English
Explore by product
GitHub
English
This version of GitHub Enterprise was discontinued on 2021-09-23. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise. For help with the upgrade, contact GitHub Enterprise support.
Automatically scanning your code for vulnerabilities and errors
Code scanning is available if you have a license for GitHub Advanced Security.
About code scanning→
You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub.
Triaging code scanning alerts in pull requests→
When code scanning identifies a problem in a pull request, you can review the highlighted code and resolve the alert.
Setting up code scanning for a repository→
You can set up code scanning by adding a workflow to your repository.
Managing code scanning alerts for your repository→
From the security view, you can view, fix, or close alerts for potential vulnerabilities or errors in your project's code.
Configuring code scanning→
You can configure how GitHub scans the code in your project for vulnerabilities and errors.
Configuring the CodeQL workflow for compiled languages→
You can configure how GitHub uses the CodeQL analysis workflow to scan code written in compiled languages for vulnerabilities and errors.
Troubleshooting the CodeQL workflow→
If you're having problems with code scanning, you can troubleshoot by using these tips for resolving issues.
Running CodeQL code scanning in a container→
You can run code scanning in a container by ensuring that all processes run in the same container.