Security and code quality documentation
Build security and code quality into your GitHub workflow to secure your software supply chain, prevent data leaks, and automatically find and fix vulnerabilities and code health issues in your codebase.
Start here
GitHub security features
An overview of GitHub's security features.
Quickstart for securing your repository
Manage access to your code. Find and fix vulnerable code and dependencies automatically.
Dependabot quickstart guide
Find and fix vulnerable dependencies you rely on with Dependabot.
Configuring default setup for code scanning
Quickly set up code scanning to find and fix vulnerable code automatically.
Popular
About secret security with GitHub
Learn how GitHub's security tools can help you identify, remediate, and prevent secret leaks.
About coordinated disclosure of security vulnerabilities
Vulnerability disclosure is a coordinated effort between security reporters and repository maintainers.
Best practices for preventing data leaks in your organization
Learn guidance and recommendations to help you avoid private or sensitive data present in your organization from being exposed.
Best practices for fixing security alerts at scale
Guidance on how to create successful security campaigns that engage developers and help them grow their understanding of secure coding.
Planning a trial of GitHub Advanced Security
Learn how to prepare for a successful trial of Advanced Security.
How-tos for detecting secret leaks
Learn how to use GitHub's tools to detect secret leaks.
Configuring default setup for code scanning
Quickly set up code scanning to find and fix vulnerable code automatically.
Configuring Dependabot security updates
You can use Dependabot security updates or manual pull requests to easily update vulnerable dependencies.
Keeping your supply chain secure with Dependabot
- Identifying vulnerabilities in your project's dependencies with Dependabot alerts • 2 articles
- Prioritizing Dependabot alerts with Dependabot auto-triage rules • 1 articles
- Keeping your dependencies updated automatically with Dependabot version updates • 2 articles
- Working with Dependabot • 4 articles
- Troubleshooting Dependabot • 3 articles
Viewing security information for your organization or enterprise
- Viewing security insights
- Assessing adoption of security features
- Assessing the security risk of your code
- Filtering alerts in security overview
- Exporting data from security overview
- Viewing metrics for Dependabot alerts
- Viewing metrics for secret scanning push protection
- Viewing metrics for pull request alerts
- Reviewing alert dismissal requests
Tutorials for security and code quality
- Trialing GitHub Advanced Security • 5 articles
- Securing your organization • 4 articles
- Remediate leaked secrets • 2 articles
- Secret scanning partner program
- Customize code scanning • 9 articles
- Implement supply chain best practices • 4 articles
- Manage security alerts • 2 articles
- Improving the quality of your code • 3 articles
- Fixing reported vulnerabilities • 2 articles
