AWS securityagent documentation change
Summary
Updated documentation to clarify code review applies specifically to GitHub pull requests. Changed section titles and references to 'Enable pull request code review for GitHub repositories'.
Security assessment
Changes focus on clarifying workflow details and documentation links without introducing new security content or addressing vulnerabilities. No security fixes or vulnerability disclosures are mentioned.
Diff
diff --git a/securityagent/latest/userguide/review-code-findings-github.md b/securityagent/latest/userguide/review-code-findings-github.md index 860127339..ee2efb38f 100644 --- a//securityagent/latest/userguide/review-code-findings-github.md +++ b//securityagent/latest/userguide/review-code-findings-github.md @@ -9 +9 @@ How code review works in GitHubUnderstanding code review resultsResponding to se -# Review code security findings in GitHub +# Review code security findings in GitHub pull requests @@ -11 +11 @@ How code review works in GitHubUnderstanding code review resultsResponding to se -After enabling code review for your repositories, AWS Security Agent automatically analyzes pull requests and posts security findings directly in GitHub. This allows developers to address security issues within their normal workflow without leaving the pull request. +After enabling code review for pull requests for your repositories, AWS Security Agent automatically analyzes pull requests and posts security findings directly in GitHub. This allows developers to address security issues within their normal workflow without leaving the pull request. @@ -51 +51 @@ If AWS Security Agent identifies security issues in your code changes, it posts -The types of security issues analyzed depend on your code review settings. If you configured security requirement validation, findings will reference your organization’s custom security requirements. If you configured security vulnerability findings, findings will identify common security vulnerabilities. For more information about code review settings, see [Enable code review capability for a GitHub repository](./enable-code-review.html). +The types of security issues analyzed depend on your code review settings. If you configured security requirement validation, findings will reference your organization’s custom security requirements. If you configured security vulnerability findings, findings will identify common security vulnerabilities. For more information about code review settings, see [Enable pull request code review for GitHub repositories](./enable-code-review.html). @@ -154 +154 @@ After reviewing code security findings: - * Adjust code review settings if needed (see [Enable code review capability for a GitHub repository](./enable-code-review.html)) + * Adjust code review settings if needed (see [Enable pull request code review for GitHub repositories](./enable-code-review.html)) @@ -171 +171 @@ Remediate a penetration test finding -Security +Create a code review