Skip to main content

Editing a custom security configuration

Change the enablement settings in your custom security configuration to better meet the security needs of your repositories.

Who can use this feature?

Enterprise owners and members with the admin role

About editing a custom security configuration

After creating and applying a custom security configuration, you may need to edit the enablement settings for that configuration to better secure your repositories. Any changes you make to the enablement settings of a security configuration will automatically populate to all linked repositories.

Note

The GitHub-recommended security configuration is managed by GitHub and cannot be edited. If you would like to customize your security enablement settings, you need to create a custom security configuration. For more information, see Creating a custom security configuration for your enterprise.

Modifying your custom security configuration

  1. Navigate to your enterprise. For example, from the Enterprises page on GitHub.com.

  2. At the top of the page, click Settings.

  3. In the left sidebar, click Advanced Security.

  4. In the "Configurations" section, click the name of the custom security configuration you want to edit.

  5. Edit the name and description of your custom security configuration as desired.

  6. Edit the enablement settings of your custom security configuration as desired.

  7. In the "Policy" section, you can modify the configuration's enforcement status. Enforcing a configuration will block repository owners from changing features that are enabled or disabled by the configuration, but features that are not set aren't enforced. Next to "Enforce configuration", select Enforce or Don't enforce from the dropdown menu.

    Note

    Some situations can break the enforcement of security configurations. See Security configuration enforcement.

  8. To apply your changes, click Update configuration.