Skip to main content
GitHub Docs
Version:
Free, Pro, & Team
Search GitHub Docs
Code security
/
Dependabot
Home
Code security
Getting started
GitHub security features
Dependabot quickstart
Secure repository quickstart
Secure organization quickstart
Add a security policy
Audit security alerts
Prevent data leaks
Secure your organization
Introduction
About organization security
Choose security configuration
Enable security features
Apply recommended configuration
Configure global settings
Customize organization security
Create custom configuration
Apply custom configuration
Manage organization security
Interpret security data
Filter repositories
Edit custom configuration
Manage GHAS licenses
Detach security configuration
Delete custom configuration
Troubleshooting configurations
Existing advanced setup
Not enough GHAS licenses
Secret scanning
About secret scanning
Partner program
Configure secret scans
Generate regular expressions with AI
Manage secret alerts
Secret scanning patterns
Generic secret detection
Push protection for repositories
Push protection for users
Work with push protection
Push a blocked branch
Troubleshoot secret scanning
Code scanning
Introduction
About code scanning
About CodeQL code scanning
Enable code scanning
Configure code scanning
Evaluate code scanning
Code scanning at scale
Create advanced setup
Configure advanced setup
Customize advanced setup
CodeQL for compiled languages
CodeQL advanced setup at scale
Hardware resources for CodeQL
Code scanning in a container
Manage alerts
About code scanning alerts
Autofix for code scanning
Manage alerts
Triage alerts in pull requests
Track alerts in issues
Manage code scanning
Code scanning tool status
Edit default setup
Set merge protection
CodeQL query suites
Configure larger runners
View code scanning logs
C and C++ CodeQL queries
C# CodeQL queries
Go CodeQL queries
Java and Kotlin CodeQL queries
JavaScript and TypeScript queries
Python CodeQL queries
Ruby CodeQL queries
Swift CodeQL queries
Integrate with code scanning
About integration
Using code scanning with your existing CI system
Upload a SARIF file
SARIF support
Troubleshooting code scanning
Advanced Security must be enabled
Alerts in generated code
Analysis takes too long
Automatic build failed
Cannot enable CodeQL in a private repository
Enabling default setup takes too long
Extraction errors in the database
Fewer lines scanned than expected
Logs not detailed enough
No source code seen during build
Not recognized
Out of disk or memory
Resource not accessible
Results different than expected
Server error
Some languages not analyzed
Two CodeQL workflows
Unclear what triggered a workflow
Unnecessary step found
Kotlin detected in no build
Troubleshooting SARIF uploads
GitHub Advanced Security disabled
Default setup is enabled
GitHub token missing
SARIF file invalid
Results file too large