Enterprise-level CodeQL pull request alerts report

[github-product-roadmap]

Summary

Elevate your enterprise's security with this new enterprise-level report, designed to proactively monitor and track preventative remediation activities and autofix metrics, ensuring vulnerabilities are addressed swiftly and efficiently. Additionally, this report is also designed to highlight the substantial value and return on investment that GitHub Advanced Security prevention tactics brings to your security operations.

Intended Outcome

Many security managers struggle to quantify the preventative impact of GitHub Advanced Security, understand the value that autofix delivers and communicate its benefits effectively. Wit this report, you'll have the data-driven metrics at your fingertips to effectively drive prevention strategies, demonstrate impact, and, ultimately, significantly mitigate enterprise risks.

How will it work?

Introducing a new, comprehensive report that aggregates CodeQL pull request alerts and breaks them down by repository, providing deep insights into your security landscape. This report will feature key metrics, including the most prevalent rules triggering pull request alerts, and detailed breakdowns of alert statuses—unresolved, merged, dismissed, and specifically, those fixed with or without autofix. Additionally, it will track and display trends in pull request alert volumes, offering a historical view that can be filtered extensively to suit your analytical needs.

Prototype report