applying-the-github-recommended-security-configuration-in-your-organization.md

title	shortTitle	intro	permissions	versions	topics
Applying the GitHub-recommended security configuration in your organization	Apply recommended configuration	Secure your code with the security enablement settings created, managed, and recommended by {% data variables.product.company_short %}.	{% data reusables.permissions.security-org-enable %}	feature security-configurations-cloud	Code Security Secret Protection Organizations Security

About the {% data variables.product.prodname_github_security_configuration %}

The {% data variables.product.prodname_github_security_configuration %} is a collection of enablement settings for {% data variables.product.company_short %}'s security features that is created and maintained by subject matter experts at {% data variables.product.company_short %}. The {% data variables.product.prodname_github_security_configuration %} is designed to successfully reduce the security risks for low- and high-impact repositories. We recommend you apply this configuration to all the repositories in your organization.

Note

The {% data variables.product.prodname_github_security_configuration %} includes {% data variables.product.prodname_GH_code_security %} and {% data variables.product.prodname_GH_secret_protection %} features. Applying the configuration to private and internal repositories in your organization will incur usage costs or require licenses.

Applying the {% data variables.product.prodname_github_security_configuration %} to all repositories in your organization

{% data reusables.profile.access_org %} {% data reusables.organizations.org_settings %} {% data reusables.security-configurations.view-configurations-page %}

1. In the "{% data variables.product.company_short %} recommended" row of the configurations table for your organization, select the Apply to {% octicon "triangle-down" aria-hidden="true" %} dropdown menu, then click All repositories or All repositories without configurations.

   {% data reusables.security-configurations.default-configuration-exception-repo-transfers %}

{% data reusables.security-configurations.apply-configuration %}

Applying the {% data variables.product.prodname_github_security_configuration %} to specific repositories in your organization

{% data reusables.profile.access_org %} {% data reusables.organizations.org_settings %} {% data reusables.security-configurations.view-configurations-page %}

1. Optionally, in the "Apply configurations" section, filter the view to find the repositories you would like to apply the {% data variables.product.prodname_github_security_configuration %} to. To learn how to filter the repository table, see AUTOTITLE. {% data reusables.security-configurations.select-repos %}

2. Select the Apply configuration {% octicon "triangle-down" aria-hidden="true" %} dropdown menu, then click {% data variables.product.company_short %} recommended.

   {% data reusables.security-configurations.default-configuration-exception-repo-transfers %}

{% data reusables.security-configurations.apply-configuration %}

Enforcing the {% data variables.product.prodname_github_security_configuration %}

{% data reusables.profile.access_org %} {% data reusables.organizations.org_settings %} {% data reusables.security-configurations.view-configurations-page %}

1. In the "Security configurations" section, select "{% data variables.product.company_short %} recommended".
2. In the "Policy" section, next to "Enforce configuration", select Enforce from the dropdown menu.

{% data reusables.code-scanning.custom-security-configuration-enforcement-edge-cases %}

Next steps

After you apply the {% data variables.product.prodname_github_security_configuration %}, you can customize your organization-level security settings with {% data variables.product.prodname_global_settings %}. See AUTOTITLE.

{% data reusables.security-configurations.troubleshooting-next-step %}