Advertencia
Push protection exemptions are designed for trusted automation that needs to push many commits with minimal friction. Exemptions may lead to leaked secrets, and should be granted with caution.
Granting exemptions for your repository
Nota:
If an organization or enterprise owner configures delegated bypass at the organization or enterprise level, the repository-level settings are disabled.
-
En GitHub, navegue hasta la página principal del repositorio.
-
Debajo del nombre del repositorio, haz clic en Settings. Si no puedes ver la pestaña "Configuración", selecciona el menú desplegable y, a continuación, haz clic en Configuración.
-
En la sección "Security" de la barra lateral, haz clic en Advanced Security.
-
Under "Secret Protection," ensure that push protection is enabled for the repository.
-
Under "Push protection," to the right of "Who can bypass push protection for secret scanning," select the dropdown menu, then click Specific roles or teams.
-
Under "Bypass list," click Add role or team.
-
In the dialog box, select the roles and teams that you want to add to the bypass list, then click Add selected.
Nota:
You can't add secret teams to the bypass list.
-
To fully exempt the actors from push protection, to the right of the actors' details, select , then click Exempt.
Granting exemptions for your organization
-
En GitHub, navega a la página principal de tu organización.
-
Debajo del nombre de la organización, haz clic en Settings. Si no puedes ver la pestaña "Configuración", selecciona el menú desplegable y, a continuación, haz clic en Configuración.
-
En la sección "Seguridad" de la barra lateral, seleccione el menú desplegable Advanced Security, y luego haga clic en Repositorios.
-
Cree una nueva configuración de seguridad personalizada o edite una existente. Consulta Creación de una configuración de seguridad personalizada.
-
When defining the custom security configuration, under "Secret scanning," ensure that "Push protection" is set to Enabled.
-
Under "Push protection," to the right of "Bypass privileges," select the dropdown menu, then click Specific actors.
-
Select the Select actors dropdown menu, then choose the actors you want to add to the bypass list.
Nota:
- You can't add secret teams to the bypass list.
-
To fully exempt the actors from push protection, to the right of the actors' details, select , then click Exempt.
-
Click Save configuration.
-
Apply the security configuration to repositories in your organization. See Aplicación de una configuración de seguridad personalizada.
Granting exemptions for your enterprise
-
Vaya a su empresa. Por ejemplo, desde la página Empresas en GitHub.com.
-
En la parte superior de la página, haz clic en Settings.
-
En la barra lateral izquierda, haz clic en Advanced Security.
-
En la sección "Seguridad" de la barra lateral, seleccione el menú desplegable Advanced Security, y luego haga clic en Repositorios.
-
Cree una nueva configuración de seguridad personalizada o edite una existente. Consulta Creación de una configuración de seguridad personalizada para su empresa.
-
Under Secret scanning, ensure Push protection is enabled.
-
Under "Push protection," to the right of "Bypass privileges," select the dropdown menu, then click Specific actors.
Nota:
You can't add secret teams to the bypass list.
-
Select the Select actors dropdown menu, then choose the actors you want to add to the bypass list.
-
To fully exempt the actors from push protection, to the right of the actors' details, select , then click Exempt.
-
Click Save configuration.
-
Apply the security configuration to organizations and repositories in your enterprise. See Aplicación de una configuración de seguridad personalizada a la empresa.