community community Code-security Discussions
Pinned Discussions
-
-
New customer portal: help.github.com 🚢
Announcements GitHub Community Admin -
-
Code Security Discussions
Conversations related to Code Security. Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase, and to maintain your software supply chain.
Pinned to Code Security
-
You must be logged in to vote ❗[START HERE] Welcome to the Code Security Community! 🔐
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & TellDiscussions where community members share their projects, experiments, or accomplishments Community Check-InUpdates & News from GitHub Community Managers -
You must be logged in to vote Protecting endpoints from malware with package firewall
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security
Discussions
-
You must be logged in to vote รหัสAPIรั่ว
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Secret scanning does not appear to detect credentials inside zip archives. A 112-day real-world exposure.
Secret ScanningDetect and prevent the exposure of sensitive information in your code Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Secret scanning does not appear to detect credentials inside zip archives. A 112-day real-world exposure.
Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote [UX / Security] Permission request page doesn't show which app is requesting access
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote private boolean leavesRoot(File localBaseDirectory, String key) { try { Path base = localBaseDirectory.getCanonicalFile().toPath(); Path target = new File(localBaseDirectory, key).getCanonicalFile().toPath(); return !target.startsWith(base); } catch (IOException e) { throw new RuntimeException("Unable to canonicalize paths", e); } }
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Alerta
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Remove Immutability and Purge?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote CVE requests for published repository advisories stay empty (deeplook/svglib), support ticket auto-closed
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Obfuscated code suddenly appearing in next.config.js / postcss.config.js without direct file changes
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! -
You must be logged in to vote GHSA structured template required option dropdown doesn't work as expected
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Dependency graph support for two-document pnpm-lock.yaml (pnpm 12)
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security -
You must be logged in to vote Suspicious VS Code auto-execution task found in my GitHub repository – possible malware injection
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote 41 Pillow Dependabot alerts remain open after graph and updater confirm 13.0.0
BugGitHub or a GitHub feature is not working as intended DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Multiple published GitHub Security Advisories remain "No known CVE" after maintainers requested CVEs
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Security extension for the GitHub Copilot app
🚀 ShippedA feature has been released Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure CopilotCode accurately and faster with your AI powered pair-programmer. ChangelogA discussion post associated with a Changelog post Universe 2026githubuniverse.com Oct. 28-29 -
You must be logged in to vote Security Advisories Feature Requests & Improvements
Security and PrivacyProtect your repositories and data with GitHub's security and privacy features Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements -
You must be logged in to vote URGENT: Targeted malware in our repositories altering tailwind.config.js and .gitignore via force-push. Has anyone seen this?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security -
You must be logged in to vote Feature Request: Allow Public Key Registration for GitHub Apps
Apps API and WebhooksDiscussions related to GitHub's APIs or Webhooks Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements GitHub AppsThe automation and integration platform for GitHub -
You must be logged in to vote Excessive CVE Assignment Backlog and Delay in GHSA Process
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Product FeedbackShare your thoughts and suggestions on GitHub features and improvements Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Private registry access for Automatic Dependency Submission
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements -
You must be logged in to vote Feature request: support webauthn-sk-ecdsa-sha2-nistp256@openssh.com SSH keys
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security -
You must be logged in to vote Repository (non-Global) Security Advisories have major usability challenges
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements -
You must be logged in to vote Restrict release creation
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure QuestionAsk and answer questions about GitHub features and usage inactiveThis discussion has been automatically marked as inactive. This was formerly labeled stale.