Prerequisites
Before you can effectively manage your paid use of Advanced Security, you should understand how Advanced Security is billed. See GitHub Advanced Security license billing.
Understanding your license usage
-
In the upper-right corner of GitHub, click your profile picture, then click Organizations.
-
Under your organization name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.

-
In the "Security" section of the sidebar, select the Code security and analysis dropdown menu, then click Configurations.
-
In the "Apply configurations" section, your current license usage will be displayed.
NUMBER-USED out of NUMBER-PURCHASED available GitHub Advanced Security licenses in use by YOUR-ENTERPRISE.
-
Optionally, to find specific repositories in your organization, filter the repository table. To learn more, see Filtering repositories in your organization using the repository table.
-
To quickly identify the number of licenses needed to enable GitHub Advanced Security on a specific repository, in that repository's row of the repository table, read "NUMBER licenses required".
-
To view license usage for multiple repositories in your organization, select the repositories from the repository table. In the "Apply configurations" section, you will see the number of licenses required to apply GitHub Advanced Security to the repositories, as well as the number of licenses made available if you disable GitHub Advanced Security on those repositories.

Turning off Advanced Security
The simplest way to turn off all Advanced Security features for one or more repositories is to create a security configuration where the product is disabled at the top level. You can apply this custom configuration to repositories where you want to turn off paid features.
Conseil
Ensure that you give your custom configuration a very clear name, for example: "No Code Security" or "Secret Protection and Supply chain only" to avoid confusion.
For more information, see Creating a custom security configuration and Applying a custom security configuration.
To prevent future enablement of security features, we recommend you ask your enterprise administrator to set the enterprise account's Advanced Security policies so that:
- Advanced Security is not available.
- Repository administrators are not allowed to enable or disable Advanced Security features for their repositories. See Enforcing policies for code security and analysis for your enterprise.