GitHub Advanced Security

Summary
GitHub Advanced Security is a suite of tools offered by GitHub that provides application security features such as secret protection, code security (static analysis, software composition analysis), and supply chain security. It aims to help developers and organizations identify and remediate vulnerabilities within their code and development workflows.
Rationale
GitHub offers several products and features that align with the provided feature list. GitHub Copilot and GitHub Models indicate code generation and AI capabilities. GitHub Advanced Security suggests a focus on safety and security, aligning with the 'Safety & Alignment Framework'. GitHub also provides API access and enterprise solutions.
Pricing
Tiered
Free
$0.00/ monthly
  • Unlimited public/private repositories
  • Dependabot security and version updates
  • 2,000 CI/CD minutes/month (free for public repositories)
  • 500MB of Packages storage (free for public repositories)
  • Issues & Projects
  • Community support
  • GitHub Copilot Access
  • GitHub Codespaces Access
Popular
Team
$4.00/ per user
  • Everything included in Free
  • Access to GitHub Codespaces (pay only for what you use)
  • Protected branches
  • Multiple reviewers in pull requests
  • Draft pull requests
  • Code owners
  • Required reviewers
  • Pages and Wikis
  • Environment deployment branches and secrets
  • 3,000 CI/CD minutes/month (free for public repositories)
  • 2GB of Packages storage (free for public repositories)
  • Web-based support
  • GitHub Secret Protection (add-on)
  • GitHub Code Security (add-on)
Most Expensive
Enterprise
$21.00/ per user
  • Everything included in Team
  • Data residency
  • Enterprise Managed Users
  • User provisioning through SCIM
  • Enterprise Account to centrally manage multiple organizations
  • Environment protection rules
  • Repository rules
  • Audit Log API
  • SOC1, SOC2, type 2 reports annually
  • FedRAMP Tailored Authority to Operate (ATO)
  • SAML single sign-on
  • Advanced auditing
  • GitHub Connect
  • 50,000 CI/CD minutes/month (free for public repositories)
  • 50GB of Packages storage (free for public repositories)
  • Premium support (exclusive add-on)
GitHub Secret Protection (Add-on)
$19.00/ per use
  • Push protection (Public repositories)
  • Secret scanning (Public repositories)
  • Provider patterns (Public repositories)
  • Provider notification (Public repositories)
  • Validity checks
  • Copilot secret scanning
  • Generic patterns
  • Custom patterns
  • Push protection bypass controls
  • Insights in security overview
  • Scan history API
  • Team or Enterprise plan required
GitHub Code Security (Add-on)
$30.00/ per use
  • Copilot Autofix (Public repositories)
  • Third party extensibility for code scanning alerts (Public repositories)
  • Contextual vulnerability intelligence and advice (Public repositories)
  • CodeQL (Public repositories)
  • Security campaigns
  • Dependency graph
  • Dependency review action
  • Dependabot custom auto-triage rules
  • Dependabot security updates with grouped updates
  • Dependabot version updates
  • Insights in security overview
  • Team or Enterprise plan required
Features
Must Have

API Access

Safety & Alignment Framework

Enterprise Solutions

Other

Code Generation