Commit 8b34be77 authored by Russell Dickenson's avatar Russell Dickenson

Clarify docs on scheduled security scan

parent 5a614293
......@@ -166,22 +166,17 @@ To add projects to the Security Center:
After you add projects, the security dashboard and vulnerability report display the vulnerabilities
found in those projects' default branches.
## Keeping the dashboards up to date
## Keep dashboards up to date
The Security Dashboard displays information from the results of the most recent
security scan on the [default branch](../../project/repository/branches/default.md),
which means that security scans are performed every time the branch is updated.
If the default branch is updated infrequently, scans are run infrequently and the
information on the Security Dashboard can become outdated as new vulnerabilities
are discovered.
The Security Dashboard displays results of the most recent security scan on the
[default branch](../../project/repository/branches/default.md). By default, security scans are run
only when the default branch is updated. Information on the Security Dashboard may not reflect
newly-discovered vulnerabilities.
To ensure the information on the Security Dashboard is regularly updated,
[configure a scheduled pipeline](../../../ci/pipelines/schedules.md) to run a
daily security scan. This updates the information displayed on the Security
Dashboard regardless of how often the default branch is updated.
That way, reports are created even if no code change happens.
[configure a scheduled pipeline](../../../ci/pipelines/schedules.md) to run a daily security scan.
This updates the information displayed on the Security Dashboard regardless of how often the default
branch is updated.
WARNING:
Running Dependency Scanning from a scheduled pipeline might result in false negatives if your
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment