What problem does it solve?
Helps teams detect, block, and remediate secrets accidentally committed to Git repositories, preventing credential leaks, reducing incident response time, and avoiding downstream service compromise.
Core Features & Use Cases
- Enable secret scanning & push protection: step-by-step guidance to turn on repository, organization, or enterprise secret protection and push protection.
- Custom pattern creation and dry runs: define regex-based patterns at repo/org/enterprise scope, dry-run against sample repositories, and publish with optional push-protection enforcement.
- Alert triage and remediation: prioritize by validity status, rotate credentials, dismiss false positives, and optionally remove secrets from Git history with recommended tooling and cautions.
- Resolve blocked pushes and delegated bypass: command-line and UI workflows to remove secrets, request or grant bypasses, and manage bypass reviewer workflows and expiration.
- Pre-commit scanning for AI coding agents: instructions to integrate the Advanced Security Copilot plugin for pre-commit secret scans and agent-based remediation guidance.
- Reference-driven operations: links to push protection, custom patterns, and alerts & remediation references for deep dives and REST API usage.
Quick Start
Use the secret-scanning skill to enable secret scanning and push protection for my GitHub repository, create a custom pattern for internal API keys, and triage any open alerts.
