Discussions

• 14 You must be logged in to vote

  🤖

  Assignable alerts for code scanning and secret scanning are now in public preview

  🚀 Shipped A feature has been released 📣 ANNOUNCEMENT Announcements from the GitHub Community team Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Secret Scanning Detect and prevent the exposure of sensitive information in your code Code Security Build security into your GitHub workflow with features to keep your codebase secure Changelog A discussion post associated with a Changelog post

  samus-aran asked Sep 19, 2025 in Code Security · Unanswered

  

  

  

  

  29
• 11 You must be logged in to vote

  📚

  [GHAS Code Security Series] - Part 1: Setting Up Organization-Wide Code Scanning

  Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Security Manager Manage and oversee your repository's security settings and alerts Organizations Shared accounts where businesses and open-source projects can collaborate across many projects Enterprise Discussions related to GitHub Enterprise Cloud, Enterprise Server and Organizations GHAS Discussions related to GitHub Advanced Security Best Practices Best practices, tips & tricks, and articles from GitHub and its users DevOps Bring teams together to deliver better software, faster.

  vishaljsoni started Oct 16, 2025 in Discover: GitHub Best Practices

  

  

  

  

  8
• 6 You must be logged in to vote

  🤖

  🛡️ Security Configurations: Run CodeQL with Default or Advanced Setup

  📣 ANNOUNCEMENT Announcements from the GitHub Community team Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Show & Tell Discussions where community members share their projects, experiments, or accomplishments Changelog A discussion post associated with a Changelog post

  ghostinhershell asked Jul 17, 2025 in Code Security · Unanswered

  

  

  2
• 3 You must be logged in to vote

  🤖

  Delegated Alert Dismissal for Code Scanning is Now Generally Available ♻️

  🚀 Shipped A feature has been released Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Show & Tell Discussions where community members share their projects, experiments, or accomplishments Changelog A discussion post associated with a Changelog post

  ghostinhershell asked Jul 8, 2025 in Code Security · Unanswered

  

  

  0
• 3 You must be logged in to vote

  🚢

  Gru.github.com

  Accessibility Making GitHub useable for members of the disability community Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine other General topics and discussions that don't fit into other categories, but are related to GitHub

  GRURoot asked May 13, 2025 in Actions · Unanswered

  

  

  0
• 2 You must be logged in to vote

  🤖

  CodeQL

  Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage

  ReuelAlbert-Dev asked Jul 16, 2025 in Code Security · Answered

  

  

  

  

  2
• 2 You must be logged in to vote

  🤖

  Harden GitHub Actions: Secure Workflow Design Against Fork PR Abuse

  Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage

  ghoststack-git asked Jul 31, 2025 in Code Security · Answered

  

  

  

  

  3
• 1 You must be logged in to vote

  🤖

  Managing false positives in security alerts for a monorepo with multi-environment workflows

  Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage

  Zypheron47 asked Jul 31, 2025 in Code Security · Answered

  

  

  1
• 1 You must be logged in to vote

  🤖

  It's me

  Bug GitHub or a GitHub feature is not working as intended Accessibility Making GitHub useable for members of the disability community Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine

  Knahid007 asked Oct 18, 2025 in Code Security · Unanswered

  

  

  2
• 1 You must be logged in to vote

  🤖

  Private Preview: Code Coverage — Native Test Coverage in Pull Requests

  📣 ANNOUNCEMENT Announcements from the GitHub Community team Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine

  AlonaHlobina asked Apr 7, 2026 in Code Security · Unanswered

  

  

  0
• 1 You must be logged in to vote

  📚

  [GHAS CodeQL Series] - Part 2: Implementing Alert-Mode Repository Rulesets

  Pull Requests Propose, review, and discuss changes to a repository's codebase Security and Privacy Protect your repositories and data with GitHub's security and privacy features Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Copilot Code accurately and faster with your AI powered pair-programmer. GHAS Discussions related to GitHub Advanced Security Best Practices Best practices, tips & tricks, and articles from GitHub and its users

  vishaljsoni started Apr 1, 2026 in Discover: GitHub Best Practices

  

  

  2
• 0 You must be logged in to vote

  🤖

  CodeQL link “state-changing action” points to odd pages

  Code Scanning Code scanning: our code analysis features, powered by the CodeQL engine Code Security Build security into your GitHub workflow with features to keep your codebase secure Question Ask and answer questions about GitHub features and usage inactive This discussion has been automatically marked as inactive. This was formerly labeled stale.

  KalleOlaviNiemitalo asked May 18, 2025 in Code Security · Unanswered

  

  

  3