GH-500 · Question #11
Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?
The correct answer is D. private keys. Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported partners. It does not detect usernames (A), which are not…
Question
Assuming that no custom patterns are configured, what type of secret is detected by secret scanning?
Options
- Ausernames
- Bsealed boxes
- CPersonal Identifiable Information (PII)
- Dprivate keys
How the community answered
(32 responses)- A3% (1)
- C3% (1)
- D94% (30)
Explanation
Without custom patterns, GitHub's default secret scanning detects structured secrets such as private keys (e.g., RSA private keys, PEM files), API tokens, OAuth credentials, and service-specific secrets from supported partners. It does not detect usernames (A), which are not secrets in the cryptographic sense. 'Sealed boxes' (B) is not a secret scanning category. PII (C) like names or email addresses is outside the scope of default secret scanning, which targets credentials and cryptographic material.
Topics
Community Discussion
No community discussion yet for this question.