What happens when you enable secret scanning on a private repository?

Question

Options

• ARepository administrators can view Dependabot alerts.
• BDependency review, secret scanning, and code scanning are enabled.
• CYour team is subscribed to security alerts.
• DGitHub performs a read-only analysis on the repository.

• A
  89% (25)
• B
  7% (2)
• D
  4% (1)

Explanation

When secret scanning is enabled on a private repository, the key outcome is that repository administrators gain the ability to view secret scanning alerts through the repository's Security tab. This is the access-control result of the enablement. Option B describes enabling multiple GHAS features simultaneously, which is not what happens from enabling secret scanning alone. Option C (team subscription to security alerts) and D (read-only analysis) do not accurately describe the specific result of enabling secret scanning on a private repository.

No community discussion yet for this question.