Features
Security alerts
Review dependency, code scanning and secret scanning metadata where the provider and your permissions support it.
In practice
Triage dependency, code, and secret scanning metadata by severity and repository. Open a finding at its provider to investigate and remediate.
Capabilities and limits
Alert access requires repository management permissions. GitLab support depends on instance and license; Forgejo and Gitea do not support these alert types. Secret values are never retained.

