GH-500 · Question #96
Which of the following features helps to prioritize secret scanning alerts that present an immediate risk?
The correct answer is B. push protection. Push protection intercepts a push at the moment it is made, before the secret ever lands in the repository's history. Because it fires in real time at the point of exposure, the resulting alert represents the most immediate and actionable risk - a secret that is about to become…
Question
Which of the following features helps to prioritize secret scanning alerts that present an immediate risk?
Options
- Anon-provider patterns
- Bpush protection
- Csecret validation
- Dcustom pattern dry runs
How the community answered
(62 responses)- A6% (4)
- B87% (54)
- C2% (1)
- D5% (3)
Explanation
Push protection intercepts a push at the moment it is made, before the secret ever lands in the repository's history. Because it fires in real time at the point of exposure, the resulting alert represents the most immediate and actionable risk - a secret that is about to become (or has just become) part of the codebase. Non-provider patterns expand coverage but don't indicate urgency. Secret validation confirms whether a detected secret is still active (useful for triage, but not for catching secrets in flight). Custom pattern dry runs are a testing mechanism, not an alert-prioritization mechanism.
Topics
Community Discussion
No community discussion yet for this question.