megachangelog
Feature

Audit GitHub Code Quality finding dismissals and reopenings

Users can now review manual dismissals and reopenings of GitHub Code Quality findings in their organization or enterprise audit log, enabling better tracking and governance of code quality decisions.

You can now review manual dismissals and reopenings of GitHub Code Quality findings in your organization or enterprise audit log. Findings may appear in either your repository’s default-branch backlog or pull requests. Two new events record these actions:

  • repo.code_quality_findings_dismissed records a dismissal of one or more backlog findings.
  • repo.code_quality_findings_reopened records a reopening of one or more backlog findings.

Each event includes who made the request, when it happened, the repository and rule, and the identifiers and count of the affected findings.

For repositories with Code Quality enabled, you don’t need additional setup. If you have access to your organization audit log or enterprise audit log, filter by these action names to review activity. On GitHub Enterprise Cloud, you can also retrieve these events through the audit log API.

This improvement is generally available on GitHub Team and GitHub Enterprise Cloud, including enterprises with data residency. It isn’t available on GitHub Enterprise Server. For more on managing findings, see Fixing code quality findings in your repository backlog.

Join the GitHub Community discussion.

The post Audit GitHub Code Quality finding dismissals and reopenings appeared first on The GitHub Blog.

auditcode-qualitygovernancesecurity

Source: original entry ↗

More from GitHub

Follow GitHub to get its new changes in your feed and email digest.

Feature

GitHub App improvements for least privilege and management

GitHub has released improvements to GitHub Apps that enable developers to migrate away from classic personal access tokens, enhance app management capabilities, and request fewer sensitive permissions for better security.

github-appsauthsecuritypermissionspat
Announcement

Gemini 4 Argon now available in GitHub Copilot

Google's Gemini 4 Argon frontier model is now generally available in GitHub Copilot, designed for complex coding, agentic, and reasoning tasks to enhance developer productivity.

copilotaimodelsannouncement
Feature

Secret scanning now detects Anthropic, Salesforce, and Cloudsmith secrets

Secret scanning has been expanded to detect new secret types from Salesforce, Anthropic, and Cloudsmith, with Anthropic secrets now blocked by default via push protection. This helps prevent accidental exposure of third-party credentials in repositories.

secret-scanningsecurityapi-keyspush-protection
See all GitHub changes →