GH-500 · Question #100
After defining a secret scanning custom pattern, what is the final step before publishing the pattern?
The correct answer is D. performing a dry run. Before publishing a custom pattern, GitHub requires you to perform a dry run. A dry run tests the pattern against the repository's existing content and shows which matches it would generate - without creating actual alerts. This step is critical for validating that the regex is…
Question
After defining a secret scanning custom pattern, what is the final step before publishing the pattern?
Exhibit
Options
- Adefining a custom pattern
- Badding additional match requirements
- Cenabling push protection
- Dperforming a dry run
How the community answered
(25 responses)- A4% (1)
- C4% (1)
- D92% (23)
Explanation
Before publishing a custom pattern, GitHub requires you to perform a dry run. A dry run tests the pattern against the repository's existing content and shows which matches it would generate - without creating actual alerts. This step is critical for validating that the regex is accurate, identifying potential false positives, and tuning the pattern before it goes live. Skipping the dry run and publishing directly could flood the repository with noisy or irrelevant alerts.
Topics
Community Discussion
No community discussion yet for this question.