Delegated bypass for push protection lets you define who can push commits containing secrets and adds an approval process for other contributors. See 推送保护授权绕过.
To enable delegated bypass, create the teams or roles that will manage bypass requests. Alternatively, use fine-grained permissions for more granular control. See Using fine-grained permissions to control who can review and manage bypass requests.
Enabling delegated bypass for a repository
注意
如果组织或企业所有者在组织或企业级别配置委派绕过，则会禁用存储库级设置。
-
在 GitHub 上，导航到存储库的主页面。
-
在仓库名称下，单击 “Settings”****。 如果看不到“设置”选项卡，请选择“”下拉菜单，然后单击“设置”。
-
在边栏的“Security”部分中，单击“ Code security and analysis”****。
-
在“Code security and analysis”下，查找“GitHub Advanced Security”。
-
在“推送保护”右侧的“谁可以绕过推送保护 secret scanning”，选择下拉菜单，然后单击 “特定角色或团队”。
-
在“Bypass list”下，单击“Add role or team”****。
-
在对话框中，选择要添加到绕过列表的角色和团队，然后单击“添加选定项”。
注意
不能将机密团队添加到旁路列表。
Enabling delegated bypass for an organization
-
在 GitHub 上，导航到组织的主页面。
-
在组织名称下，单击 “Settings”****。 如果看不到“设置”选项卡，请选择“”下拉菜单，然后单击“设置”********。
-
在边栏的“安全性”部分中，选择 Code security and analysis 下拉菜单，然后单击“ 配置”。
-
创建新的自定义安全配置，或编辑现有的配置。 请参阅“删除自定义安全配置”。
-
定义自定义安全配置时，在“Secret scanning”下，确保 ”警报“和”推送保护“的下拉菜单设置为 ”已启用”。
-
在“Push protection”下的“Bypass privileges”右侧，选择下拉菜单，然后单击“Specific actors”。****
-
选择 “选择执行组件”下拉菜单，然后选择要添加到旁路列表的执行组件。
注意
- You can't add secret teams to the bypass list.
- In addition to assigning bypass privileges to roles and teams, you can also grant individual organization members the ability to review and manage bypass requests using fine-grained permissions. See Using fine-grained permissions to control who can review and manage bypass requests.
-
Click Save configuration.
-
Apply the security configuration to repositories in your organization. See 删除自定义安全配置.
Using fine-grained permissions to control who can review and manage bypass requests
You can grant specific individuals or teams in your organization the ability to review and manage bypass requests using fine-grained permissions.
- Ensure that delegated bypass is enabled for the organization. For more information, follow steps 1-3 in Enabling delegated bypass for your organization and ensure you have saved and applied the security configuration to your selected repositories.
- Create (or edit) a custom organization role. For information on creating and editing custom roles, see 管理自定义组织角色.
- When choosing which permissions to add to the custom role, select the "Review and manage secret scanning bypass requests" permission.
- Assign the custom role to individual members or teams in your organization. For more information on assigning custom roles, see 使用组织角色.