Skip to main content

Exporting data from security overview

From security overview, you can export CSV files of the data used for your organization or enterprise's overview, risk, coverage, and CodeQL pull request alerts pages.

谁可以使用此功能?

访问需要:

  • 组织视图:对组织中的存储库的写入访问权限
  • 企业视图:组织所有者和安全经理

具有 GitHub Secret Protection or GitHub Code Security 的 GitHub Team 帐户拥有的组织,或 GitHub Enterprise 帐户拥有的组织

About exporting your security overview data

可以从安全概览中下载逗号分隔值 (CSV) 文件,其中包含来自组织或企业安全概览多个页面的数据。 此类数据文件可用于安全研究和深度数据分析等工作,并可以轻松地与外部数据集集成。

The overview page contains data about security alerts across your organization or enterprise, while the risk and coverage pages contain data about repositories and how they are affected by security alerts or covered by security features. The CodeQL pull request alerts page contains data about CodeQL alerts that were caught in pull requests merged to the default branch.

The CSV file you download will contain data corresponding to the filters you have applied to security overview. For example, if you add the filter dependabot-alerts:enabled, your file will only contain data for repositories that have enabled Dependabot alerts.

注意

In the "Teams" column of the CSV file, each repository will list a maximum of 20 teams with write access to that repository. If more than 20 teams have write access to a repository, the data will be truncated.

Exporting overview, coverage, and risk data from your organization's security overview

  1. 在 GitHub 的右上角,单击个人资料图片,然后单击“ Your organizations”****。

  2. In the "Organizations" section, select the organization for which you would like to download security overview data.

  3. 在组织名称下,单击“ Security”****。

    组织的水平导航栏的屏幕截图。 标有盾牌图标和“安全”字样的选项卡以深橙色轮廓标出。

  4. In the "Security" sidebar, choose the page that you want to export data from by clicking on Overview, Coverage, Risk or CodeQL pull request alerts.

  5. Next to the search bar, click Export CSV.

    It may take a moment for GitHub to generate the CSV file of your data. Once the CSV file generates, the file will automatically start downloading, and a banner will appear confirming your report is ready. If you are downloading the CSV from the overview page, you will also receive an email when your report is ready, containing a link to download the CSV.

注意

The summary views ("Overview", "Coverage" and "Risk") show data only for default alerts. Code scanning alerts from third-party tools, and secret scanning alerts for non-provider patterns or for ignored directories are all omitted from these views. Consequently, files exported from the summary views do not contain data for these types of alert.

Exporting overview, coverage, and risk data from your enterprise's security overview

  1. 导航至 GitHub Enterprise Cloud。

  2. 在 GitHub 的右上角,单击你的个人资料图片。

  3. 根据环境,单击“ 企业”,或单击“ 企业 ”,然后单击要查看的企业。

  4. 在页面顶部,单击“ Security”。

  5. Choose the page that you want to export data from by clicking on Overview, Risk, or Coverage.

  6. Next to the search bar, click Export CSV.

    It may take a moment for GitHub to generate the CSV file of your data. Once the CSV file generates, the file will automatically start downloading, and a banner will appear confirming your report is ready. If you are downloading the CSV from the overview page, you will also receive an email when your report is ready, containing a link to download the CSV.