This article is also available in your language of choice. Click here
GitHub AE is currently under limited release. Please contact our Sales Team to find out more.

Explore by product

Code security
GitHub AE
English
Product

Code security

Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase.

Overview

Guides

View all

Popular

Code examples

CodeQL code scanning at Microsoft

Example code scanning workflow for the CodeQL action from the Microsoft Open Source repository.

CodeQL Code scanning GitHub Actions
/microsoft/opensource.microsoft.com/blob...

Adversarial Robustness Toolbox (ART) CodeQL code scanning

Example code scanning workflow for the CodeQL action from the Trusted AI repository.

CodeQL Code scanning GitHub Actions
/Trusted-AI/adversarial-robustness-toolb...

Microsoft security policy

Example security policy

Security policy
/microsoft/microsoft.github.io/blob/mast...

Electron security policy

Example security policy

Security policy
/electron/electron/blob/master/SECURITY.md

Security advisory for Rails

Security advisory published by Rails for CVE-2020-15169.

Security advisory
/rails/rails/security/advisories/GHSA-cf...

Sorry, there is no result for

Sorry, there is no guide that match your filter.
Try another filter or add your code example.

Learn how to add a code example

Guides

Configuring secret scanning for your repositories

You can configure how GitHub scans your repositories for secrets.

@GitHub
@GitHub

Uploading a SARIF file

You can upload SARIF files generated outside GitHub and see code scanning alerts from third-party tools in your repository.

@GitHub
@GitHub

CodeQL CI system support

You can run CodeQL analysis in your existing CI system and upload the results to GitHub AE for display as code scanning alerts.

@GitHub
@GitHub
Explore guides

All Code security docs

Getting started with code security

Keeping secrets secure

Finding security vulnerabilities and errors in your code

Did this doc help you? Privacy policy

Help us make these docs great!

All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.

Make a contribution

Or, learn how to contribute.

Still need help?

Ask the GitHub community Contact support