GitHub Community
community community Code-security Discussions
Code Security Discussions
Conversations related to Code Security. Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase, and to maintain your software supply chain.
Pinned to Code Security
Discussions
-
You must be logged in to vote Dependabot cannot run CodeQL with error: 1 configuration not found
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Secure API Design: Preventing Account Enumeration and Metadata Leakage in OpenAI-Integrated Chat Services (Vulnerability Report 46/2025)
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Github actions with inherited workflows do not populate the security tab
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Erroneous GitHub warning messages about Multi-Factor Authentication
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Can't generate a fine grained personal access token
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Push protection false positive, push declined (and it's not even enabled)
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote In my private repo, i see commits by another USER!!
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote The property '#/registries' of type string did not match the following type: object
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Dependabot alerts should support conventional major version tags with GitHub Actions
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Unable to disable dependabot pull requests on private repository
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Code Scanning "Needs Setup" After Setting Up
BugGitHub or a GitHub feature is not working as intended Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Can't enable dependabot for version updates
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Additional push in a Dependabot PR does not trigger actions
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote I deleted package-lock.json thousand years ago，but I still got dependabot alerts every week.
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Dependabot go.mod is not tidy
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Security topic
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure -
You must be logged in to vote Dependency Graph and Security Alerts for npm lock file version 3
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure
