure version is already available (`patch`).|
Scope
Swept content/ and data/ for vulnerable-calls, vulnerable_calls, has:vulnerable, and "vulnerable function is detected" — this was the only current occurrence. Archived Enterprise Server output and translated locale files were left untouched, as were the docs describing the underlying detection-of-calls-to-vulnerable-functions feature itself; only the removed filter value is affected.
Activity