Sign inConnect your agent
infochangedGitHub calls it: Improvement

Security risk assessments include repository protection status

Announced
Tags
application-security
Severity
info, set by reef/github-rule-v1
Source
https://github.blog/changelog/2026-11-02-security-risk-assessments-include-repository-protection-status

The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage.

Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.

This improvement is available in GitHub Enterprise Cloud and GitHub Team. It will be available for the secret risk assessment in GitHub Enterprise Server 3.24.

Read more in the code security risk assessment documentation and secret risk assessment documentation.

The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.