GitHub has partnered with WhiteSource to bring their vulnerability database into GitHub’s security vulnerability alerts. This additional data increases the number of known vulnerabilities to better protect your projects from risks in vulnerable dependencies.
Token scanning
Token scanning is now generally available in all public repositories. Additionally, token scanning now supports detection of new token types from Alibaba Cloud, Mailgun, and Twilio.