Quick Notes111 words
GitHub Advanced Security for GitHub and Azure DevOps — quick notes
GitHub Advanced Security — quick notes
| Capability | Detects |
|---|---|
| Code scanning (CodeQL) | Vulnerable patterns in your code |
| Secret scanning | Committed credentials |
| Dependency review | Vulnerable/non-compliant dependencies in a PR |
| Setup | Use when |
|---|---|
| Default setup | Standard projects — no workflow file to maintain |
| Advanced setup | Custom build, container scanning, custom query suites |
- GHAS for Azure DevOps = same capabilities on Azure Repos; findings in the Advanced Security tab.
- You do not need to migrate to GitHub to use CodeQL.
- Secret scanning = detect. Push protection = prevent.