GitHub Community
community community Code-security Discussions
Code Security Discussions
Conversations related to Code Security. Build security into your GitHub workflow with features to keep secrets and vulnerabilities out of your codebase, and to maintain your software supply chain.
Pinned to Code Security
-
You must be logged in to vote ❗[START HERE] Welcome to the Code Security Community! 🔐
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Show & TellDiscussions where community members share their projects, experiments, or accomplishments Community Check-InUpdates & News from GitHub Community Managers -
You must be logged in to vote [GHAS CodeQL Series] - Your Complete Guide to Organization-Wide Code Security
Security and PrivacyProtect your repositories and data with GitHub's security and privacy features Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Secret ScanningDetect and prevent the exposure of sensitive information in your code Security OverviewSummary of your repository's security status including vulnerabilities and security advisories Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Security ManagerManage and oversee your repository's security settings and alerts EnterpriseDiscussions related to GitHub Enterprise Cloud, Enterprise Server and Organizations GHASDiscussions related to GitHub Advanced Security Best PracticesBest practices, tips & tricks, and articles from GitHub and its users DevOpsBring teams together to deliver better software, faster. Enterprise AdminTopics specifically related to GitHub Enterprise administration Secret ManagementSecret mgmt: store/use/rotate secrets safely (scope, OIDC, vaults). source:uiDiscussions created via Community GitHub templates Secret ProtectionSecret Protection prevents exposures, protects credentials, and allows you to ship securely
Discussions
-
You must be logged in to vote Obfuscated code suddenly appearing in next.config.js / postcss.config.js without direct file changes
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! -
You must be logged in to vote Multiple published GitHub Security Advisories remain "No known CVE" after maintainers requested CVEs
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote yo I've been hacked and this is nuts.
source:otherDiscussions created outside of Community GitHub template -
You must be logged in to vote Significant Delay in CVE ID Assignment for Published Security Advisory
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Repository advisory published 5 weeks ago: CVE request accepted but never assigned, not in the Advisory Database
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure AI or ML ModelQuestion about a specific model or I’ve created a new one to share source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security -
You must be logged in to vote What security headaches has AI introduced in your projects lately? (2026 edition)
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Feature request: schedule advisory for automatic publication later
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Product FeedbackShare your thoughts and suggestions on GitHub features and improvements Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Hi. CJR LIVE Supportive Chat Agents 🟠2026
Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:otherDiscussions created outside of Community GitHub template -
You must be logged in to vote Request for Guidance on Suspended GitHub Account – Reinstatement Request Awaiting Response
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote 911
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Significant Delay in CVE ID Assignment for Published Security Advisory (Pending 7+ Days)
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote How to cancel an in-flight, but not yet issued, CVE request for a security advisory?
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Make GitHub Security smarter about the actual runtime context of dependencies
Code ScanningCode scanning: our code analysis features, powered by the CodeQL engine Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Product FeedbackShare your thoughts and suggestions on GitHub features and improvements Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote not sensitive
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote What is this charge? It deducts $0.33 from me every day, but I've already disabled security scanning.
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Re-verification/Repeat ApplicationAsking questions about when or how to re-verify Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates Code QualityCode Quality helps users improve code reliability, maintainability, and overall project health -
You must be logged in to vote Removed
DependabotAutomatically update dependencies to keep your project secure and up to date Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Re-verification/Repeat ApplicationAsking questions about when or how to re-verify Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Task pro
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Unexpected code obfuscation in configuration files (next.config.js / postcss.config.js)
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Need to remove email address from commit history associated with closed PRs
Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure otherGeneral topics and discussions that don't fit into other categories, but are related to GitHub QuestionAsk and answer questions about GitHub features and usage Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote Being charged for Secret Protection while I don't have it enabled
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:uiDiscussions created via Community GitHub templates -
You must be logged in to vote MILONGO VERMELON – Discussion
Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:otherDiscussions created outside of Community GitHub template -
You must be logged in to vote Repository advisory published 5 weeks ago: CVE request accepted but never assigned, not in the Advisory Database
Welcome 🎉Used to greet and highlight first-time discussion participants. Welcome to the community! source:otherDiscussions created outside of Community GitHub template -
You must be logged in to vote UNREGISTRABLE BUS-DODGING ATTACK - SUPPLY CHAIN SECURITY
BugGitHub or a GitHub feature is not working as intended Code SecurityBuild security into your GitHub workflow with features to keep your codebase secure source:uiDiscussions created via Community GitHub templates Supply chain securityDiscussions on Supply chain security
