GH-500 · Question #16
Which of the following secret scanning features can verify whether a secret is still active?
The correct answer is B. validity checks. Validity checks is a GitHub secret scanning feature that contacts the issuing service provider's API to determine whether a detected credential is still active and usable. This lets teams distinguish between secrets that need immediate rotation (still active) versus those that…
Question
Which of the following secret scanning features can verify whether a secret is still active?
Options
- Abranch protection
- Bvalidity checks
- Cpush protection
- Dcustom patterns
How the community answered
(53 responses)- A4% (2)
- B92% (49)
- C2% (1)
- D2% (1)
Explanation
Validity checks is a GitHub secret scanning feature that contacts the issuing service provider's API to determine whether a detected credential is still active and usable. This lets teams distinguish between secrets that need immediate rotation (still active) versus those that are already revoked or expired. Push protection prevents secrets from entering the repository, branch protection controls merge rules, and custom patterns define what strings to scan for - none of these verify whether a found secret is still live.
Topics
Community Discussion
No community discussion yet for this question.