Habilitación de comprobaciones de validez para el repositorio

You can enable validity checks for individual repositories through repository settings. Validity checks verify whether detected secrets are still active, helping you prioritize remediation efforts. For information about what validity checks are and how they work, see About validity checks.

For a list of which secret patterns support validity checks, see Supported secret scanning patterns.

Before you can enable validity checks for your repository, your site administrator must enable the feature for the whole instance. See Configuring secret scanning for your appliance.

Enabling validity checks

To enable validity checks from the UI:

1. On GitHub, navigate to the main page of the repository.

2. Under your repository name, click Settings. If you cannot see the "Settings" tab, select the dropdown menu, then click Settings.

   

3. In the "Security" section of the sidebar, click Advanced Security.

4. Under "Secret Protection", to the right of "Validity checks", click Enable.

5. Scroll to the bottom of the page and click Save changes.

Alternatively, organization owners and enterprise administrators can enable the feature for all repositories in the organization or enterprise. For more information, see Creating a custom security configuration and Creating a custom security configuration for your enterprise.

Further reading

• Manage secret scanning alerts