Skip to main content

This version of GitHub Enterprise Server will be discontinued on 2026-03-17. No patch releases will be made, even for critical security issues. For better performance, improved security, and new features, upgrade to the latest version of GitHub Enterprise Server. For help with the upgrade, contact GitHub Enterprise support.

Concepts for secret security

Learn core concepts for GitHub's secret security features.

About secret scanning

GitHub scans repositories for known types of secrets, to prevent fraudulent use of secrets that were committed accidentally.

About push protection

Push protection blocks contributors from pushing secrets to a repository and generates an alert whenever a contributor bypasses the block. You can apply push protection at repository or organization level.

About secret scanning alerts

Learn about the different types of secret scanning alerts.

About delegated bypass for push protection

You can control which teams or roles have the ability to bypass push protection in your organization or repository.