Which feature reviews the security configuration and alerts for an organization and identifies the repositories at greater risk?

• A. Alert Queries
• B. Path Queries
• C. Security Overview
• D. Variant Analysis

Answer: (C)

Security Overview provides a centralized view of an organization’s security posture, combining how security is configured with the active alerts to show where risk is highest. It’ingests org-wide settings like protection rules, required reviews, and enforcement policies along with current security alerts, then highlights the repositories that are at greater risk. This makes it the best feature for understanding the overall security configuration and quickly identifying where remediation efforts should be focused.

Alert Queries, while useful for digging into specific security alerts and filtering results, doesn’t offer the organization-wide risk assessment and configuration overview that Security Overview provides. Path Queries are aimed at locating code or files that match certain patterns, rather than presenting a risk ranking across the org. Variant Analysis focuses on running code-scanning results across multiple code variants, which is about per-repo code issues rather than an organization-wide security posture.