Periodic code scanning of inactive repositories - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Periodic code scanning of inactive repositories \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"GitHub code scanning now supports scheduled security scans of repositories that have had no pushes or pull requests for six months or more. Organizations can use this to maintain continuous…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-06-09T07:27:17+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2026\/06\/periodicscan.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-06-09-periodic-code-scanning-of-inactive-repositories\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-06-09-periodic-code-scanning-of-inactive-repositories\\\/\",\"name\":\"Periodic code scanning of inactive repositories - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"datePublished\":\"2026-06-09T07:21:22+00:00\",\"dateModified\":\"2026-06-09T07:27:17+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-06-09-periodic-code-scanning-of-inactive-repositories\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-06-09-periodic-code-scanning-of-inactive-repositories\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-06-09-periodic-code-scanning-of-inactive-repositories\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Periodic code scanning of inactive repositories\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n","yoast_head_json":{"title":"Periodic code scanning of inactive repositories - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/","og_locale":"en_US","og_type":"article","og_title":"Periodic code scanning of inactive repositories \u00b7 GitHub Changelog","og_description":"GitHub code scanning now supports scheduled security scans of repositories that have had no pushes or pull requests for six months or more. Organizations can use this to maintain continuous…","og_url":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-06-09T07:27:17+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/06\/periodicscan.jpg","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute","Written by":"Allison"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/","url":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/","name":"Periodic code scanning of inactive repositories - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"datePublished":"2026-06-09T07:21:22+00:00","dateModified":"2026-06-09T07:27:17+00:00","breadcrumb":{"@id":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"Periodic code scanning of inactive repositories"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/96660","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":2,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/96660\/revisions"}],"predecessor-version":[{"id":96663,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/96660\/revisions\/96663"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=96660"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/type?post=96660"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/label?post=96660"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/group?post=96660"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=96660"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}

{"id":96660,"date":"2026-06-09T00:21:22","date_gmt":"2026-06-09T07:21:22","guid":{"rendered":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories"},"modified":"2026-06-09T00:27:17","modified_gmt":"2026-06-09T07:27:17","slug":"periodic-code-scanning-of-inactive-repositories","status":"publish","type":[3521],"link":"https:\/\/github.blog\/changelog\/2026-06-09-periodic-code-scanning-of-inactive-repositories","title":{"rendered":"Periodic code scanning of inactive repositories"},"content":{"rendered":"\n

GitHub code scanning now supports scheduled security scans of repositories that have had no pushes or pull requests for six months or more. Organizations can use this to maintain continuous security coverage across all their repositories, including codebases that are no longer under active development. This setting only applies to repositories that use code scanning default setup.<\/p>\n

When enabled, inactive repositories are automatically scanned every 30 days. This setting applies to all repositories in the organization. You can turn this on from Settings > Advanced Security > Global Settings<\/strong> by enabling Keep scheduled scans running every 30 days for inactive repositories<\/strong>.<\/p>\n

To learn more, see configuring global security settings for your organization<\/a>.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"