Explore by product
Code security
Get startedGitHubEnterprise administratorsBilling and paymentsOrganizationsCode securityGitHub IssuesGitHub ActionsGitHub CodespacesGitHub PackagesDevelopersREST APIGraphQL APIGitHub InsightsGitHub DiscussionsGitHub SponsorsBuilding communitiesGitHub PagesEducationGitHub DesktopGitHub CLIAtomElectronCodeQL
Article version: GitHub.com
Article version: GitHub.com
Finding security vulnerabilities and errors in your code
Keep your code secure by using code scanning to identify and fix potential security vulnerabilities and other errors in your code.
Code scanning is available for all public repositories, and for private repositories owned by organizations where GitHub Advanced Security is enabled. For more information, see "About GitHub Advanced Security."
- Automatically scanning your code for vulnerabilities and errors
- About code scanning
- Triaging code scanning alerts in pull requests
- Setting up code scanning for a repository
- Managing code scanning alerts for your repository
- Configuring code scanning
- About code scanning with CodeQL
- Configuring the CodeQL workflow for compiled languages
- Troubleshooting the CodeQL workflow
- Running CodeQL code scanning in a container
- Viewing code scanning logs
- Integrating with code scanning
- Using CodeQL code scanning with your existing CI system
Help us make these docs great!
All GitHub docs are open source. See something that's wrong or unclear? Submit a pull request.
Make a contribution