How-tos for detecting secret leaks

You can configure how GitHub scans your repositories for leaked secrets and generates alerts.

You can enable secret scanning to detect additional potential secrets at the repository and organization levels.

You can enable generic secret detection for your repository or organization. Alerts for generic secrets, such as passwords, are displayed in a separate list on the secret scanning alerts page.