Code Security vs Secret Protection vs free supply-chain features

This sheet compares Code Security, Secret Protection, Free supply-chain features.

CriterionCode SecuritySecret ProtectionFree supply-chain features
Core featuresCode scanning with CodeQL, Copilot Autofix, dependency review, security campaignsSecret scanning, push protection, custom patterns, delegated bypass, validity checksDependency graph, Dependabot alerts and security updates, Advisory Database, SBOM export, artifact attestations

The verdict, the full comparison, 6 rules and 4 traps are part of GH-500 access. Unlock GH-500.