Host open source projects in public GitHub repositories, accessible via web or command line. Public repositories are accessible to anyone at GitHub.com.

Host code in private GitHub repositories, accessible via appliance, web, and command line. Private repositories are only accessible to you and people you share them with.

Invite any GitHub member, or all GitHub members, to work with you on code in a public repository you control – including making changes and opening issues.

Invite any GitHub member, or all GitHub members, to work with you on code in a private repository you control – including making changes and opening issues.

Track bugs, enhancements, and other requests, prioritize work, and communicate with stakeholders as changes are proposed and merged.

Visualize and manage issues and pull requests across tables, boards, and roadmaps with custom fields and views that you can arrange to suit your workflow.

Track progress on groups of issues or pull requests in a repository, and map groups to overall project goals.

Discuss any topic, unattached to a specific project or issue. Control who has access, notify discussion participants with updates, and link from anywhere.

Manage access to projects on a team-by-team, or individual user, basis.

Host documentation and simple websites for your project in a wiki format that contributors can easily edit either on the web or command line.

Assign more than one person to an issue.

Prevent secret exposures by proactively blocking secrets before they reach your code.

Detect and manage exposed secrets across git history, pull requests, issues, and wikis.

GitHub collaborates with AWS, Azure, and Google Cloud to detect secrets with high accuracy. This minimizes false positives, letting you focus on what matters.

Providers get real-time alerts when their tokens appear in public code, enabling them to notify, quarantine, or revoke secrets.

Prioritize active secrets with validity checks for provider patterns.

Use AI to detect unstructured like passwords—without the noise.

Detect tokens from unknown providers, including HTTP authentication headers, connection strings, and private keys.

Create your own patterns and find organization-specific secrets.

Manage who can bypass push protection and when.

Understand how risk is distributed across your organization with security metrics and insight dashboards.

Review how and when GitHub scans your repositories for secrets.

Powered by GitHub Copilot, generate automatic fixes for 90% of alert types in JavaScript, Typescript, Java, and Python.

Centralize your findings across all your scanning tools via SARIF upload to GitHub.

Quickly remediate with context provided by Copilot Autofix.

Uncover vulnerabilities in your code with our industry-leading semantic code analysis.

Reduce security debt and burn down your security backlog with security campaigns.

Get a clear view of your project’s dependencies with a summary of manifest, lock files, and submitted dependencies via the API.

Catch insecure dependencies before adding them and get insights on licenses, dependents, and age.

Define alert-centric policies to control how Dependabot handles alerts and pull requests.

Automated pull requests that batch dependency updates for known vulnerabilities.

Automated pull requests that keep your dependencies up to date.

Get a clear view of risk distribution with security metrics and dashboards.

Enforce consistent code standards, security, and compliance across branches and tags.

Export a software bill of materials (SBOM) for your repository.

Ensure unfalsifiable provenance and integrity for your software.

Define users' level of access to your code, data and settings.

Use an extra layer of security with two factor authentication (2FA) when logging into GitHub.

Quickly review the actions performed by members of your organization.

Keep copies of audit log data to ensure secure IP and maintain compliance for your organization.

Share features and workflows between your GitHub Enterprise Server instance and GitHub Enterprise Cloud.

Use an identity provider to manage the identities of GitHub users and applications.

Access GitHub Enterprise Server using your existing accounts and centrally manage repository access.

Limit access to known allowed IP addresses.

Install apps that integrate directly with GitHub's API to improve development workflows – or build your own for private use or publication in the GitHub Marketplace.

Define tests that GitHub automatically runs against code being committed to your repository, and get details about failures and what is causing them.

Create requirements for automatically accepting or rejecting a push based on the contents of the push.