# Concepts for code scanning

Learn core concepts for GitHub's code scanning features.

## Links

* [Code scanning](/en/enterprise-server@3.22/code-security/concepts/code-scanning/code-scanning)

  You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub.

* [Code scanning alerts](/en/enterprise-server@3.22/code-security/concepts/code-scanning/code-scanning-alerts)

  Learn about the different types of code scanning alerts and the information that helps you understand the problem each alert highlights.

* [/risk-assessment](/en/enterprise-server@3.22/risk-assessment)

* [/autofix-for-code-scanning](/en/enterprise-server@3.22/autofix-for-code-scanning)

* [/ai-powered-security-detections](/en/enterprise-server@3.22/ai-powered-security-detections)

* [About setup types for code scanning](/en/enterprise-server@3.22/code-security/concepts/code-scanning/setup-types)

  Depending on your needs, GitHub offers a default or advanced setup for code scanning.

* [Integration with code scanning](/en/enterprise-server@3.22/code-security/concepts/code-scanning/integration-with-code-scanning)

  You can perform code scanning externally and then display the results in GitHub, or configure webhooks that listen to code scanning activity in your repository.

* [About SARIF files for code scanning](/en/enterprise-server@3.22/code-security/concepts/code-scanning/sarif-files)

  SARIF files convert third-party analyses into alerts on GitHub.

* [Code scanning alert tracking using issues](/en/enterprise-server@3.22/code-security/concepts/code-scanning/alert-tracking-with-issues)

  Connect security findings to your team's workflow by linking code scanning alerts to issues for tracking and collaboration.

* [Code scanning merge protection](/en/enterprise-server@3.22/code-security/concepts/code-scanning/merge-protection)

  Code scanning rules prevent pull requests with potential vulnerabilities from being merged.

* [/multi-repository-variant-analysis](/en/enterprise-server@3.22/multi-repository-variant-analysis)

* [Concepts for CodeQL](/en/enterprise-server@3.22/code-security/concepts/code-scanning/codeql)

  Understand the core concepts behind CodeQL and how it helps you find vulnerabilities and errors in your code.

* [About the tool status page](/en/enterprise-server@3.22/code-security/concepts/code-scanning/tool-status-page)

  The tool status page provides visibility into the health and performance of code scanning tools in your repository.

* [CodeQL pull request alert metrics](/en/enterprise-server@3.22/code-security/concepts/code-scanning/pull-request-alert-metrics)

  Understand CodeQL's performance in pull requests across your organizations.

* [Repository properties for code scanning](/en/enterprise-server@3.22/code-security/concepts/code-scanning/repository-properties)

  You can use repository properties to adjust code scanning to suit your needs.