secret-scanning

secret scanning

github ↓ 3.9k
Claude Code
View source ↗

What it does

  • Enabling or configuring secret scanning for a repository or organization
  • Setting up push protection to block secrets before they reach the repository
  • Defining custom secret patterns with regular expressions
  • Resolving a blocked push from the command line
  • Triaging, dismissing, or remediating secret scanning alerts
  • Configuring delegated bypass for push protection
  • Excluding directories from secret scanning via secretscanning.yml

Requirements & configuration

  • | Private/internal (org-owned) | Requires GitHub Secret Protection on Team/Enterprise Cloud |
  • Requires validity checks to be enabled first

Configuration: REST

Derived from the skill's own SKILL.md documentation · extracted 2026-07-23

secret scanning

Source

Repository: https://github.com/github/awesome-copilot

secret-scanning FAQ

What does the secret-scanning skill do?

Guide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation. For pre-commit secret scanning in AI coding agents via the GitHub MCP Server, this skill references the Advanced Security plugin (`advanced-security@copilot-plugins`). Use this skill when enabling secret scanning, setting up push protection, defining custom patterns, triaging alerts, resolving blocked pushes, or when an agent needs to scan code for secrets before committing. Enabling or configuring secret scanning for a repository or organization Setting up push protection to block secrets before they reach the repository

What does secret-scanning require?

| Private/internal (org-owned) | Requires GitHub Secret Protection on Team/Enterprise Cloud | Requires validity checks to be enabled first Configuration keys: REST.

How do I install secret-scanning?

Run: npx -y skills add https://github.com/github/awesome-copilot --skill secret-scanning --agent claude-code — the source lives at github.com/github/awesome-copilot.

Maintain secret-scanning?

Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.

[secret-scanning on getagentictools](https://getagentictools.com/skills/github-awesome-copilot-secret-scanning?ref=badge)
npx agentictools info skills/github-awesome-copilot-secret-scanning

The second line is the CLI lookup for this page — handy in READMEs and docs.