Question

As an organization owner for a GitHub Enterprise Cloud org, you create a custom security configuration that enables Dependabot alerts, secret scanning, and CodeQL default setup. You want every newly created repository in the organization to automatically receive these settings without an admin manually applying them, while leaving existing repositories untouched for now. Within the security configurations interface, what action achieves this?

Accepted Answer

Set the custom security configuration as the default for newly created repositories in the organization

Answer

Apply the security configuration to all existing repositories and rely on GitHub to retroactively enroll future repositories

Answer

Create an organization ruleset that requires the security configuration as a merge condition on the default branch

Answer

Enable 'Automatically enable for new private and internal repositories' under each individual feature in org settings, ignoring the configuration