Question

A developer maintains an open-source project in a public repository under their personal account. They want to enable code scanning with CodeQL and secret scanning at no cost. Separately, their employer is evaluating GitHub Enterprise Cloud with GitHub Advanced Security for a set of private repositories. Which statement correctly describes feature availability across these two environments?

Accepted Answer

CodeQL code scanning and secret scanning (including push protection) are available for free on the public repository, while the same features on private repositories require a GitHub Advanced Security license.

Answer

All Advanced Security features, including CodeQL code scanning, are free on both public and private repositories as long as the organization uses GitHub Enterprise Cloud.

Answer

Secret scanning is free on public repositories, but CodeQL code scanning is never available on public repositories and can only run on licensed private repositories.

Answer

Advanced Security features are only free on private repositories; public repositories must purchase a license to enable code scanning or secret scanning.