Dependabot alerts vs secret scanning vs push protection vs code scanning vs SECURITY.md

This sheet compares Dependabot alerts, Secret scanning, Push protection, Code scanning, SECURITY.md.

CriterionDependabot alertsSecret scanningPush protectionCode scanningSECURITY.md
PurposeNotify about vulnerable dependenciesFind secrets already in the repoBlock pushes containing supported secretsFind vulnerabilities and errors in codeInstructions for reporting vulnerabilities

The verdict, the full comparison, 5 rules and 2 traps are part of GH-900 access. Unlock GH-900.