{"meta":{"title":"Informationen zu GitHub Advanced Security","intro":"GitHubstellt Kunden, die eine Lizenz erwerben oder im Rahmen einer Lizenz, zusätzliche Sicherheitsfunktionen zur Verfügung.GitHub Code Security Einige Features sind standardmäßig für öffentliche Repositorys aktiviert.","product":"Erste Schritte","breadcrumbs":[{"href":"/de/get-started","title":"Erste Schritte"},{"href":"/de/get-started/learning-about-github","title":"Informationen zu GitHub"},{"href":"/de/get-started/learning-about-github/about-github-advanced-security","title":"GitHub Advanced Security"}],"documentType":"article"},"body":"# Informationen zu GitHub Advanced Security\n\nGitHubstellt Kunden, die eine Lizenz erwerben oder im Rahmen einer Lizenz, zusätzliche Sicherheitsfunktionen zur Verfügung.GitHub Code Security Einige Features sind standardmäßig für öffentliche Repositorys aktiviert.\n\n\n## About GitHub Advanced Security products\n\nGitHub has many features that help you improve and maintain the quality of your code. Some of these are included in all plans, such as dependency graph and Dependabot alerts.\n\nOther security features require you to purchase one of GitHub's Advanced Security products:\n\n* **GitHub Secret Protection**, which includes features that help you detect and prevent secret leaks, such as secret scanning and push protection.\n* **GitHub Code Security**, which includes features that help you find and fix vulnerabilities, like code scanning, premium Dependabot features, and dependency review.\n\nSome of these features, such as code scanning and secret scanning, are enabled for public repositories by default. To run the feature on your private or internal repositories, you must purchase the relevant GitHub Advanced Security product.\n\nYou must be on a GitHub Team or GitHub Enterprise plan in order to purchase GitHub Code Security or GitHub Secret Protection. For more information, see [GitHub's plans](/en/get-started/learning-about-github/githubs-plans) and [GitHub Advanced Security license billing](/en/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/about-billing-for-github-advanced-security).\n\n## GitHub Code Security\n\nYou get the following features with GitHub Code Security:\n\n* **Code scanning**: Search for potential security vulnerabilities and coding errors in your code using CodeQL or a third-party tool.\n\n* **CodeQL CLI**: Run CodeQL processes locally on software projects or to generate code scanning results for upload to GitHub.\n\n* **Copilot Autofix**: Get automatically generated fixes for code scanning alerts.\n\n* **Security campaigns**: Reduce security debt at scale.\n\n* **Custom auto-triage rules for Dependabot**: Manage your Dependabot alerts at scale, by automating which alerts you want to ignore, snooze, or trigger a Dependabot security update for.\n\n* **Dependency review**: Show the full impact of changes to dependencies and see details of any vulnerable versions before you merge a pull request.\n\n* **Security overview**: Understand the distribution of risk across your organization.\n\nThe table below summarizes the availability of GitHub Code Security features for public and private repositories.\n\n
\n\nFor more information about features, see [GitHub security features](/en/code-security/getting-started/github-security-features).\n\n## GitHub Secret Protection\n\nYou get the following features with GitHub Secret Protection:\n\n* **Secret scanning**: Detect secrets, for example keys and tokens, that have been checked into a repository and receive alerts.\n* **Push protection**: Prevent secret leaks before they happen by blocking commits containing secrets.\n* **Copilot secret scanning**: Leverage AI to detect unstructured credentials, such as passwords, that have been checked into a repository.\n* **Custom patterns**: Detect and prevent leaks for organization-specific secrets.\n* **Delegated bypass for push protection** and **Delegated alert dismissal**: Implement an approval process for better control over who in your enterprise can perform sensitive actions, supporting governance at scale.\n* **Security campaigns**: Remediate exposed secrets at scale by creating a campaign and collaborating to fix them.\n* **Security overview**: Understand the distribution of risk across your organization.\n\nThe table below summarizes the availability of GitHub Secret Protection features for public and private repositories.\n\n
\n\nFor more information about individual features, see [GitHub security features](/en/code-security/getting-started/github-security-features).\n\n## Run a free security risk assessment\n\nGet started with security risk assessments\n\nOrganizations on GitHub Team and GitHub Enterprise can run free security risk assessments to understand their exposure to security vulnerabilities:\n\n* **Secret leaks**: Scan your organization for leaked secrets and see how many could have been prevented by GitHub Secret Protection. See [About secret security with GitHub](/en/code-security/concepts/secret-security/about-secret-security-with-github#secret-risk-assessment).\n\n* **Code vulnerabilities**: Scan up to 20 of your most active repositories and see how many vulnerabilities could be automatically fixed with Copilot Autofix if you enable GitHub Code Security. See [Code security risk assessment](/en/code-security/concepts/code-scanning/code-security-risk-assessment).\n\n## Deploying GitHub Code Security and GitHub Secret Protection\n\nTo learn about what you need to know to plan your deployment of GitHub Code Security and GitHub Secret Protection at a high level and to review the rollout phases we recommended, see [Adopting GitHub Advanced Security at scale](/en/code-security/adopting-github-advanced-security-at-scale).\n\n## Enabling features\n\nYou can quickly enable security features at scale with a security configuration, a collection of security enablement settings you can apply to repositories in an organization. You can customize Advanced Security features at the organization level with global settings. See [About enabling security features at scale](/en/code-security/securing-your-organization/introduction-to-securing-your-organization-at-scale/about-enabling-security-features-at-scale).\n\nIf you are on a GitHub Team or GitHub Enterprise plan, license use for the entire team or enterprise is shown on your license page. See [Viewing your usage of metered products and licenses](/en/billing/managing-billing-for-your-products/managing-billing-for-github-advanced-security/viewing-your-github-advanced-security-usage).\n\n## Managing GitHub Advanced Security\n\nEnterprise owners can manage GitHub Advanced Security licensing and access for their enterprise, including disabling GitHub Advanced Security across all repositories and preventing future re-enablement. See [Managing volume licenses for GitHub Advanced Security](/en/billing/how-tos/products/manage-ghas-licenses#disabling-github-advanced-security-across-your-enterprise).\n\nFor information about managing your GitHub Advanced Security license, see [Managing your paid use of Advanced Security](/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/managing-your-github-advanced-security-license-usage).\n\n## About GitHub Advanced Security Certification\n\nYou can highlight your knowledge by earning a GitHub Advanced Security certificate with GitHub Certifications. The certification validates your expertise in vulnerability identification, workflow security, and robust security implementation. See [About GitHub Certifications](/en/get-started/showcase-your-expertise-with-github-certifications/about-github-certifications).\n\n## About GitHub Advanced Security with Azure Repos\n\nIf you want to use GitHub Advanced Security with Azure Repos, see [GitHub Advanced Security & Azure DevOps](https://resources.github.com/topics/github-advanced-security/) in our resources site. For documentation, see [Configure GitHub Advanced Security for Azure DevOps](https://learn.microsoft.com/en-us/azure/devops/repos/security/configure-github-advanced-security-features) in Microsoft Learn.\n\n## Further reading\n\n* [GitHub security features](/en/code-security/getting-started/github-security-features)\n* [GitHub public roadmap](https://github.com/github/roadmap)"}