Configure specific tools
Learn how to configure specific GitHub security and quality tools—such as the dependency graph, code scanning, secret scanning, and Dependabot—for your enterprise.
Enabling the dependency graph for your enterprise
You can allow users to identify their projects' dependencies by enabling the dependency graph.
Configuring code scanning for your appliance
You can enable, configure, and disable code scanning for your enterprise. Code scanning allows users to scan code for vulnerabilities and errors.
Configuring dependency review for your appliance
To help users understand dependency changes when reviewing pull requests, you can enable, configure, and disable dependency review for GitHub Enterprise Server.
Configuring secret scanning for your appliance
You can enable, configure, and disable secret scanning for GitHub Enterprise Server. Secret scanning allows users to scan code for accidentally committed secrets.
Viewing the vulnerability data for your enterprise
You can view vulnerability data from the GitHub Advisory Database on GitHub Enterprise Server.
Configuring Dependabot to work with limited internet access
You can configure Dependabot to generate pull requests for version and security updates using private registries when GitHub Enterprise Server has limited, or no, internet access.