Skip to main content
GitHub Docs
Search or ask Copilot
Select language: current language is English
Search or ask Copilot
Open menu
Collapse sidebarExpand sidebar
Scroll breadcrumbs left
  1. Home
  2. Security and code quality
  3. Reference
Scroll breadcrumbs right

Security and code quality

    • GitHub security features
    • Secure repository quickstart
      • Secret leakage risks
      • Secret scanning
      • Push protection
      • Secret security with GitHub
      • Secret scanning alerts
      • Custom patterns
      • Validity checks
      • Delegated bypass
      • Bypass requests
      • Secret types
      • Push protection metrics
      • Command line push protection
      • Push protection from the REST API
      • Code scanning
      • Code scanning alerts
      • Setup types
      • Integration with code scanning
      • SARIF files
      • Alert tracking with issues
      • Merge protection
        • CodeQL code scanning
        • CodeQL for compiled languages
        • CodeQL query suites
        • Custom queries
        • CodeQL CLI
        • CodeQL for VS Code
        • CodeQL workspaces
        • Query reference files
        • Query packs
      • Tool status page
      • Pull request alert metrics
      • Repository properties
      • Supply chain security
      • Dependency best practices
      • Dependency graph
      • Dependency graph data
      • Dependency review
      • Dependabot alerts
      • Malware alerts
      • Dependabot alert metrics
      • Dependabot security updates
      • Dependabot version updates
      • Dependabot pull requests
      • Multi-ecosystem updates
      • dependabot.yml file
      • Dependabot auto-triage rules
      • Dependabot job logs
      • Immutable releases
      • GitHub Advisory database
      • Global security advisories
      • Vulnerability exposure
      • Select pilot repositories
      • Organization security
      • Security overview
      • Audit security alerts
      • Delegated alert dismissal
      • Supply chain security
          • Enable GitHub Advanced Security
          • Create custom configuration
          • Apply custom configuration
          • Configure additional settings
          • Edit custom configuration
          • Delete custom configuration
          • Enable dependency graph
          • Configure code scanning
          • Configure dependency review
          • Configure secret scanning
          • View vulnerability data
          • Configure limited internet access
          • Configure VNET
          • Create custom configuration
          • Apply custom configuration
          • Configure global settings
          • Edit custom configuration
          • Filter repositories
          • Detach security configuration
          • Delete custom configuration
          • Assess your secret risk
          • View risk report
          • Estimate price
          • Protect your secrets
          • Code scanning at scale
          • CodeQL advanced setup at scale
          • Enforce dependency review
          • Give access to private registries
          • Manage paid GHAS use
        • Enable secret scanning
        • Enable for generic patterns
        • Define custom patterns
        • Manage custom patterns
        • Exclude folders and files
        • Enable validity checks
        • Enable push protection
        • Push protection on the command line
        • Push protection in the GitHub UI
        • Enable delegated bypass
        • Grant exemptions
        • Manage bypass requests
        • Review bypass requests
        • Configure code scanning
        • Configure advanced setup
        • Edit default setup
        • Use tool status page
        • Set merge protection
        • CodeQL for compiled languages
        • Set up CodeQL CLI
        • Write custom queries
        • Publish and use packs
        • Test custom queries
        • Test query help files
        • Download databases
        • Check out source code
        • Speed up PR scans
        • Specify command options
        • Create database bundles
        • Install CodeQL for VS Code
        • Manage CodeQL databases
        • Run CodeQL queries
        • Explore data flow
        • Use the model editor
        • Create custom query
        • Manage CodeQL packs
        • Explore code structure
        • Test CodeQL queries
        • Customize settings
        • Set up CodeQL workspace
        • Manage CodeQL CLI
        • Access logs
        • Use with existing CI system
        • Upload SARIF file
        • Configure Dependabot alerts
        • Configure malware alerts
        • Configure security updates
        • Configure version updates
        • Auto-update actions
        • Configure multi-ecosystem updates
        • Enable dependency graph
        • Explore dependencies
        • Use dependency submission API
        • Verify release integrity
        • Auto-triage Dependabot alerts
        • Prioritize with preset rules
        • Customize Dependabot PRs
        • Control dependency update
        • Configure dependency review action
        • Configure Dependabot notifications