On GitHub.com, navigate to the main page of the repository. Under the repository name, click Security. If you cannot see the "Security" tab, select the dropdown menu, and then click Security. If the repository has a security policy, it will be displayed.

Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in your repository. You can use code scanning to find, triage, and prioritize fixes for existing problems in your code.

Code scanning examines code and looks for bugs and security flaws. Any issues found are displayed by the system, enabling you to address them quickly and enhance the security of your application.

Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings. In the "Security" section of the sidebar, click Code security and analysis. Scroll down to the bottom of the page, and click Enable for secret scanning.