Everything in this section ran free because BookNest is public. For private repositories the same features are sold as GitHub Advanced Security 29 (GHAS), which on 1 April 2025 was split into two products, billed per active committer (anyone who pushed to a covered repository in the last 90 days) and, for the first time, available to Team plans as well as Enterprise:
| Secret Protection | Code Security | |
|---|---|---|
| Price | $19 per active committer a month | $30 per active committer a month |
| Includes | Secret scanning, push protection, AI-detected passwords, validity checks, custom patterns | CodeQL 29 , Copilot 29 Autofix, security campaigns, Dependabot 29 rules, dependency review |
| On public repositories | Free (core features) | Free (core features) |
Dependabot alerts and security updates stay free everywhere. A team with eight active committers buying both pays 8 × ($19 + $30) = $392 a month on top of its plan. Free scanners cover part of the ground and upload via SARIF: gitleaks 29,524 (https://github.com/gitleaks/gitleaks 29,524 ) or TruffleHog 28,147 (https://github.com/trufflesecurity/trufflehog 28,147 ) for secrets, Semgrep 44,468 or Trivy 67,732 for code and dependencies. They lack GitHub 29 's partner revocation, server-side push protection and CodeQL's data-flow analysis.