GH-500 · Question #103
By default, who will receive an e-mail when a secret has been detected in a repository? Each answer presents a complete solution. (Choose two.)
The correct answer is B. user who committed the secret D. users with the Admin repository role. When secret scanning detects a secret, GitHub automatically sends email alerts to two parties by default: (B) the user who authored the commit containing the secret, so they can take immediate corrective action such as revoking the credential, and (D) users with the Admin role…
Question
By default, who will receive an e-mail when a secret has been detected in a repository? Each answer presents a complete solution. (Choose two.)
Options
- Ausers with the Maintain repository role
- Buser who committed the secret
- Cusers with the Write repository role
- Dusers with the Admin repository role
- Esecurity analyst
How the community answered
(22 responses)- B91% (20)
- C5% (1)
- E5% (1)
Explanation
When secret scanning detects a secret, GitHub automatically sends email alerts to two parties by default: (B) the user who authored the commit containing the secret, so they can take immediate corrective action such as revoking the credential, and (D) users with the Admin role on the repository, since admins are responsible for the repository's security posture. Users with Maintain, Write, or Triage roles, and security analysts not explicitly configured, do not receive automatic notifications by default.
Topics
Community Discussion
No community discussion yet for this question.