Skip to main content
GitHub Docs
Search
Select language: current language is English
Open Search BarClose Search Bar
Open Menu
Open Sidebar
  • Secure coding/
  • Dependabot quickstart
  • Prevent data leaks
  • Trial secret scanning
  • Apply recommended configuration
  • Give access to private registries
    • Manage GHAS licenses
    • Active advanced setup
    • Secret scanning for partners
    • About alerts
    • Monitor alerts
    • Push protection in the GitHub UI
    • Troubleshoot secret scanning
    • Configure code scanning
    • Customize advanced setup
    • Code scanning in a container
    • Assess alerts
    • Code scanning tool status
    • Configure larger runners
    • Go CodeQL queries
    • Ruby CodeQL queries
    • Upload a SARIF file
    • Analysis takes too long
    • Enabling default setup takes too long
    • No source code seen during build
    • Results different than expected
    • Unclear what triggered a workflow
    • Default setup is enabled
    • Results exceed limits
      • Analyzing code
      • About CodeQL workspaces
      • Testing query help files
      • Query reference files
      • Exit codes
      • bqrs hash
      • database analyze
      • database export-diagnostics
      • database init
      • database trace-command
      • dataset cleanup
      • diagnostic add
      • execute queries
      • generate extensible-predicate-metadata
      • github upload-results
      • pack create
      • pack ls
      • pack upgrade
      • query run
      • resolve extractor
      • resolve metadata
      • resolve qlref
      • resolve upgrades
      • version
      • Run CodeQL queries
      • Custom query creation
      • Customize settings
      • Access logs
      • Browse Advisory Database
      • Configure for a repository
      • Evaluate repository security
      • Remove collaborators
      • Privately reporting
      • Dependency graph ecosystem support
      • Dependency submission API
      • Enforce dependency review
      • Securing accounts
      • Optimize Java packages
      • About auto-triage rules
      • Dependabot security updates
      • Configure version updates
      • Manage Dependabot PRs
      • Configure access to private registries
      • Remove access to public registries
      • Troubleshoot vulnerability detection
    • Work with secret scanning

    Working with secret scanning and push protection

    Avoid leaking sensitive data by blocking pushes containing tokens and other secrets.

    Who can use this feature?

    Secret scanning is available for the following repository types:

    • Public repositories on GitHub.com

    Working with push protection in the GitHub UI

    Learn your options for unblocking your commit when secret scanning detects a secret in your changes.

    Help and support

    Did you find what you needed?

    Privacy
  • Status
  • Blog

    • Follow Lee on X/Twitter - Father, Husband, Serial builder creating AI, crypto, games & web tools. We are friends :) AI Will Come To Life!

    Check out: eBank.nz (Art Generator) | Netwrck.com (AI Tools) | Text-Generator.io (AI API) | BitBank.nz (Crypto AI) | ReadingTime (Kids Reading) | RewordGame | BigMultiplayerChess | WebFiddle | How.nz | Helix AI Assistant