-- [Configure and Use Secret Scanning]
What happens when you enable secret scanning on a private repository?
When secret scanning is enabled on a private repository, GitHub performs a read-only analysis of the repository's contents. This includes the entire Git history and files to identify strings that match known secret patterns or custom-defined patterns.
GitHub does not alter the repository, and enabling secret scanning does not automatically enable code scanning or dependency review --- each must be configured separately.
Leonor
5 days agoPeggie
5 days agoRana
7 days ago