297 Search results for "secrets"
Code security / Secret scanning /
Managing alerts from secret scanning
from secret scanning
Learn how to find, evaluate, and resolve alerts for secrets stored in your repository.
About secret scanning alerts
Learn about the
REST API / Authentication /
Endpoints available for fine-grained personal access tokens
/orgs/{org}/actions/secrets
GET /orgs/{org}/actions/secrets/public-key
GET /orgs/{org}/actions/secrets/{secret_name}
PUT /orgs/{org}/actions/secrets/{secret_name}
REST API / Authentication /
Endpoints available for GitHub App user access tokens
/orgs/{org}/actions/secrets
GET /orgs/{org}/actions/secrets/public-key
GET /orgs/{org}/actions/secrets/{secret_name}
PUT /orgs/{org}/actions/secrets/{secret_name}
REST API / Authentication /
Endpoints available for GitHub App installation access tokens
/orgs/{org}/actions/secrets
GET /orgs/{org}/actions/secrets/public-key
GET /orgs/{org}/actions/secrets/{secret_name}
PUT /orgs/{org}/actions/secrets/{secret_name}
Code security / Secret scanning / Manage alerts /
Resolving alerts from secret scanning
secret compromised. GitHub recommends the following actions for compromised secrets:
Verify that the secret committed to GitHub is valid. Applies to GitHub
REST API / Secret scanning /
REST API endpoints for secret scanning
REST API/
Secret scanning/
Secret scanning
REST API endpoints for secret scanning
Use the REST API to retrieve and update secret alerts from a repository
GitHub Actions / Security / Security guides /
Automatic token authentication
GITHUB_TOKEN by using the standard syntax for referencing secrets: ${{ secrets.GITHUB_TOKEN }}. Examples of using the GITHUB_TOKEN include passing the
Code security / Secure your organization / Manage organization security /
Interpreting security findings
issues, pull requests, and discussions in those repositories, for leaked secrets that have been accidentally committed, such as tokens or private keys. There
GitHub Actions / Share automations /
Reusing workflows
called workflow is automatically granted access to github.token and secrets.GITHUB_TOKEN. For more information about the github context, see "Accessing
Apps / Creating GitHub Apps / About creating GitHub Apps /
Best practices for creating a GitHub App
information, see "Managing private keys for GitHub Apps."
Client secrets
Client secrets are used to generate user access tokens for your app, unless your