Licenses for GitHub Advanced Security
The Advanced Security product has two license SKUs (stock keeping units):
- GitHub Secret Protection, which includes features that help you detect and prevent secret leaks, such as secret scanning and push protection.
- GitHub Code Security, which includes features that help you find and fix vulnerabilities, like code scanning, premium Dependabot features, and dependency review.
For more information, see feature summary and pricing information and About GitHub Advanced Security.
How usage of GitHub Advanced Security licenses is measured
A subset of Advanced Security features are available to all public repositories on GitHub.com free of charge. If you change the visibility of a public repository to private and don't pay for Advanced Security, Advanced Security features will be disabled for that repository.
Use of Advanced Security features in all other repositories requires a license. Your license usage is calculated based on the number of unique, active committers to repositories with GitHub Secret Protection or GitHub Code Security features enabled. GitHub App bots are ignored. For information about differences between bot and machine accounts, see Differences between GitHub Apps and OAuth apps.