1
0
mirror of synced 2026-01-03 15:05:54 -05:00
Files
docs/content/admin/code-security/managing-github-advanced-security-for-your-enterprise/managing-github-advanced-security-features-for-your-enterprise.md

5.1 KiB

title, intro, permissions, versions, type, topics, shortTitle
title intro permissions versions type topics shortTitle
Managing GitHub Advanced Security features for your enterprise You can control {% data variables.product.prodname_GH_advanced_security %} features that secure and analyze code across all organizations owned by your enterprise. Enterprise owners can manage {% data variables.product.prodname_advanced_security %} features for organizations in an enterprise.
feature
secret-scanning-enterprise-level
how_to
Alerts
Advanced Security
Dependency graph
Secret scanning
Repositories
Manage GitHub Advanced Security

About management of {% data variables.product.prodname_advanced_security %} features

You can use {% data variables.product.prodname_advanced_security %} features to harden security for the organizations in your enterprise. To streamline management of {% data variables.product.prodname_advanced_security %}, you can enable or disable each feature for all existing and/or new repositories within the organizations owned by your enterprise.

{% ifversion secret-scanning-enterprise-level-api %}{% data reusables.secret-scanning.secret-scanning-enterprise-level-api %}{% endif %}

{% ifversion ghes %}For information about buying a license for {% data variables.product.prodname_GH_advanced_security %}, see "AUTOTITLE."{% elsif ghec %}For information about buying a license for {% data variables.product.prodname_GH_advanced_security %}, see "AUTOTITLE." {% elsif ghae %}There is no charge for {% data variables.product.prodname_GH_advanced_security %} on {% data variables.product.prodname_ghe_managed %} during the beta release.{% endif %}

If you have disallowed {% data variables.product.prodname_GH_advanced_security %} for an organization, that organization will not be affected by enabling a feature for all existing repositories or for all new repositories. For more information about disallowing {% data variables.product.prodname_GH_advanced_security %} for an organization, see "AUTOTITLE."

When you enable one or more security and analysis features for existing repositories, you will see any results displayed on {% data variables.product.prodname_dotcom %} within minutes.

{% data reusables.security.security-and-analysis-features-enable-read-only %}

Managing {% data variables.product.prodname_advanced_security %} features

{% data reusables.advanced-security.note-org-enable-uses-seats %}

{% data reusables.enterprise-accounts.access-enterprise %} {% data reusables.enterprise-accounts.settings-tab %}

  1. In the left sidebar, click Code security & analysis.

  2. Optionally, enable or disable a feature for all existing repositories.

    • To the right of the feature, click Disable all or Enable all. {% ifversion ghes or ghec %}If the control for "{% data variables.product.prodname_GH_advanced_security %}" is disabled, you have no available {% ifversion ghas-billing-UI-update %}licenses{% else %}seats{% endif %} for {% data variables.product.prodname_GH_advanced_security %}.{% endif %}

    Screenshot of "Enable all" or "Disable all" buttons for "Configure security and analysis" features

    • To confirm the change, click Enable/Disable all or Enable/Disable for eligible repositories.

      Screenshot of the dialog that is displayed when a user enables {% data variables.product.prodname_secret_scanning %} for an organization. The dialog asks the user for confirmation that the feature will be enabled for all the eligible repositories in the organization.

  3. Optionally, to enable or disable a feature automatically when new repositories are added, select the checkbox below the feature.

    Screenshot of a checkbox for enabling a feature for new repositories{% ifversion secret-scanning-custom-link-on-block %}

  4. Optionally, to include a resource link in the message that members will see when they attempt to push a secret, select Add a resource link in the CLI and web UI when a commit is blocked, then type a URL, and click Save link.

{% note %}

Note: When a custom link is configured for an organization, the organization-level value overrides the custom link set for the enterprise. For more information, see "AUTOTITLE".

{% endnote %}

Screenshot of the "Push protection" section of the settings for security and analysis features. The checkbox and the text field used for enabling a custom link are outlined in dark orange.{% endif %}