GitHub security

• https://github.com/security

• GitHub code security and analysis

• GitHub security: GitHub dependency graph https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-the-dependency-graph

Related services

• GitHub Vigilant mode: Flag unsigned commits (Apr 2021)
• GitHub code scanning (Sep 2020)
• GitHub dependabot (May 2019), alerts
• GitHub Advanced Security (GHAS): secret scanning

Activities

• Read Best practices for preventing data leaks in your organization

Related

• Vulnerability Scanning
• SCA
• GitLab security: GitLab Security Dashboards
• GitHub organization
• Managing allowed IP addresses for your organization

See also

• GitHub security, GitHub Advanced Security (GHAS), GitHub Security Advisory (GHSA), GitHub code scanning, GitHub dependabot, secret scanning, SECURITY.md, GitHub Security policy
• GitHub, GitHub Actions, GitHub Actions Runner, Events, CodeQL, GitHub Desktop, GitHub organization, base permissions, GitHub Copilot, .gitignore, GitHub Codespaces, GitHub Marketplace, GitHub Apps, GitHub Enterprise Server, GitHub CLI (gh), Dependabot, GitHub security, .github/, GitHub code scanning, GitHub Pages, GitHub Packages, GitHub Advanced Security, GitHub Mobile, GitHub Importer, GitHub versions, SSH keys, CODEOWNERS, Rulesets, GitHub notifications

https://github.blog/changelog/2021-04-28-flag-unsigned-commits-with-vigilant-mode/

https://github.blog/2020-09-30-code-scanning-is-now-available/