Skip to main content
GitHub Docs
Search or ask Copilot
Select language: current language is English
Search or ask Copilot
Open menu
Open Sidebar
  • Security and code quality/
  • CodeQL CLI/
  • CodeQL CLI manual/
  • generate log-summary
Home

Security and code quality

    • GitHub security features
    • Dependabot quickstart
    • Secure repository quickstart
    • Add a security policy
    • Audit security alerts
    • Prevent data leaks
    • GitHub secret types
    • Plan GHAS trial
    • Trial Advanced Security
    • Enable security features in trial
    • Trial Secret Protection
    • Trial Code Security
      • Quickstart
      • About Code Quality
      • Enable Code Quality
      • Interpret results
      • Set PR thresholds
      • Unblock your PR
      • Allow in enterprise
      • Metrics and ratings
      • CodeQL detection
      • Fix findings in PRs
      • Improve your codebase
      • Improve recent merges
      • Code quality
    • Introduction
    • 1. Align on strategy
    • 2. Preparation
    • 3. Pilot programs
    • 4. Create internal documentation
    • 5. Rollout code scanning
    • 6. Rollout secret scanning
      • About organization security
      • Choose security configuration
      • Apply recommended configuration
      • Create custom configuration
      • Apply custom configuration
      • Configure global settings
      • Give access to private registries
      • Interpret security data
      • Filter repositories
      • Edit custom configuration
      • Manage paid GHAS use
      • Detach security configuration
      • Find attachment failures
      • Delete custom configuration
      • Secret risk assessment
      • Assess your secret risk
      • View risk report
      • Export risk report CSV
      • Risk report CSV contents
      • Interpret results
      • Secret protection
      • Push protection cost savings
      • Secret protection pricing
      • Vulnerability exposure
      • Prioritize Dependabot alerts using metrics
      • Alerts in production code
      • About security campaigns
      • Best practices
      • Create security campaigns
      • Track security campaigns
      • Active advanced setup
      • Unexpected default setup
      • Not enough GHAS licenses
      • Secret scanning
      • Push protection
      • Secret scanning for partners
      • Supported patterns
      • Enable secret scanning
      • Enable push protection
      • Enable validity checks
      • Enable metadata checks
      • About alerts
      • View alerts
      • Evaluate alerts
      • Resolve alerts
      • Monitor alerts
      • Remediate a leaked secret
      • Push protection for users
      • Push protection on the command line
      • Push protection from the REST API
      • Push protection in the GitHub UI
      • Push protection and the GitHub MCP server
      • Exclude folders and files
        • Enable for non-provider patterns
        • Define custom patterns
        • Manage custom patterns
        • Custom pattern metrics
        • About delegated bypass
        • Enable delegated bypass
        • Manage bypass requests
      • Delegated alert dismissal
      • Generic secret detection
      • Enable generic secret detection
      • Generate regular expressions with AI
      • Regular expression generator