Enabling generic secret detection for AI-detected secrets

You can enable generic secret detection for your repository or organization. Alerts for generic secrets, such as passwords, are displayed in a separate list on the secret scanning alerts page.

Enabling generic secret detection

You can enable generic secret detection in the security settings page of your repository or organization.

Enabling generic secret detection for your repository

1. On GitHub, navigate to the main page of the repository.

2. Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.

   

3. In the "Security and quality" section of the sidebar, click Advanced Security.

4. Under "Secret Protection", to the right of "Scan for AI-detected secrets", click Enable.

Enabling generic secret detection for your organization

You must configure generic secret detection for your organization using a custom security configuration. You can then apply the security configuration to all (or selected) repositories in your organization.

1. Create a new custom security configuration, or edit an existing one. See Creating a custom security configuration.
2. When creating the custom security configuration, ensure that "Secret Protection" is set to Enabled, and that the dropdown menu for "Scan for AI-detected secrets" is also set to Enabled.
3. Apply the custom security configuration to one or more repositories. For more information, see Applying a custom security configuration.

For information on how to view alerts for generic secrets that have been detected with AI, see Viewing and filtering alerts from secret scanning.

Further reading

• Application card: GitHub security and quality AI features