Skip to main content
GitHub Docs
All products
Code security
Getting started
GitHub security features
Secure your repository
Secure your organization
Add a security policy
Adopting GHAS at scale
Introduction
1. Align on strategy
2. Preparation
3. Pilot programs
4. Create internal documentation
5. Rollout code scanning
6. Rollout secret scanning
Secret scanning
About secret scanning
Configure secret scans
Define custom patterns
Manage secret alerts
Secret scanning patterns
Code scanning
Scan code automatically
About code scanning
About code scanning alerts
Triage alerts in pull requests
Set up code scanning
Manage alerts
Configure code scanning
Code scanning with CodeQL
Hardware resources for CodeQL
Configure compiled languages
Troubleshoot CodeQL workflow
Code scanning in a container
View code scanning logs
Integrate with code scanning
About integration
Upload a SARIF file
SARIF support
Use CodeQL in CI system
Code scanning in your CI
Install CodeQL CLI
Configure CodeQL CLI
Run CodeQL runner
Configure CodeQL runner
Troubleshoot CodeQL runner
Migrating from the CodeQL runner
Supply chain security
Understand your supply chain
Supply chain security
Dependency graph
Configure dependency graph
Dependency review
Configure dependency review
Explore dependencies
Troubleshoot dependency graph
End-to-end supply chain
Overview
Securing accounts