nerdexam
Microsoft

GH-500 · Question #18

Assuming security and analysis features are not configured at the repository, organization, or enterprise level, secret scanning is enabled on:

The correct answer is C. public repositories. GitHub automatically enables secret scanning on all public repositories by default, at no cost, even without any explicit configuration. This is part of GitHub's baseline protection for open-source code. Private repositories - whether user-owned or within an organization…

Secret Scanning

Question

Assuming security and analysis features are not configured at the repository, organization, or enterprise level, secret scanning is enabled on:

Options

  • Aprivate repositories.
  • Ball new repositories within your organization.
  • Cpublic repositories.
  • Duser-owned private repositories.

How the community answered

(30 responses)
  • A
    7% (2)
  • B
    3% (1)
  • C
    90% (27)

Explanation

GitHub automatically enables secret scanning on all public repositories by default, at no cost, even without any explicit configuration. This is part of GitHub's baseline protection for open-source code. Private repositories - whether user-owned or within an organization - require GitHub Advanced Security (GHAS) or explicit opt-in at the repository, organization, or enterprise level to benefit from secret scanning.

Topics

#Secret scanning defaults#Public repositories#GitHub security features

Community Discussion

No community discussion yet for this question.

Full GH-500 Practice