{"id":98851,"date":"2026-09-15T12:31:58","date_gmt":"2026-09-15T19:31:58","guid":{"rendered":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations"},"modified":"2026-09-15T12:35:57","modified_gmt":"2026-09-15T19:35:57","slug":"enforce-github-advanced-security-configurations","status":"publish","type":[3522],"link":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations","title":{"rendered":"Enforce GitHub Advanced Security configurations"},"content":{"rendered":"\n

Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and compliance teams apply consistent policies across their enterprise. Previously, enforcement only prevented repository owners from changing these settings.<\/p>\n

To configure enforcement in a security configuration, select Don’t enforce<\/strong>, Enforce for repository owners<\/strong>, or Enforce for repository and organization owners<\/strong> from the “Enforcement” dropdown menu.<\/p>\n

Learn more in our docs about security configurations<\/a>.<\/p>\n<\/body><\/html>\n","protected":false},"excerpt":{"rendered":"

Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and…<\/p>\n","protected":false},"author":2106,"featured_media":98852,"template":"","meta":{"_gh_post_show_toc":"","_gh_post_is_no_robots":"","_gh_post_is_featured":"","_gh_post_is_excluded":"","_gh_post_is_unlisted":"","_gh_post_related_link_1":"","_gh_post_related_link_2":"","_gh_post_related_link_3":"","_gh_post_sq_img":"","_gh_post_sq_img_id":"","_gh_post_cta_title":"","_gh_post_cta_text":"","_gh_post_cta_link":"","_gh_post_cta_button":"","_gh_post_recirc_hide":"","_gh_post_recirc_col_1":"","_gh_post_recirc_col_2":"","_gh_post_recirc_col_3":"","_gh_post_recirc_col_4":"","_featured_video":"","_gh_post_additional_query_params":"","footnotes":"","_links_to":"","_links_to_target":"","primary_cta":"","primary_cta_url":"","secondary_cta":"","secondary_cta_url":""},"label":[3627],"group":[3918],"coauthors":[3100],"class_list":["post-98851","changelog","type-changelog","status-publish","has-post-thumbnail","hentry","changelog-type-improvements","changelog-label-application-security","changelog-group-09-2026"],"yoast_head":"\nEnforce GitHub Advanced Security configurations - GitHub Changelog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Enforce GitHub Advanced Security configurations \u00b7 GitHub Changelog\" \/>\n<meta property=\"og:description\" content=\"Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and…\" \/>\n<meta property=\"og:url\" content=\"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/\" \/>\n<meta property=\"og:site_name\" content=\"The GitHub Blog\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-15T19:35:57+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/github.blog\/wp-content\/uploads\/2026\/09\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1794\" \/>\n\t<meta property=\"og:image:height\" content=\"922\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n\t<meta name=\"twitter:label2\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data2\" content=\"Allison\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/\",\"url\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/\",\"name\":\"Enforce GitHub Advanced Security configurations - The GitHub Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/github.blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922\",\"datePublished\":\"2026-09-15T19:31:58+00:00\",\"dateModified\":\"2026-09-15T19:35:57+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/#primaryimage\",\"url\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922\",\"contentUrl\":\"https:\\\/\\\/github.blog\\\/wp-content\\\/uploads\\\/2026\\\/09\\\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922\",\"width\":1794,\"height\":922,\"caption\":\"GitHub Advanced Security configurations policy settings include an \u201cEnforce configuration\u201d dropdown with options for \u201cDon\u2019t enforce,\u201d \u201cEnforce for repository owners,\u201d and \u201cEnforce for repository and organization owners.\u201d\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/github.blog\\\/changelog\\\/2026-09-15-enforce-github-advanced-security-configurations\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/github.blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Changelogs\",\"item\":\"https:\\\/\\\/github.blog\\\/changelog\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Enforce GitHub Advanced Security configurations\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/github.blog\\\/#website\",\"url\":\"https:\\\/\\\/github.blog\\\/\",\"name\":\"The GitHub Blog\",\"description\":\"Updates, ideas, and inspiration from GitHub to help developers build and design software.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/github.blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Enforce GitHub Advanced Security configurations - GitHub Changelog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/","og_locale":"en_US","og_type":"article","og_title":"Enforce GitHub Advanced Security configurations \u00b7 GitHub Changelog","og_description":"Enterprise administrators can now enforce GitHub Advanced Security configurations across their organizations. This prevents both organization and repository administrators from overriding settings defined at the enterprise level, helping security and…","og_url":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/","og_site_name":"The GitHub Blog","article_modified_time":"2026-09-15T19:35:57+00:00","og_image":[{"width":1794,"height":922,"url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/09\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"1 minute","Written by":"Allison"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/","url":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/","name":"Enforce GitHub Advanced Security configurations - The GitHub Blog","isPartOf":{"@id":"https:\/\/github.blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/#primaryimage"},"image":{"@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/#primaryimage"},"thumbnailUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/09\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922","datePublished":"2026-09-15T19:31:58+00:00","dateModified":"2026-09-15T19:35:57+00:00","breadcrumb":{"@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/#primaryimage","url":"https:\/\/github.blog\/wp-content\/uploads\/2026\/09\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922","contentUrl":"https:\/\/github.blog\/wp-content\/uploads\/2026\/09\/649606000-34ddeeee-f2e7-496e-b310-0d572f4bd602.png?fit=1794%2C922","width":1794,"height":922,"caption":"GitHub Advanced Security configurations policy settings include an \u201cEnforce configuration\u201d dropdown with options for \u201cDon\u2019t enforce,\u201d \u201cEnforce for repository owners,\u201d and \u201cEnforce for repository and organization owners.\u201d"},{"@type":"BreadcrumbList","@id":"https:\/\/github.blog\/changelog\/2026-09-15-enforce-github-advanced-security-configurations\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/github.blog\/"},{"@type":"ListItem","position":2,"name":"Changelogs","item":"https:\/\/github.blog\/changelog\/"},{"@type":"ListItem","position":3,"name":"Enforce GitHub Advanced Security configurations"}]},{"@type":"WebSite","@id":"https:\/\/github.blog\/#website","url":"https:\/\/github.blog\/","name":"The GitHub Blog","description":"Updates, ideas, and inspiration from GitHub to help developers build and design software.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/github.blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/98851","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs"}],"about":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/types\/changelog"}],"author":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/users\/2106"}],"version-history":[{"count":2,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/98851\/revisions"}],"predecessor-version":[{"id":98854,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/changelogs\/98851\/revisions\/98854"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media\/98852"}],"wp:attachment":[{"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/media?parent=98851"}],"wp:term":[{"taxonomy":"changelog-type","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/type?post=98851"},{"taxonomy":"changelog-label","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/label?post=98851"},{"taxonomy":"changelog-group","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/group?post=98851"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/github.blog\/wp-json\/wp\/v2\/coauthors?post=98851"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}