How-tos for customizing secret leak detection
Learn how to customize GitHub's secret leak detection tools.
Defining custom patterns for secret scanning
Protect your unique secret types by defining custom patterns with regular expressions.
Managing custom patterns
You can view, edit, and remove custom patterns, as well as enable push protection for custom patterns.
Excluding folders and files from secret scanning
You can customize secret scanning to automatically close alerts for secrets found in specific directories or files by configuring a secret_scanning.yml file in your repository.
Enabling validity checks for your repository
Enabling validity checks on your repository helps you prioritize the remediation of alerts as it tells you if a secret is active or inactive.