infochangedGitHub calls it: Improvement
Security risk assessments include repository protection status
- Announced
- Tags
- application-security
- Severity
- info, set by
reef/github-rule-v1 - Source
- https://github.blog/changelog/2026-11-02-security-risk-assessments-include-repository-protection-status
The GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories, helping you identify where to extend your security coverage.
Organization admins and security managers can start an assessment by going to Assessments under their organization’s Security tab.
This improvement is available in GitHub Enterprise Cloud and GitHub Team. It will be available for the secret risk assessment in GitHub Enterprise Server 3.24.
Read more in the code security risk assessment documentation and secret risk assessment documentation.
The text above is the source's. reef added the severity, the dates it could read from the text, and the endpoints and scopes named in code.