What is GitHub’s code scanning feature?

A A GitHub Actions step that counts lines of code and reports them in pull requests B A plagiarism detection tool that checks if repository code was copied from other public repositories C A code quality tool that enforces style guides and formatting rules on every push D An automated security analysis tool that scans code for vulnerabilities using CodeQL or third-party tools, reporting findings as alerts on the Security tab and optionally blocking PRs