| 1 | --- |
| 2 | title: Security overview |
| 3 | description: Open alerts across a workspace by type and severity, how they move, which repositories have which feature on, and those most in need. |
| 4 | --- |
| 5 | |
| 6 | `g1t.sh/<owner>/-/security` shows every repository you can see findings in |
| 7 | (you need Write on it, as on its own Security page): |
| 8 | |
| 9 | - **Totals.** Open secret scanning, code scanning and vulnerability alerts, |
| 10 | by severity, and how many opened and closed in the last 30 days. |
| 11 | - **Open alerts, by day.** A daily count of open alerts of each type, from a |
| 12 | snapshot g1t takes of every repository once a day. Show it as a table for |
| 13 | the numbers. |
| 14 | - **Repositories, most in need first.** Each repository with its open |
| 15 | critical and high alerts, and which features are on: push protection |
| 16 | (always), custom patterns, code scanning (when it last reported), |
| 17 | dependency review and security updates. |
| 18 | |
| 19 | The overview's tabs also lead to the workspace's |
| 20 | [bypass requests](/guides/security/secret-protection/#delegated-bypass), |
| 21 | [custom patterns](/guides/security/secret-protection/#custom-patterns) and |
| 22 | Security settings. |
| 23 | |
| 24 | ## Private repositories |
| 25 | |
| 26 | The overview counts private repositories on the g1t plan, which |
| 27 | [Security and quality](/guides/security/pricing/) comes with. A workspace |
| 28 | without the plan, with private repositories, sees each repository's open |
| 29 | secret and vulnerability alerts as a list instead, which is free, and a |
| 30 | prompt to start the plan. A workspace with only public repositories sees the |
| 31 | whole overview free. |
| 32 | |
| 33 | ## API |
| 34 | |
| 35 | `GET /workspaces/{workspace}/security/overview` returns the same, with |
| 36 | `days` (7 to 90, 30 by default) for the trend. Its scope is |
| 37 | `security:read`; over MCP it is the [`security` tool](/reference/mcp/#security)'s |
| 38 | `overview` action. Alerts across a workspace are at |
| 39 | `GET /workspaces/{workspace}/secret-scanning/alerts`, |
| 40 | `/code-scanning/alerts` and `/vulnerability-alerts`. |