Secret security

Learn about secret scanning patterns, risk report CSV contents, and GitHub secrets.

Links

• Understanding GitHub secret types

  Learn about the usage, scope, and access permissions for GitHub secrets.

• Supported secret scanning patterns

  Lists of supported secrets and the partners that GitHub works with to prevent fraudulent use of secrets that were committed accidentally.

• Secret scanning detection scope

  Secret scanning uses pattern matching and validation to detect secrets. Detection varies based on pattern pairs, token types, and push protection settings.

• Custom patterns reference

  Use specific regular expression syntax to define accurate custom patterns for secret scanning.

• Contents of the secret risk assessment report CSV

  Understand the data included in the CSV export of the secret risk assessment report.

• Secret scanning pattern configuration data

  Understand the data displayed in the secret scanning pattern configuration page to make informed decisions about push protection settings.