About GitHub Advanced Security. GitHub has many features that help you improve and maintain the quality of your code. Some of these are included in all plans, such as dependency graph and Dependabot alerts. Other security features require a GitHub Advanced Security (GHAS) license to run on repositories apart from public repositories on GitHub.com.

The following GitHub Advanced Security features are available and free of charge for public repositories on GitHub. Organizations that use GitHub Enterprise Cloud with a license for GitHub Advanced Security can use the full set of features in any of their repositories.

About Advanced Security features. A GitHub Advanced Security license provides the following additional features: Code scanning - Search for potential security vulnerabilities and coding errors in your code using CodeQL or a third-party tool. See About code scanning and About code scanning with CodeQL.

Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in your repository.

GitHub Advanced Security provides features that help you improve and maintain the security and quality of code, such as code scanning, secret scanning, and dependency review. For more information, see About GitHub Advanced Security .

CodeQL is the code analysis engine developed by GitHub to automate security checks. You can analyze your code using CodeQL and display the results as code scanning alerts. There are three main ways to use CodeQL analysis for code scanning:

You can configure GitHub Enterprise Server to include GitHub Advanced Security. This provides extra features that help users find and fix security problems in their code.

Learn how GitHub Advanced Security costs are calculated and how to get the most from your license. Who can use this feature? GitHub Advanced Security is available for enterprise accounts on GitHub Enterprise Cloud and GitHub Enterprise Server.

GitHub Advanced Security (GHAS) helps teams build more secure code faster using integrated tooling such as secret scanning and code scanning using CodeQL. To understand the security features available through GitHub Advanced Security, see About GitHub Advanced Security.

A phased approach to rolling out GitHub Advanced Security at your company using industry and GitHub best practices.