GitHub Secret Scanning - Deep Dive

Mickey GoussetIntermediate
Prefer not to load the embedded player? Watch on YouTube

Inspect secret-scanning findings and investigate active credentials. GitHub rather than gitleaks; entitlement varies; clean scan not proof of absence; exposed credentials need rotation.

About this selection

T12-L04: Watch 4:50–16:00 for enabling secret scanning, inspecting findings and checking credential activity; 19:32 adds push protection. GitHub features differ from the book's local gitleaks route and depend on entitlement. A clean scan proves neither absence nor remediation; revoke or rotate exposed credentials.

Linked by topic; a curriculum association does not certify the full video. Check the source date and compare technical instructions with current official documentation.