Skip to main content
GitHub Docs
Version:
Free, Pro, & Team
Search or ask Copilot
Search or ask
Copilot
Select language: current language is English
Search or ask Copilot
Search or ask
Copilot
Open menu
Open Sidebar
Security and code quality
/
Responsible use
Home
Security and code quality
Getting started
GitHub security features
Dependabot quickstart
Secure repository quickstart
Add a security policy
GitHub secret types
Trial GitHub Advanced Security
Plan GHAS trial
Trial Advanced Security
Enable security features in trial
Trial Secret Protection
Trial Code Security
GitHub Code Quality
Get started
Quickstart
How-to guides
Enable Code Quality
Interpret results
Set PR thresholds
Unblock your PR
Allow in enterprise
Reference
Metrics and ratings
CodeQL analysis
CodeQL queries
C# queries
Go queries
Java queries
JavaScript queries
Python queries
Ruby queries
Tutorials
Fix findings in PRs
Improve your codebase
Improve recent merges
Responsible use
Code quality
Secure your organization
Introduction
Choose security configuration
Enable security features
Apply recommended configuration
Create custom configuration
Apply custom configuration
Configure global settings
Give access to private registries
Manage organization security
Interpret security data
Filter repositories
Edit custom configuration
Manage paid GHAS use
Detach security configuration
Find attachment failures
Delete custom configuration
Exposure to leaked secrets
Assess your secret risk
View risk report
Export risk report CSV
Risk report CSV contents
Protect your secrets
Push protection cost savings
Secret protection pricing
Organize leak remediation
Exposure to vulnerabilities
Prioritize Dependabot alerts using metrics
Fix alerts at scale
Create security campaigns
Track security campaigns
Troubleshoot configurations
Active advanced setup
Unexpected default setup
Not enough GHAS licenses
Secret scanning
Introduction
Supported patterns
Enable features
Enable secret scanning
Enable push protection
Enable validity checks
Enable metadata checks
Manage alerts
View alerts
Evaluate alerts
Resolve alerts
Monitor alerts
Work with secret scanning
Remediate a leaked secret
Push protection for users
Push protection on the command line
Push protection in the GitHub UI
Advanced features
Exclude folders and files
Non-provider patterns
Enable for non-provider patterns
Custom patterns
Define custom patterns
Manage custom patterns
Custom pattern metrics
Delegated bypass
Enable delegated bypass
Manage bypass requests
Delegated alert dismissal
Copilot secret scanning
Generic secret detection
Enable generic secret detection
Generate regular expressions with AI
Regular expression generator
Troubleshoot
Troubleshoot secret scanning
Partner program
Partner program
Code scanning
Enable code scanning
Configure code scanning
Code scanning at scale
Create advanced setup
Configure advanced setup
Customize advanced setup
CodeQL for compiled languages
CodeQL advanced setup at scale
Hardware resources for CodeQL
Code scanning in a container
Manage alerts
Copilot Autofix for code scanning
Disable Copilot Autofix