Skip to main content

Enterprise Server 3.22 is currently available as a release candidate.

Search or ask Copilot

Select language: current language is English

Search or ask Copilot

Open menu

Collapse sidebarExpand sidebar

Scroll breadcrumbs left

Home
Security and code quality
How-tos

Scroll breadcrumbs right

Security and code quality

- GitHub security features
- Secure repository quickstart
- - - - Edit custom configuration
      - Delete custom configuration
  - - - Give access to private registries
      - Manage paid GHAS use
- - - Enable secret scanning
    - Enable for generic patterns
  - - Enable push protection
  - - Push protection on the command line
    - Push protection in the GitHub UI
- - - Configure code scanning
    - Configure advanced setup
  - - Use with existing CI system
    - Upload SARIF file
- - - Prevent release changes
    - Export dependencies as SBOM
- - - Filter security alerts
    - Review alert dismissal requests
- - - Add security policy
  - - Browse Advisory Database
    - Edit Advisory Database

How-tos for security and code quality

Learn how to use GitHub's security and code quality features.

Secure at scale, 1 of 7
- Configure enterprise security, 1 of 2
- Configuring security features in your organization, 2 of 2
How-tos for securing secrets, 2 of 7
Find and fix code vulnerabilities, 3 of 7
Securing your supply chain, 4 of 7
Managing security alerts, 5 of 7
How-tos for reporting and fixing vulnerabilities, 6 of 7
- How-tos for reporting and fixing vulnerabilities, 1 of 2
- How-tos for fixing vulnerabilities, 2 of 2
How-tos for viewing and interpreting security results, 7 of 7

Help and support

Did you find what you needed?

Yes No

Help us make these docs great!

All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.

Make a contribution

Learn how to contribute

Still need help?

Ask the GitHub community

Contact support

Legal

© 2026 GitHub, Inc.
Terms
Privacy
Status
Pricing
Expert services
Blog