Discover how to assess, manage, and resolve code scanning alerts to keep your code secure.
Assessing code scanning alerts for your repository
From the security view, you can explore and evaluate alerts for potential vulnerabilities or errors in your project's code.
Triaging code scanning alerts in pull requests
When code scanning identifies a problem in a pull request, you can review the highlighted code and resolve the alert.
Linking code scanning alerts to GitHub issues
Create or connect GitHub issues to code scanning alerts to track security fixes in your team's workflow.
Resolving code scanning alerts
From the security view, you can view, fix, or dismiss alerts for potential vulnerabilities or errors in your project's code.
Managing access to agentic autofix for code scanning
Control the rollout of agentic autofix across your enterprise, organizations, and repositories.
Enabling delegated alert dismissal for code scanning
You can use delegated alert dismissal to control who can dismiss an alert found by code scanning.
Disabling Copilot Autofix for code scanning
You can disable Copilot Autofix for an enterprise, organization, or repository.