Advanced Security: one license per unique active committer (90-day window)
Catalog row in Vendor License Rules · Cited
- Kind
- Counting
- Statement
- As published 2026-09-30: use of Secret Protection or Code Security outside public repositories on github.com requires a license. Each active committer to at least one repository with the product enabled uses one license, measured across the whole organization or enterprise; a committer is active if one of their commits was pushed within the last 90 days. GitHub App bots are ignored.
- Applies when
- Enabling Advanced Security on private or internal repositories, GHE.com or Enterprise Server.
- Applies to
- GitHub Secret Protection; GitHub Code Security
- Related metrics