Question

An enterprise has accumulated thousands of open Code Scanning alerts across dozens of repositories over the past two years. The security team wants to reduce this existing backlog of high-severity vulnerabilities by getting developers to actively remediate them, while providing context, tracking progress, and setting a deadline. Which GitHub security capability is specifically designed for this goal?

Accepted Answer

Create a security campaign that groups selected alerts, adds remediation guidance, assigns them to teams, and sets a due date to drive down the existing backlog

Answer

Enable push protection so that new vulnerable code cannot be committed to the affected repositories

Answer

Configure a repository ruleset that blocks pull request merges whenever any open Code Scanning alert exists

Answer

Turn on Dependabot version updates to automatically open pull requests that upgrade vulnerable dependencies