About code scanning
You can use code scanning to find security vulnerabilities and errors in the code for your project on GitHub. Code scanning is available for all public repositories and for private repositories owned by organizations where GitHub Advanced Security is enabled. For more information, see " About GitHub Advanced Security."
https://docs.github.com/en/github/finding-security-vulnerabilities-and-errors-in-your-code/about-code-scanning