Skip to content
Kitbay

secret-scanning

MIT

A guidance skill from GitHub's awesome-copilot collection on GitHub secret scanning.

What the skill teaches

A guidance skill from GitHub's awesome-copilot collection on GitHub secret scanning. It covers turning on secret protection for a repository or organisation, push protection and what to do when a push is blocked, delegated bypass, custom patterns written as regular expressions, excluding paths, validity checks, and triaging or closing alerts. It also notes which repository types get the feature at no cost and which need a paid plan. For scanning local changes before a commit, it refers agents to GitHub's Advanced Security plugin and the GitHub MCP server. Reference files go deeper on alerts, custom patterns and push protection; there are no scripts.

Capabilities

  • Enable secret scanning and push protection
  • Resolve a push blocked by push protection
  • Define custom secret patterns
  • Triage and remediate secret scanning alerts