{"meta":{"title":"Linking code scanning alerts to GitHub issues","intro":"Create or connect GitHub issues to code scanning alerts to track security fixes in your team's workflow.","product":"Security and code quality","breadcrumbs":[{"href":"/en/code-security","title":"Security and code quality"},{"href":"/en/code-security/how-tos","title":"How-tos"},{"href":"/en/code-security/how-tos/manage-security-alerts","title":"Manage security alerts"},{"href":"/en/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts","title":"Code scanning alerts"},{"href":"/en/code-security/how-tos/manage-security-alerts/manage-code-scanning-alerts/track-alerts-in-issues","title":"Track alerts in issues"}],"documentType":"article"},"body":"# Linking code scanning alerts to GitHub issues\n\nCreate or connect GitHub issues to code scanning alerts to track security fixes in your team's workflow.\n\n> \\[!NOTE]\n> Code scanning alert tracking using GitHub issues is currently in public preview and subject to change.\n\nWhen code scanning identifies a vulnerability, you can link it to a new or existing GitHub issue. This makes security fixes visible in your planning and project boards alongside your team's regular development work. For more information about how alert tracking works, see [Code scanning alert tracking using issues](/en/code-security/concepts/code-scanning/alert-tracking-with-issues).\n\n## Creating an issue from an alert\n\nCreate a new issue directly from a code scanning alert, pre-populated with vulnerability details.\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under the repository name, click the ** Security and quality** tab. If you cannot see the \" Security and quality\" tab, select the **** dropdown menu, and then click ** Security and quality**.\n3. In the left sidebar, click ** Code scanning**.\n4. Under \"Code scanning,\" click the alert you'd like to explore to display the detailed alert page.\n5. On the right of the alert page, click **Tracking**.\n6. From the dropdown list, select **Create issue**.\n * Select the repository to create the issue in.\n * If applicable, select the template to use for your new issue.\n7. Fill in the issue, providing as much detail as possible.\n8. Optionally, assign the issue to a team member, add labels, or add it to a project.\n9. Click **Create**.\n\nThe newly created issue automatically links to the alert. View it by clicking the issue icon below the alert name.\n\n## Linking an alert to an existing issue\n\nConnect an existing issue to a code scanning alert.\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under the repository name, click the ** Security and quality** tab. If you cannot see the \" Security and quality\" tab, select the **** dropdown menu, and then click ** Security and quality**.\n3. In the left sidebar, click ** Code scanning**.\n4. Under \"Code scanning,\" click the alert you'd like to explore to display the detailed alert page.\n5. On the right of the alert page, click **Tracking**.\n6. From the dropdown list, select **Add existing GitHub issue**.\n7. Search by issue number or title, or select a different repository by clicking the Back icon.\n8. Click the issue you want to link.\n\nYou can link to issues in different repositories, as long as you have access and GitHub Issues is enabled.\n\n## Viewing linked issues\n\nOnce you link an issue to an alert, you can view the linked issue in two places:\n\n* **On the alert detail page**: Click the issue icon below the alert name to navigate to the full issue details.\n* **In the list of code scanning alerts**: Linked issues appear alongside their corresponding alerts in the main alerts list view.\n\n## Changing or unlinking a linked issue\n\n1. On GitHub, navigate to the main page of the repository.\n2. Under the repository name, click the ** Security and quality** tab. If you cannot see the \" Security and quality\" tab, select the **** dropdown menu, and then click ** Security and quality**.\n3. In the left sidebar, click ** Code scanning**.\n4. Under \"Code scanning,\" click the alert you'd like to explore to display the detailed alert page.\n5. On the right of the alert page, click **Tracking**.\n6. Click **Change or remove issue**.\n\nWhen you unlink an issue from an alert, the link is removed from the alert page and alert list. The issue itself remains unchanged."}