Managing alerts from secret scanning

Learn how to find, evaluate, and resolve alerts for secrets stored in your repository.

Who can use this feature?

Secret scanning is available for the following repository types:

Public repositories on GitHub.com
Organization-owned repositories on GitHub Team or GitHub Enterprise Cloud with GitHub Secret Protection enabled
User-owned repositories for GitHub Enterprise Cloud with Enterprise Managed Users

Learn about the different types of secret scanning alerts.

Learn how to find and filter secret scanning alerts for users for your repository.

Learn about additional features that can help you evaluate alerts and prioritize their remediation, such as checking a secret's validity.

After reviewing the details of a secret scanning alert, you should fix and then close the alert.

Learn how and when GitHub will notify you about a secret scanning alert.