Keeping secrets secure with secret scanning

Let GitHub do the hard work of ensuring that tokens, private keys, and other code secrets are not exposed in your repository.

Who can use this feature?

Secret scanning is available for organization-owned repositories, and in beta for user-owned repositories in GitHub Enterprise Server if your enterprise has a license for GitHub Advanced Security. For more information, see "About secret scanning alerts" and "About GitHub Advanced Security."

Introduction to secret scanning
Enabling secret scanning features
- Enabling secret scanning for your repository
- Enabling push protection for your repository
Managing alerts from secret scanning
Working with secret scanning and push protection
- Working with push protection from the command line
- Working with push protection in the GitHub UI
Using advanced secret scanning and push protection features
Troubleshooting secret scanning and push protection
- Troubleshooting secret scanning