Skip to main content
Skip to content
GitHub
Docs
Search or ask Copilot
/
Menu
Collapse sidebar
Expand sidebar
Scroll breadcrumbs left
Home
Security and code quality
Getting started
Scroll breadcrumbs right
Security and code quality
Getting started
GitHub security features
Secure repository quickstart
Concepts
Secret security
Secret leakage risks
Secret scanning
Public monitoring
Push protection
Secret security with GitHub
Secret scanning alerts
Custom patterns
Validity checks
Delegated bypass
Bypass requests
Secret scanning for partners
Secret types
Push protection metrics
Command line push protection
Push protection and the GitHub MCP server
Push protection from the REST API
Code scanning
Code scanning
Code scanning alerts
Risk assessment
Autofix
AI-powered security detections
Setup types
Integration with code scanning
SARIF files
Alert tracking with issues
Merge protection
Multi-repository variant analysis
CodeQL
CodeQL code scanning
CodeQL for compiled languages
CodeQL query suites
Custom queries
CodeQL CLI
CodeQL for VS Code
CodeQL workspaces
Query reference files
Query packs
Tool status page
Pull request alert metrics
Repository properties
Supply chain security
Supply chain security
Open source license compliance
Dependency best practices
Dependency graph
Dependency graph data
Dependency review
Dependabot alerts
Malware alerts
Dependabot alert metrics
Dependabot security updates
Dependabot version updates
Dependabot pull requests
Multi-ecosystem updates
dependabot.yml file
Automatic registry access
Dependabot auto-triage rules
Dependabot on Actions
Dependabot job logs
Immutable releases
Linked artifacts
Code quality
GitHub Code Quality
Enablement at scale
Automatic code coverage
Vulnerability reporting and management
GitHub Advisory database
Innersource advisories
Repository security advisories
Global security advisories
Coordinated disclosure
Vulnerability exposure
Security at scale
Select pilot repositories
Organization security
Security overview
Security campaigns
Audit security alerts
Delegated alert dismissal
How-tos
Secure at scale
Configure enterprise security
Establish complete coverage
Create custom configuration
Apply custom configuration
Configure additional settings
Manage your coverage
Edit custom configuration
Delete custom configuration
Enable public monitoring
Configure specific tools
Allow Code Quality
Configure code scanning
Configure VNET
Configure organization security
Establish complete coverage
Create custom configuration
Apply custom configuration
Configure global settings
Manage your coverage
Edit custom configuration
Filter repositories
Detach security configuration
Delete custom configuration
Configure specific tools
Assess your secret risk
Assess your vulnerability risk
View risk report
Estimate price
Protect your secrets
Code scanning at scale
CodeQL advanced setup at scale
Enforce dependency review
Manage usage and access
Give access to private registries
Manage paid GHAS use
Secure your secrets
Detect secret leaks
Enable secret scanning
Enable for generic patterns
Enable generic secret detection
Customize leak detection
Define custom patterns
Generate regular expressions
Manage custom patterns
Exclude folders and files
Enable validity checks
Enable metadata checks
Prevent future leaks
Enable push protection
Manage user push protection
Block merges with secrets
Work with leak prevention
Push protection on the command line
Push protection in the GitHub UI
Manage bypass requests
Enable delegated bypass
Grant exemptions
Manage bypass requests
Review bypass requests
Find and fix code vulnerabilities
Configure code scanning
Configure code scanning
Configure advanced setup
Manage your configuration
Edit default setup
Use tool status page
Set merge protection
Configure larger runners
CodeQL for compiled languages
Scan from the command line
Set up CodeQL CLI
Write custom queries
Publish and use packs
Test custom queries
Test query help files
Download databases
Check out source code
Speed up PR scans
Specify command options
Create database bundles
Scan from VS Code
Install CodeQL for VS Code
Manage CodeQL databases
Run CodeQL queries
Explore data flow
Run queries at scale
