Code Security risk assessment available for organizations - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Code Security risk assessment available for organizations \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"Organization admins and security managers can now run a free Code Security risk assessment to review security vulnerabilities across their organization. The assessment summarizes vulnerabilities by severity, rule type, and…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-04-08T16:54:36+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2026\/04\/573086349-4e697615-5ed5-4769-81b9-20f452e1ad75.png\" \/>\n\t<meta property=\"og:image:width\" content=\"2064\" \/>\n\t<meta property=\"og:image:height\" content=\"1084\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/\",\"name\":\"Code Security risk assessment available for organizations - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084\",\"datePublished\":\"2026-04-08T16:52:15+00:00\",\"dateModified\":\"2026-04-08T16:54:36+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/04\\\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084\",\"width\":2064,\"height\":1084,\"caption\":\"Screenshot of the new Code Security risk assessment\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-04-08-code-security-risk-assessment-available-for-organizations\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Code Security risk assessment available for organizations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n","yoast_head_json":{"title":"Code Security risk assessment available for organizations - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/","og_locale":"en_US","og_type":"article","og_title":"Code Security risk assessment available for organizations \u00b7 GitHub Changelog","og_description":"Organization admins and security managers can now run a free Code Security risk assessment to review security vulnerabilities across their organization. The assessment summarizes vulnerabilities by severity, rule type, and…","og_url":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-04-08T16:54:36+00:00","og_image":[{"width":2064,"height":1084,"url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/04\/573086349-4e697615-5ed5-4769-81b9-20f452e1ad75.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute","Written by":"Allison"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/","url":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/","name":"Code Security risk assessment available for organizations - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/04\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084","datePublished":"2026-04-08T16:52:15+00:00","dateModified":"2026-04-08T16:54:36+00:00","breadcrumb":{"@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/04\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/04\/571943721-81e3e027-be7a-46c3-967e-b7362d5f4cd8.png?fit=2064%2C1084","width":2064,"height":1084,"caption":"Screenshot of the new Code Security risk assessment"},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"Code Security risk assessment available for organizations"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/95123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":1,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/95123\/revisions"}],"predecessor-version":[{"id":95126,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/95123\/revisions\/95126"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/95124"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=95123"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/type?post=95123"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/label?post=95123"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/group?post=95123"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=95123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":95123,"date":"2026-04-08T09:52:15","date_gmt":"2026-04-08T16:52:15","guid":{"rendered":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations"},"modified":"2026-04-08T09:54:36","modified_gmt":"2026-04-08T16:54:36","slug":"code-security-risk-assessment-available-for-organizations","status":"publish","type":[3521],"link":"https:\/\/github.blog\/changelog\/2026-04-08-code-security-risk-assessment-available-for-organizations","title":{"rendered":"Code Security risk assessment available for organizations"},"content":{"rendered":"\n

Organization admins and security managers can now run a free Code Security risk assessment<\/strong> to review security vulnerabilities across their organization.<\/p>\n

The assessment summarizes vulnerabilities by severity, rule type, and programming language. It includes remediation guidance, highlighting where Copilot Autofix<\/a> can automatically suggest fixes. The report enables you to identify high-impact repositories to prioritize, and helps understand how to remediate security issues faster. To initiate an assessment, navigate to the “Assessments” section under your organization’s Security<\/strong> tab.<\/p>\n

$\"Video$ <\/p>\n

This feature is available in GitHub Enterprise Cloud and GitHub Team, and will ship in GitHub Enterprise Server 3.22.<\/p>\n

Join the discussion in GitHub Community<\/a>.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"