Skip to main content
GitHub Docs
All products
Code security
Getting started
GitHub security features
Secure your repository
Secure your organization
Add a security policy
Secret scanning
About secret scanning
Configure secret scans
Define custom patterns
Manage secret alerts
Secret scanning patterns
Push protection
Code scanning
Scan code automatically
About code scanning
About code scanning alerts
Triage alerts in pull requests
Set up code scanning
Manage alerts
Track alerts in issues
Configure code scanning
Code scanning with CodeQL
Hardware resources for CodeQL
Configure compiled languages
Troubleshoot CodeQL workflow
Code scanning in a container
View code scanning logs
Integrate with code scanning
About integration
Upload a SARIF file
SARIF support
Use CodeQL in CI system
Code scanning in your CI
Install CodeQL CLI
Configure CodeQL CLI
Run CodeQL runner
Migrating from the CodeQL runner
Repository security advisories
Coordinated disclosure
Repository security advisories
Permission levels
Create repository advisories
Add collaborators
Remove collaborators
Temporary private forks
Publish repository advisories
Edit repository advisories
Withdraw repository advisories
Supply chain security
Understand your supply chain
Supply chain security
Dependency graph
Configure dependency graph
Dependency review
Configure dependency review
Explore dependencies
Troubleshoot dependency graph
End-to-end supply chain
Overview
Securing accounts
Securing code
Securing builds
Dependabot
Dependabot alerts
Browse Advisory Database
Edit Advisory Database
Dependabot alerts
Configure Dependabot alerts
View Dependabot alerts
Configure notifications
Dependabot security updates
Dependabot security updates
Configure security updates
Dependabot version updates
Dependabot version updates
Configure version updates
List configured dependencies
Customize updates
Configure dependabot.yml
Work with Dependabot
Manage Dependabot PRs
Use Dependabot with Actions
Auto-update actions
Manage encrypted secrets
Troubleshoot vulnerability detection
Troubleshoot errors
Security overview
About security overview
View the security overview
Filtering alerts
Guides for code security
Code security
/
Getting started
Enterprise Cloud
Free, Pro, & Team
Enterprise Cloud
Enterprise Server 3.5
Enterprise Server 3.4
Enterprise Server 3.3
Enterprise Server 3.2
Enterprise Server 3.1
GitHub AE
All Enterprise Server releases
About versions
English
English
简体ä¸æ–‡
(
Simplified Chinese
)
日本語
(
Japanese
)
Español
(
Spanish
)
Português do Brasil
(
Portuguese
)
Sign up
Search GitHub Docs
Â
GitHub Docs
Code security
/
Getting started
Code security
Get started
Account and profile
Authentication
Repositories
GitHub
Enterprise administrators
Billing and payments
Site policy
Organizations
Code security
Pull requests
GitHub Issues
GitHub Actions
GitHub Codespaces
GitHub Packages
Search on GitHub
Developers
REST API
GraphQL API
GitHub CLI
GitHub Discussions
GitHub Sponsors
Building communities
GitHub Pages
Education
GitHub Desktop
GitHub Support
Atom
Electron
CodeQL
npm
Enterprise Cloud
Free, Pro, & Team
Enterprise Cloud
Enterprise Server 3.5
Enterprise Server 3.4
Enterprise Server 3.3
Enterprise Server 3.2
Enterprise Server 3.1
GitHub AE
All Enterprise Server releases
About versions
English
English
简体ä¸æ–‡
(
Simplified Chinese
)
日本語
(
Japanese
)
Español
(
Spanish
)
Português do Brasil
(
Portuguese
)
Sign up
Search GitHub Docs
Â
Getting started with code security
Introduction to code security with GitHub Enterprise Cloud.
GitHub security features
Securing your repository
Securing your organization
Adding a security policy to your repository
⌂ Proxy