Skip to main content
GitHub Docs
Version:
Enterprise Cloud
Open Sidebar
Secure coding
/
CodeQL CLI
/
CodeQL CLI manual
/
pack bundle
Home
Secure coding
Getting started
GitHub security features
Dependabot quickstart
Secure repository quickstart
Add a security policy
Audit security alerts
Prevent data leaks
GitHub secret types
Trial GitHub Advanced Security
Plan GHAS trial
Enable security features in trial
Trial Secret Protection
Trial Code Security
Adopt GHAS at scale
Introduction
1. Align on strategy
2. Preparation
3. Pilot programs
4. Create internal documentation
5. Rollout code scanning
6. Rollout secret scanning
Secure your organization
Introduction
About organization security
Choose security configuration
Enable security features
Apply recommended configuration
Create custom configuration
Apply custom configuration
Configure global settings
Give access to private registries
Manage organization security
Interpret security data
Filter repositories
Edit custom configuration
Manage paid GHAS use
Detach security configuration
Find attachment failures
Delete custom configuration
Exposure to leaked secrets
Secret risk assessment
View secret risk assessment
Interpret results
Secret protection
Fix alerts at scale
About security campaigns
Best practices
Create security campaigns
Track security campaigns
Troubleshooting configurations
Active advanced setup
Not enough GHAS licenses
Secret scanning
Introduction
Secret scanning
Push protection
Secret scanning for partners
Supported patterns
Enable features
Enable secret scanning
Enable push protection
Enable validity checks
Manage alerts
About alerts
View alerts
Evaluate alerts
Resolve alerts
Monitor alerts
Work with secret scanning
Push protection for users
Push protection on the command line
Push protection from the REST API
Push protection in the GitHub UI
Advanced features
Exclude folders and files
Non-provider patterns
Enable for non-provider patterns
Custom patterns
Define custom patterns
Manage custom patterns
Custom pattern metrics
Delegated bypass
About delegated bypass
Enable delegated bypass
Manage bypass requests