Skip to main content
GitHub Docs
Search
Select language: current language is English
Open Search BarClose Search Bar
Open Menu
Open Sidebar
  • Secure coding/
  • Dependabot/
  • Dependabot version updates/
  • Configure version updates
Home
Secure coding
    • GitHub security features
    • Dependabot quickstart
    • Secure repository quickstart
    • Add a security policy
    • Audit security alerts
    • Prevent data leaks
    • GitHub secret types
    • Plan GHAS trial
    • Enable security features in trial
    • Trial Secret Protection
    • Trial Code Security
      • About organization security
      • Choose security configuration
      • Apply recommended configuration
      • Create custom configuration
      • Apply custom configuration
      • Configure global settings
      • Give access to private registries
      • Interpret security data
      • Filter repositories
      • Edit custom configuration
      • Manage paid GHAS use
      • Detach security configuration
      • Find attachment failures
      • Delete custom configuration
      • Secret risk assessment
      • View secret risk assessment
      • Interpret results
      • Secret protection
      • About security campaigns
      • Best practices
      • Create security campaigns
      • Track security campaigns
      • Active advanced setup
      • Not enough GHAS licenses
      • Secret scanning
      • Push protection
      • Secret scanning for partners
      • Supported patterns
      • Enable secret scanning
      • Enable push protection
      • Enable validity checks
      • About alerts
      • View alerts
      • Evaluate alerts
      • Resolve alerts
      • Monitor alerts
      • Push protection for users
      • Push protection on the command line
      • Push protection from the REST API
      • Push protection in the GitHub UI
      • Exclude folders and files
        • Enable for non-provider patterns
        • Define custom patterns
        • Manage custom patterns
        • Custom pattern metrics
        • About delegated bypass
        • Enable delegated bypass
        • Manage bypass requests
      • Delegated alert dismissal
      • Generic secret detection
      • Enable generic secret detection
      • Generate regular expressions with AI
      • Regular expression generator
      • Troubleshoot secret scanning
      • Partner program
      • About code scanning
      • About CodeQL code scanning
      • Configure code scanning
      • Evaluate code scanning
      • Code scanning at scale
      • Configure advanced setup
      • Customize advanced setup
      • CodeQL for compiled languages
      • CodeQL advanced setup at scale
      • Hardware resources for CodeQL
      • Code scanning in a container
      • About code scanning alerts
      • Copilot Autofix for code scanning
      • Disable Copilot Autofix
      • Assess alerts
      • Resolve alerts
      • Best practices for campaigns
      • Fix alerts in campaign
      • Triage alerts in pull requests
      • Track alerts in issues
      • Code scanning tool status
      • Edit default setup
      • Set merge protection
      • Enable delegated alert dismissal
      • CodeQL query suites
      • Configure larger runners
      • View code scanning logs
      • C and C++ CodeQL queries
      • C# CodeQL queries
      • Go CodeQL queries
      • Java and Kotlin CodeQL queries
      • JavaScript and TypeScript queries
      • Python CodeQL queries
      • Ruby CodeQL queries
      • Swift CodeQL queries
      • About integration
      • Using code scanning with your existing CI system
      • Upload a SARIF file
      • SARIF support
      • Code Security must be enabled
      • Alerts in generated code
      • Analysis takes too long
      • Automatic build failed
      • C# compiler failing
      • Cannot enable CodeQL in a private repository
      • Enabling default setup takes too long
      • Extraction errors in the database
      • Fewer lines scanned than expected
      • Logs not detailed enough
      • No source code seen during build
      • Not recognized
      • Out of disk or memory
      • Resource not accessible
      • Results different than expected
      • Server error
      • Some languages not analyzed
      • Two CodeQL workflows
      • Unclear what triggered a workflow
      • Unnecessary step found
      • Kotlin detected in no build
      • GitHub Code Security disabled
      • Default setup is enabled
      • GitHub token missing
      • SARIF file invalid
      • Results file too large
      • Results exceed limits
      • About the CodeQL CLI
      • Setting up the CodeQL CLI
      • Preparing code for analysis
      • Analyzing code
      • Uploading results to GitHub
      • Customizing analysis
      • Advanced setup of the CodeQL CLI
      • About CodeQL workspaces
      • Using custom queries with the CodeQL CLI
      • Creating CodeQL query suites
      • Testing custom queries
      • Testing query help files
      • Creating and working with CodeQL packs
      • Publishing and using CodeQL packs
      • Specifying command options in a CodeQL configuration file
      • Query reference files
      • CodeQL CLI SARIF output
      • CodeQL CLI CSV output
      • Extractor options
      • Exit codes
      • Creating CodeQL CLI database bundles
      • bqrs decode
      • bqrs diff
      • bqrs hash
      • bqrs info
      • bqrs interpret
      • database add-diagnostic
      • database analyze
      • database bundle
      • database cleanup
      • database create
      • database export-diagnostics
      • database finalize
      • database import