Skip to main content
We publish frequent updates to our documentation, and translation of this page may still be in progress. For the most current information, please visit the English documentation.
 

 

Code security guides

了解 GitHub Enterprise Server 可以帮助您提高代码安全性的不同方式。

Code security learning paths

Learning paths are a collection of guides that help you master a particular subject.

Fix and disclose a security vulnerability

Using repository security advisories to privately fix a reported vulnerability and get a CVE.

Start learning path

Get notifications for insecure dependencies

Set up Dependabot to alert you to new vulnerabilities in your dependencies.

Start learning path

Get pull requests to update your vulnerable dependencies

Set up Dependabot to create pull requests when new vulnerabilities are reported.

Start learning path

Keep your dependencies up-to-date

Use Dependabot to check for new releases and create pull requests to update your dependencies.

Start learning path

Explore and manage security alerts

Learn where to find and resolve security alerts.

Start learning path

Scan for secrets

Set up secret scanning to guard against accidental check-ins of tokens, passwords, and other secrets to your repository.

Start learning path

Run CodeQL code scanning in your CI

Set up CodeQL within your existing CI and upload results to GitHub code scanning.

Start learning path

Integrate with code scanning

Upload code analysis results from third-party systems to GitHub using SARIF.

Start learning path

End-to-end supply chain

How to think about securing your user accounts, your code, and your build process.

Start learning path

All Code security guides

Type
Topic
52 guides found