Use the model editor
Create custom query
Manage CodeQL packs
Explore code structure
Test CodeQL queries
Customize settings
Set up CodeQL workspace
Manage CodeQL CLI
Access logs
Integrate with existing tools
Use with existing CI system
Upload SARIF file
Secure your supply chain
Secure your dependencies
Configure Dependabot alerts
Configure malware alerts
Configure security updates
Configure version updates
Manage innersource advisories
Auto-update actions
Configure multi-ecosystem updates
Enable dependency graph
Explore dependencies
Submit dependencies automatically
Use dependency submission API
Verify release integrity
Manage your dependency security
Configure license policies
Auto-triage Dependabot alerts
Prioritize with preset rules
Customize Dependabot PRs
Control dependency update
Configure dependency review action
Configure Dependabot notifications
Configure access to private registries
Remove access to public registries
Manage Dependabot PRs
Configure on GitHub-hosted runners
Configure on self-hosted runners
Re-run Dependabot jobs
List configured dependencies
Configure private registries
Establish provenance and integrity
Prevent release changes
Export dependencies as SBOM
Upload linked artifacts
View linked artifacts
Remove linked artifacts
Manage security alerts
Remediate at scale
Filter security alerts
Create security campaign
Track security campaign
Fix alerts in campaign
Review alert dismissal requests
Secret scanning alerts
Monitor alerts
View alerts
Resolve alerts
Enable delegated dismissal
Code scanning alerts
Assess alerts
Triage alerts in pull requests
Track alerts in issues
Resolve alerts
Enable delegated alert dismissal
Disable autofix
Dependabot alerts
View Dependabot alerts
Manage malware alerts
Manage auto-dismissed alerts
Enable delegated alert dismissal
Maintain quality code
Enable Code Quality
Disable Code Quality
Roll out at scale
Set quality thresholds
Set up code coverage
Set coverage thresholds
Fix findings on a PR
Unblock your PR
View coverage on PRs
Fix backlog findings
Fix findings in recent merges
Interpret results
Explore code quality
View and manage cost
Report and fix vulnerabilities
Configure vulnerability reporting
Add security policy
Configure for a repository
Report privately
Fix vulnerabilities
Manage vulnerability reports
Create repository advisory
Publish repository advisory
Add collaborators
Remove collaborators
Edit repository advisories
Delete repository advisories
Browse Advisory Database
Edit Advisory Database
Advanced Security with AI agents
Scan for secrets with MCP
View and interpret data
Analyze organization data
Assess security risk of code
Assess adoption of features
Find insecure repositories
Export data
View security insights
View PR alert metrics
View secret scanning metrics
View public monitoring alerts
View Dependabot metrics
Export risk report CSV
View code scanning logs
View Dependabot logs
View custom pattern metrics
Change "used by" data
Reference
Security at scale
Overview dashboard metrics
Overview dashboard filters
Configuration enforcement
Configuration statuses
Troubleshoot security configurations
A repository is using advanced setup for code scanning
Unexpected default setup
Configuration issue diagnosis
Not enough GHAS licenses
Secret security
Secret types
Supported patterns
Secret scanning scope
Custom patterns
Risk report CSV contents
Secret pattern data
Code scanning
Workflow configuration options
SARIF files
SARIF support
Troubleshoot SARIF uploads
GitHub token missing
SARIF file invalid
Results exceed limits
Results file too large
GitHub Code Security disabled
Default setup is enabled
CodeQL
Hardware resources for CodeQL
Build options for compiled languages
Built-in CodeQL queries
Built-in queries
Actions queries
C and C++ queries
C# queries
Go queries
Java and Kotlin queries
JavaScript and TypeScript queries
Python queries
Ruby queries
Rust queries
Swift queries
CodeQL CLI
SARIF output
CSV output
CodeQL query packs
Extractor options
Exit codes
CodeQL CLI manual
bqrs decode
bqrs diff
bqrs hash
bqrs info
bqrs interpret
database add-diagnostic
database analyze
database bundle
database cleanup
database create
database export-diagnostics
