Security and code quality documentation
Build security and code quality into your GitHub workflow with integrated tooling.
Recommended
Quickstart for securing your repository
Manage access to your code. Find and fix vulnerable code and dependencies automatically.
GitHub security features
An overview of GitHub's security features.
Planning a trial of GitHub Advanced Security
Prepare your organization to evaluate Advanced Security against clear security and purchasing goals.
Articles
"Out of disk" and "Out of memory" errors
If you see one of these errors with GitHub Actions, you can try alternative runners.
A repository is using advanced setup for code scanning
You see an error when you try to attach a security configuration with default code scanning enabled to repositories that use advanced setup for code scanning.
About AI Scan
AI Scan extends code scanning with AI-based detection to help find security vulnerabilities.
About autofix for code scanning
Autofix generates potential fixes for code scanning alerts, helping you remediate existing vulnerabilities.
About built-in CodeQL queries
Learn about the CodeQL queries that code scanning uses to analyze code.
About linked artifacts
The linked artifacts page helps you audit and prioritize your organization's builds on GitHub, regardless of where the artifacts are stored.
About open source license compliance
Define and enforce license policy for dependencies in your repositories with open source license compliance.
About reachability analysis for Dependabot alerts
Reachability analysis helps prioritize Dependabot alerts by identifying whether your application can reach vulnerable dependency code.
About SARIF files for code scanning
SARIF files convert third-party analyses into alerts on GitHub.