Introduction to code scanning

Learn what code scanning is, how it helps you secure your code, and what code scanning tools are available.

Who can use this feature?

Code scanning is available for the following repository types:

Public repositories on GitHub.com
Organization-owned repositories on GitHub Enterprise Cloud with GitHub Advanced Security enabled

You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub.

You can use CodeQL to identify vulnerabilities and errors in your code. The results are shown as code scanning alerts in GitHub.