代码扫描的概念

You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub.

Learn about the different types of code scanning alerts and the information that helps you understand the problem each alert highlights.

Generate a free code security risk assessment to understand your organization's exposure to vulnerabilities.

Copilot自动修复 提供有针对性的建议，可帮助你修复 code scanning 警报并避免引入新的安全漏洞。

根据你的需求， GitHub 提供 code scanning默认或高级设置。

You can perform code scanning externally and then display the results in GitHub, or configure webhooks that listen to code scanning activity in your repository.

SARIF 文件将第三方分析转换为 GitHub上的警报。

Connect security findings to your team's workflow by linking code scanning alerts to issues for tracking and collaboration.

代码扫描规则可防止含有潜在漏洞的拉取请求被合并。

MRVA 允许通过在大量存储库中运行查询来测试 Visual Studio Code 中的查询。

了解 CodeQL 背后的核心概念，以及它如何帮助你在代码中查找漏洞和错误。

工具状态页 提供对存储库中 code scanning 工具的运行状况和性能的可见性。

了解 CodeQL在贵组织内拉取请求中的表现。

可以使用存储库属性调整 code scanning 以满足需求。