The Wayback Machine - https://web.archive.org/web/20221209090916/https://docs.github.com/en/[email protected]/code-security/guides
Skip to main content
 

 

Code security guides

Learn about the different ways that GitHub Enterprise Server can help you improve your code's security.

Code security learning paths

Learning paths are a collection of guides that help you master a particular subject.

Fix and disclose a security vulnerability

Using repository security advisories to privately fix a reported vulnerability and get a CVE.

Start learning path

Get notifications for insecure dependencies

Set up Dependabot to alert you to new vulnerabilities in your dependencies.

Start learning path

Get pull requests to update your vulnerable dependencies

Set up Dependabot to create pull requests when new vulnerabilities are reported.

Start learning path

Keep your dependencies up-to-date

Use Dependabot to check for new releases and create pull requests to update your dependencies.

Start learning path

Explore and manage security alerts

Learn where to find and resolve security alerts.

Start learning path

Scan for secrets

Set up secret scanning to guard against accidental check-ins of tokens, passwords, and other secrets to your repository.

Start learning path

Run CodeQL code scanning in your CI

Set up CodeQL within your existing CI and upload results to GitHub code scanning.

Start learning path

Integrate with code scanning

Upload code analysis results from third-party systems to GitHub using SARIF.

Start learning path

End-to-end supply chain

How to think about securing your user accounts, your code, and your build process.

Start learning path

All Code security guides

54 guides found