database finalize
database import
database index-files
database init
database interpret-results
database print-baseline
database run-queries
database trace-command
database unbundle
database upgrade
dataset check
dataset cleanup
dataset import
dataset measure
dataset upgrade
diagnostic add
diagnostic export
execute cli-server
execute language-server
execute queries
execute query-server
execute query-server2
execute upgrades
generate extensible-predicate-metadata
generate log-summary
generate overlay-changes
generate query-help
github merge-results
github upload-results
pack add
pack bundle
pack ci
pack create
pack download
pack init
pack install
pack ls
pack packlist
pack publish
pack resolve-dependencies
pack upgrade
query compile
query decompile
query format
query run
resolve database
resolve extensions
resolve extensions-by-pack
resolve extractor
resolve files
resolve languages
resolve library-path
resolve library-paths
resolve metadata
resolve ml-models
resolve packs
resolve qlpacks
resolve qlref
resolve queries
resolve ram
resolve tests
resolve upgrades
test accept
test extract
test run
version
CodeQL for VS Code
Telemetry
Controller repository warning
Troubleshoot analysis errors
Alerts in generated code
Automatic build failed
C# compiler failing
Private repository enablement
Analysis takes too long
Fewer lines scanned than expected
Default setup timeout
Code Security must be enabled
Out of disk or memory
Resource not accessible
Not recognized
No source code seen during build
Server error
Extraction errors
Logs not detailed enough
Results different than expected
Some languages not analyzed
Two CodeQL workflows
Unclear what triggered a workflow
Unnecessary step found
Kotlin detected in no build
Code scanning logs
Supply chain security
Automatic dependency submission
Dependabot options
Dependabot alerts filters
Dependency scope
Dependabot PR comment commands
Dependabot ecosystems
Dependabot security updates
Dependency graph ecosystems
Dependabot on Actions
Criteria for preset rules
Troubleshoot Dependabot
Dependency graph errors
Dependabot stopped working
Dependabot on Actions
Vulnerability detection
Dependabot errors
Java package metadata
Code quality
Metrics and scores
Code coverage
CodeQL analysis
CodeQL queries
C# queries
Go queries
Java queries
JavaScript queries
Python queries
Ruby queries
Permissions for security features
Repository security advisory
Security overview
Incident response
Investigation tools
Investigation areas
Tutorials
Secret protection
Code quality
Trial GitHub Advanced Security
Plan GHAS trial
Trial Advanced Security
Enable security features in trial
Trial Secret Protection
Trial Code Security
Adopt GHAS at scale
Introduction
1. Align on strategy
2. Preparation
3. Pilot programs
4. Create internal documentation
5. Rollout code scanning
6. Rollout secret scanning
Secure your organization
Prevent data leaks
Fix alerts at scale
Prioritize alerts in production code
Interpret secret risk assessment
Interpret code security risk assessment
Organize leak remediation
Protect against threats
Prepare for a security incident
Respond to a security incident
Remediate leaked secrets
Calculate cost savings
Assess GHSP impact
Evaluate alerts
Remediate a leaked secret
Partner program
Customize code scanning
Evaluate default setup
Prepare code for analysis
Analyze code
Upload results
Run in a container
Customize analysis
Create query suites
Create and work with CodeQL packs
Secure your dependencies
Dependabot quickstart
Automate Dependabot with Actions
Optimize PR creation
Configure ARC
Customize Dependabot PRs
Customize dependency review action
Implement supply chain best practices
Overview
Secure accounts
Secure code
Secure builds
Manage security alerts
Prioritize Dependabot alerts using metrics
Participate in campaigns
Improve code quality
Catch issues before merge
Raise your quality score
Fix reported vulnerabilities
Collaborate in a fork
Write security advisories
Responsible use
Security and quality AI features
Getting started with secure coding
Introduction to secure coding with GitHub.
GitHub security features
, 1 of 2
Quickstart for securing your repository
, 2 of 2