English
No results found.
Explore by product
Code security
English
Code security guides
Learn about the different ways that GitHub Enterprise Server can help you improve your code's security.
Run code scanning with GitHub Actions
Check your default branch and every pull request to keep vulnerabilities and errors out of your repository.Start path- 1Overview
About code scanning
You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub. - 2How-to guide
Setting up code scanning for a repository
You can set up code scanning by adding a workflow to your repository. - 3How-to guide
Configuring code scanning
You can configure how GitHub scans the code in your project for vulnerabilities and errors. - 4How-to guide
Configuring the CodeQL workflow for compiled languages
You can configure how GitHub uses the CodeQL analysis workflow to scan code written in compiled languages for vulnerabilities and errors. - 5How-to guide
Running CodeQL code scanning in a container
You can run code scanning in a container by ensuring that all processes run in the same container. - 6How-to guide
Troubleshooting the CodeQL workflow
If you're having problems with code scanning, you can troubleshoot by using these tips for resolving issues.
Code security learning paths
Get notifications for vulnerable dependencies
Set up Dependabot to alert you to new vulnerabilities in your dependencies.
Scan for secrets
Set up secret scanning to guard against accidental check-ins of tokens, passwords, and other secrets to your repository.
Run CodeQL code scanning in your CI
Set up CodeQL within your existing CI and upload results to GitHub code scanning.
Integrate with code scanning
Upload code analysis results from third-party systems to GitHub using SARIF.
All Code security guides
30 guides found
Help us make these docs great!
All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.
Make a contribution