Code security guides
了解 GitHub 可以帮助您提高代码安全性的不同方式。
修复并披露安全漏洞
Using repository security advisories to privately fix a reported vulnerability and get a CVE.Start learning path- 1概览
关于安全漏洞的协调披露
漏洞披露是安全报告者与仓库维护者之间的协调工作。 - 2操作方法指南
Creating a repository security advisory
您可以创建安全通告草稿，以私下讨论和修复开源项目中的安全漏洞。 - 3操作方法指南
Adding a collaborator to a repository security advisory
您可以添加其他用户或团队与您协作处理安全通告。 - 4操作方法指南
Collaborating in a temporary private fork to resolve a repository security vulnerability
您可以创建临时私有复刻，以私下协作修复仓库中的安全漏洞。 - 5操作方法指南
Publishing a repository security advisory
您可以发布安全通告，向社区提醒项目中的安全漏洞。 - 6操作方法指南
Editing a repository security advisory
You can edit the metadata and description for a repository security advisory if you need to update details or correct errors. - 7操作方法指南
Withdrawing a repository security advisory
You can withdraw a repository security advisory that you've published. - 8操作方法指南
Removing a collaborator from a repository security advisory
When you remove a collaborator from a repository security advisory, they lose read and write access to the security advisory's discussion and metadata.
Code security learning paths
End-to-end supply chain
How to think about securing your user accounts, your code, and your build process.
All Code security guides
找到 65 个指南
添加安全政策到仓库
操作方法指南您可以为仓库添加安全政策，说明如何报告项目中的安全漏洞。
- Security policies
- Vulnerabilities
- Repositories
- Health
GitHub security features
概览An overview of GitHub security features.
- Repositories
- Dependencies
- Vulnerabilities
- Advanced Security
Securing your organization
操作方法指南You can use a number of GitHub features to help keep your organization secure.
- Organizations
- Dependencies
- Vulnerabilities
- Advanced Security
Securing your repository
操作方法指南You can use a number of GitHub features to help keep your repository secure.
- Repositories
- Dependencies
- Vulnerabilities
- Advanced Security
About secret scanning
概览GitHub scans repositories for known types of secrets, to prevent fraudulent use of secrets that were committed accidentally.
- Secret scanning
- Advanced Security
配置仓库的密码扫描
操作方法指南您可以配置 GitHub 如何扫描存储库以查找与高级安全模式匹配的机密。
- Secret scanning
- Advanced Security
- Repositories
定义密钥扫描的自定义模式
操作方法指南您可以扩展 >- secret scanning for advanced security 以检测默认模式之外的机密。
- Advanced Security
- Secret scanning
管理来自密码扫描的警报
操作方法指南您可以查看并关闭已检入仓库的密码的警报。
- Secret scanning
- Advanced Security
- Alerts
- Repositories
Secret scanning patterns
参考Lists of supported secrets and the partners that GitHub works with to prevent fraudulent use of secrets that were committed accidentally.
- Secret scanning
- Advanced Security