Security and code quality documentation

Manage access to your code. Find and fix vulnerable code and dependencies automatically.

An overview of GitHub's security features.

Learn how to prepare for a successful trial of Advanced Security.

If you see one of these errors with GitHub Actions, you can try alternative runners.

You see an error when you try to attach a security configuration with default code scanning enabled to repositories that use advanced setup for code scanning.

Learn about the CodeQL queries that code scanning uses to analyze code.

Copilot Autofix provides targeted recommendations to help you fix code scanning alerts and avoid introducing new security vulnerabilities.

GitHub Code Quality flags code quality issues in pull requests and repository scans, applies Copilot-powered autofixes, and enforces standards with rulesets.

The linked artifacts page helps you audit and prioritize your organization's builds on GitHub, regardless of where the artifacts are stored.

SARIF files convert third-party analyses into alerts on GitHub.

Learn about the different types of secret scanning alerts.

You can fix security alerts at scale by creating security campaigns and collaborating with developers to burn down your security backlog.