Skip to main content

此版本的 GitHub Enterprise 已停止服务 2022-06-03. 即使针对重大安全问题,也不会发布补丁。 要获得更好的性能、改进的安全性和新功能,请升级到 GitHub Enterprise 的最新版本。 如需升级方面的帮助,请联系 GitHub Enterprise 支持

About integration with code scanning

You can perform 代� �扫描 externally and then display the results in GitHub, or set up webhooks that listen to 代� �扫描 activity in your repository.

代� �扫描 适用于启用了 GitHub Advanced Security 的组织拥有的仓库。 更多信息请参阅“关于 GitHub Advanced Security”。

Note: Your site administrator must enable 代� �扫描 for 您的 GitHub Enterprise Server 实例 before you can use this feature. For more information, see "Configuring 代� �扫描 for your appliance."

As an alternative to running 代� �扫描 within GitHub, you can perform analysis elsewhere and then upload the results. Alerts for 代� �扫描 that you run externally are displayed in the same way as those for 代� �扫描 that you run within GitHub. For more information, see "Managing 代� �扫描 alerts for your repository."

If you use a third-party static analysis tool that can produce results as Static Analysis Results Interchange Format (SARIF) 2.1.0 data, you can upload this to GitHub. For more information, see "Uploading a SARIF file to GitHub."

Integrations with webhooks

You can use 代� �扫描 webhooks to build or set up integrations, such as GitHub 应用程序 or OAuth 应用程序, that subscribe to 代� �扫描 events in your repository. For example, you could build an integration that creates an issue on GitHub Enterprise Server or sends you a Slack notification when a new 代� �扫描 alert is added in your repository. For more information, see "Creating webhooks" and "Webhook events and payloads."

Further reading