-
Notifications
You must be signed in to change notification settings - Fork 2.5k
community community Code-security Discussions
🤖 Code Security Discussions
Conversations related to Code Security. Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase, and to maintain your software supply chain.
Pinned to Code Security
-
You must be logged in to vote 🤖 Copilot (previously code scanning) Autofix: Preview Feedback and Resources
Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote 🤖 Secret scanning's delegated bypass controls for push protection (public beta) - feedback
👂 Feedback WantedGitHub is asking for your feedback Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote 🤖 Erroneous GitHub warning messages about Multi-Factor Authentication
BugSomething isn't working correctly Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote 🤖 🔐 Secret scanning validity checks are generally available! - Feedback
👂 Feedback WantedGitHub is asking for your feedback 📣 ANNOUNCEMENTAnnouncements from the GitHub Community team Secret Scanning Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure GHASDiscussions related to GitHub Advanced Security ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote 🤖 [Code Security] August Release Roundup 🚀
👂 Feedback WantedGitHub is asking for your feedback 🚀 ShippedA feature has been released Releases Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Secret Scanning Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure ChangelogA discussion post associated with a Changelog post
Discussions
-
You must be logged in to vote 🤖 Workshop: GitHub DevSecOps Fundamentals [SEC2745W]
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure DevOpsBring teams together to deliver better software, faster. Universe 2023All things related to our global developer conference, Universe 2023 SpeakerAuthored by GitHub Universe 2023 speakers: Ask questions or provide feedback on the session/workshop -
You must be logged in to vote 🤖 GitHub Action needed: GitHub Personal Access Token found in gist, any app using this secret may be affected
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Push protection false positive, push declined (and it's not even enabled)
BugSomething isn't working correctly Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote 🤖 Dependabot on Actions
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback ChangelogA discussion post associated with a Changelog post -
You must be logged in to vote 🤖 Is a deleted branch on GitHub guaranteed to not leak data?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Dependabot alert sent out 10 days after initial advisory publish - why?
Dependabot Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Why am I being asked to add a second 2FA method?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote 🤖 In my private repo, i see commits by another USER!!
BugSomething isn't working correctly Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote 🤖 Understanding the CSV export from the "Coverage" page in GHAS
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure GHASDiscussions related to GitHub Advanced Security Question -
You must be logged in to vote 🤖 Dependabot security scan package registry settings.
Dependabot Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 The property '#/registries' of type string did not match the following type: object
BugSomething isn't working correctly Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote 🤖 Dependabot CVE-2022-29622 alerts
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Dependabot updates transitive pip dependency in one file but not the other
Dependabot Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale. -
You must be logged in to vote 🤖 How to actually revoke a GitHub GPG key?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Does Github Advanced Security detect code smells
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Scan Devices (for educational purpose)
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Cargo workspaces?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Seguridad
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Push protection for existing secrets
Secret Scanning Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 CodeQL ASPNETCOMPILER error 1003
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 -
You must be logged in to vote 🤖 Is there a way to automatically merge pull requests created by dependabot?
Dependabot Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Downloading users repositories
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Question -
You must be logged in to vote 🤖 Feedback to credential detection in user secrets scanning
Secret Scanning Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product Feedback