Security and code quality documentation
Build security and code quality into your GitHub workflow with integrated tooling.
Recommended
Quickstart for securing your repository
Manage access to your code. Find and fix vulnerable code and dependencies automatically.
GitHub security features
An overview of GitHub's security features.
Planning a trial of GitHub Advanced Security
Learn how to prepare for a successful trial of Advanced Security.
Articles
"Out of disk" and "Out of memory" errors
If you see one of these errors with GitHub Actions, you can try alternative runners.
A repository is using advanced setup for code scanning
You see an error when you try to attach a security configuration with default code scanning enabled to repositories that use advanced setup for code scanning.
About autofix for code scanning
Autofix automatically generates fixes for code scanning alerts, helping you remediate existing vulnerabilities.
About built-in CodeQL queries
Learn about the CodeQL queries that code scanning uses to analyze code.
About linked artifacts
The linked artifacts page helps you audit and prioritize your organization's builds on GitHub, regardless of where the artifacts are stored.
About open source license compliance
Define and enforce license policy for dependencies in your repositories with open source license compliance.
About SARIF files for code scanning
SARIF files convert third-party analyses into alerts on GitHub.
About secret scanning alerts
Learn about the different types of secret scanning alerts.
About security campaigns
You can fix security alerts at scale by creating security campaigns and collaborating with developers to burn down your security backlog.