GitHub security risk assessments now show repository protection status
The point
GitHub code security risk assessment and secret risk assessment now show whether findings are in protected or unprotected repositories. That helps teams identify where to extend security coverage. Organization admins and security managers can start an assessment from Assessments under their organization Security tab.
Why it matters
For builders, unprotected repos with findings become the clear first place to add protection.
Key details
- Available in GitHub Enterprise Cloud and GitHub Team
- Secret risk assessment will also be available in GitHub Enterprise Server 3.24
Original ~1 min → 25 sec here Source: GitHub Changelog, Nov 2, 2026