# Concepts for secret security

Learn core concepts for GitHub's secret security features.

## Links

* [Secret leakage risks](/en/enterprise-server@3.22/code-security/concepts/secret-security/secret-leakage-risks)

  Secrets like API keys, passwords, and tokens committed to repositories can be exploited by unauthorized users, creating security, compliance, and financial risk to your organization.

* [Secret scanning](/en/enterprise-server@3.22/code-security/concepts/secret-security/secret-scanning)

  Prevent fraudulent use of your secrets by automatically detecting exposed credentials before they can be exploited.

* [/public-monitoring](/public-monitoring)

* [Push protection](/en/enterprise-server@3.22/code-security/concepts/secret-security/push-protection)

  Secure your secrets by stopping them from ever reaching your repository with push protection.

* [Secret security with GitHub](/en/enterprise-server@3.22/code-security/concepts/secret-security/secret-security-with-github)

  Learn how GitHub's security tools can help you identify, remediate, and prevent secret leaks.

* [About secret scanning alerts](/en/enterprise-server@3.22/code-security/concepts/secret-security/about-alerts)

  Learn about the different types of secret scanning alerts.

* [Custom patterns](/en/enterprise-server@3.22/code-security/concepts/secret-security/custom-patterns)

  Detect secret types specific to your organization with custom patterns.

* [Validity checks](/en/enterprise-server@3.22/code-security/concepts/secret-security/validity-checks)

  Validity checks and extended metadata checks help you prioritize remediation of exposed credentials that pose immediate security risks.

* [Delegated bypass for push protection](/en/enterprise-server@3.22/code-security/concepts/secret-security/delegated-bypass)

  Maintain your secret security while unblocking trusted actors with delegated bypass for push protection.

* [Bypass requests for push protection](/en/enterprise-server@3.22/code-security/concepts/secret-security/bypass-requests)

  Learn how bypass requests work when push protection blocks commits containing secrets.

* [/secret-scanning-for-partners](/en/enterprise-server@3.22/secret-scanning-for-partners)

* [GitHub secret types](/en/enterprise-server@3.22/code-security/concepts/secret-security/secret-types)

  Learn about the different types of secrets used by GitHub.

* [Secret scanning push protection metrics](/en/enterprise-server@3.22/code-security/concepts/secret-security/push-protection-metrics)

  Understand push protection's performance across your organizations.

* [Push protection from the command line](/en/enterprise-server@3.22/code-security/concepts/secret-security/command-line-push-protection)

  Understand how GitHub uses push protection to prevent secret leaks from the command line.

* [/push-protection-and-the-github-mcp-server](/en/enterprise-server@3.22/push-protection-and-the-github-mcp-server)

* [Working with push protection from the REST API](/en/enterprise-server@3.22/code-security/concepts/secret-security/push-protection-from-the-rest-api)

  Learn your options for unblocking your push to GitHub using the REST API if secret scanning detects a secret in the content of your API request.