You can run queries against a CodeQL database extracted from a codebase.| GitHub Docs
When code scanning identifies a problem in a pull request, you can review the highlighted code and resolve the alert.| GitHub Docs
From the security view, you can view, fix, or dismiss alerts for potential vulnerabilities or errors in your project's code.| GitHub Docs