community community Code-security Discussions
Code Security Discussions
Conversations related to Code Security. Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase, and to maintain your software supply chain.
Pinned to Code Security
-
You must be logged in to vote Secret scanning: on-demand revocation for GitHub personal access tokens - feedback
👂 Feedback WantedGitHub is asking for your feedback 📣 ANNOUNCEMENTAnnouncements from the GitHub Community team Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question
Discussions
-
You must be logged in to vote
Dependabot Code Security
Auto-triage rules for DependabotBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Feedback requested: New security configurations feature! 🎉
🚀 ShippedA feature has been released Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Unauthorized Fork in My Repository - Please Help
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote -
You must be logged in to vote Issuing mock security advisories
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote Can we (or when might we be able to) add dependabot and secret scanning alerts to campaigns.
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote CoPilot is useless
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote Removing an archived repository from code scanning alerts view / list
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote I have no idea what this is or where it came from but I found it in my notes in iPhone. Can anyone help
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote Copilot (previously code scanning) Autofix: Preview Feedback and Resources
👂 Feedback WantedGitHub is asking for your feedback Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Security issue
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote Secret scanning's delegated bypass controls for push protection (public beta) - feedback
👂 Feedback WantedGitHub is asking for your feedback Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote AI Sophie, supply chain
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure General -
You must be logged in to vote Code scanning filters doesn't offer a drop down to filter by PR
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback -
You must be logged in to vote Copilot secret scanning for generic passwords is generally available
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure General ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote Dependabot security updates for multiple branches
Dependabot Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback -
You must be logged in to vote -
You must be logged in to vote Is the Security Overview ('CSV export for enterprise-level security overview') retrievable by an API Endpoint.
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote I have changed my passkey on windows and cant use the same name, is it a bug or potential a risk?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote GHAS - Visualizing Code Scanning results of a pull request requires GHAS license ?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure GHASDiscussions related to GitHub Advanced Security Question -
You must be logged in to vote REST API for listing code scanning analyses for a repository
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote How to Secure JWT Authentication in a Node.js API?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & Tell -
You must be logged in to vote Regarding exporting SBOM file for specific tag/branch
RepositoriesThe core of version-controlled code storage Question -
You must be logged in to vote Better warning for expired GPG keys
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback