What is GitHub Advanced Security?

What is GitHub Advanced Security?

• A. A suite of tools with features that give organizations the ability to identify security vulnerabilities in codebase and environment.
• B. A cloud hosting service for running applications.
• C. A code formatting utility for standardizing syntax.
• D. A project management dashboard for issue tracking.

Answer: (A)

GitHub Advanced Security is a set of integrated security tools inside GitHub that helps teams find and fix vulnerabilities as they develop. It includes code scanning, which analyzes your codebase (often using CodeQL) to uncover security flaws, secret scanning to detect exposed credentials, and dependency review to flag risky open-source libraries before they’re merged. This collection is designed to identify vulnerabilities in both the codebase and the surrounding environment—for example, configurations and dependencies—so issues can be addressed early in pull requests and CI workflows. The other options describe features outside of security tooling, like hosting, formatting, or project management, and don’t capture the security-focused capabilities of Advanced Security.

GitHub Advanced Security is a set of integrated security tools inside GitHub that helps teams find and fix vulnerabilities as they develop. It includes code scanning, which analyzes your codebase (often using CodeQL) to uncover security flaws, secret scanning to detect exposed credentials, and dependency review to flag risky open-source libraries before they’re merged. This collection is designed to identify vulnerabilities in both the codebase and the surrounding environment—for example, configurations and dependencies—so issues can be addressed early in pull requests and CI workflows. The other options describe features outside of security tooling, like hosting, formatting, or project management, and don’t capture the security-focused capabilities of Advanced Security.