Code scanning is a feature that you use to analyze the code in a GitHub repository to find security vulnerabilities and coding errors. Any problems identified by the analysis are shown in your repository.

Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings. In the "Security" section of the sidebar, click Code security and analysis. Scroll down to the bottom of the page, and click Enable for secret scanning.

Code scanning examines code and looks for bugs and security flaws. Any issues found are displayed by the system, enabling you to address them quickly and enhance the security of your application.

About GitHub's security features GitHub has security features that help keep code and secrets secure in repositories and across organizations. Some features are available for repositories on all plans. Additional features are available to enterprises that use GitHub Advanced Security.