Link code scanning alerts to GitHub Issues

Published: (April 14, 2026 at 02:28 PM EDT)
2 min read

Source: GitHub Changelog

GitHub code scanning alert for a SQL injection vulnerability with new Tracking section. The new section includes options to create or link existing GitHub issues to code scanning alerts.

You can now link code scanning alerts to GitHub Issues, bringing security remediation into your existing planning and tracking workflows. This functionality is in public preview.

Features

  • Link alerts to issues: Connect code scanning alerts to GitHub Issues from the alert page using the new “Tracking” section or from the issue page using the new “Security alerts” section in the “Relationships” panel.
  • See tracking status at a glance: Icons on repository and organization alert lists indicate which alerts are already tracked in issues, so you can quickly spot untracked alerts that need attention.
  • Filter alerts by tracking status: Use has:tracking and no:tracking filters on code scanning alert lists and security campaigns to focus on tracked or untracked alerts.

Availability

This feature is available in public preview on github.com for repositories with code scanning enabled, as well as on GitHub Enterprise Cloud with data residency.

Learn more

  • Managing code scanning alerts:
  • Resolving alerts with Copilot:

Feedback

Have feedback or questions? Join the community discussion to share your thoughts.

0 views
Back to Blog

Related posts

Read more »

Sunsetting SHA-1 in HTTPS on GitHub

What’s changing We’re going to remove the use of SHA‑1 in HTTPS for GitHub and our CDNs. This impacts browsers that are used to view the GitHub website, any so...

Manage agent skills with GitHub CLI

Agent skills are reshaping how developers work with AI coding agents. Today we’re launching gh skill, a new command in the GitHub CLI that makes it easy to disc...