-- [Configure and Use Secret Scanning]
Which of the following secret scanning features can verify whether a secret is still active?
Validity checks, also called secret validation, allow GitHub to check if a detected secret is still active. If verified as live, the alert is marked as 'valid', allowing security teams to prioritize the most critical leaks.
Push protection blocks secrets but does not check their validity. Custom patterns are user-defined and do not include live checks.
Currently there are no comments in this discussion, be the first to comment!