Page History

...

1. On GitHub, navigate to the main page of the repository.
   Image RemovedImage Added
2. Under the repository name, click Security. If you cannot see the "Security" tab, select the  dropdown menu, and then click Security.
3. In the left sidebar, click Code scanning.
4. Optionally, use the free text search box or the dropdown menus to filter alerts. For example, you can filter by the tool that was used to identify alerts.
   Image RemovedImage Added
5. Under "Code scanning," click the alert you'd like to explore to display the detailed alert page. The status and details on the alert page only reflect the state of the alert on the default branch of the repository, even if the alert exists in other branches. You can see the status of the alert on non-default branches in the Affected branchessection on the right-hand side of the alert page. If an alert doesn't exist in the default branch, the status of the alert will display as "in pull request" or "in branch" and will be colored grey. The Development section shows linked branches and pull requests that will fix the alert.

...

1. Under the repository name, click  Security. If you cannot see the "Security" tab, select the  dropdown menu, and then click Security.
   Image RemovedImage Added

1. In the left sidebar, click  Code scanning.
2. Click the name of an alert.
3. If Copilot Autofix can suggest a fix, at the top of the page, click  Generate fix.
4. Once the suggested fix has been generated, at the bottom of the page, you can click Create PR with fix to automatically generate a pull request with the suggested fix. A new branch is created from the default branch, the generated fix is committed and a draft pull request is created. You can test and edit the suggested fix as you would with any other fix.

...

1. On GitHub, navigate to the main page of the repository.
2. Under the repository name, click  Security. If you cannot see the "Security" tab, select the  dropdown menu, and then click Security.
3. In the left sidebar, click  Code scanning.
4. If you want to dismiss an alert, it's important to explore the alert first, so that you can choose the correct dismissal reason. Click the alert you'd like to explore.
5. Review the alert, then click Dismiss alert and choose, or type, a reason for closing the alert.
   Image RemovedImage Added

It's important to choose the appropriate reason from the drop-down menu as this may affect whether a query continues to be included in future analysis. Optionally, you can comment on a dismissal to record the context of an alert dismissal. The dismissal comment is added to the alert timeline and can be used as justification during auditing and reporting.

...