Secret Scanning
Handles GitHub secret scanning setup from enabling push protection to writing custom regex patterns for your org's specific credential formats. Covers the full workflow: configuring exclusions via YAML, resolving blocked pushes through amend or rebase, managing bypass requests, and triaging alerts by validity status. The remediation guidance is practical, rotate first and worry about Git history later. Also points to the Advanced Security plugin for pre-commit scanning in AI agents, which is the smarter place to catch secrets than in CI. If you're rolling out secret scanning across repos or need to unblock developers who hit push protection, this walks through the actual GitHub UI paths and git commands.
- skills.sh installs
- 4.6K
- GitHub stars
- 41K
- last updated
- Aug 21, 2026
Install
$ npx -y skills add github/awesome-copilot --skill secret-scanning --agent claude-codeInstalls into .claude/skills of the current project.
Files
Secret Scanning
This skill provides procedural guidance for configuring GitHub secret scanning — detecting leaked credentials, preventing secret pushes, defining custom patterns, and managing alerts.
When to Use This Skill
Use this skill when the request involves:
- Enabling or configuring secret scanning for a repository or organization
- Setting up push protection to block secrets before they reach the repository
- Defining custom secret patterns with regular expressions
- Resolving a blocked push from the command line
- Triaging, dismissing, or remediating secret scanning alerts
- Configuring delegated bypass for push protection
- Excluding directories from secret scanning via
secret_scanning.yml - Understanding alert types (user, partner, push protection)
- Enabling validity checks or extended metadata checks
- Scanning local code changes for secrets before committing (via MCP / AI coding agent) — see the Pre-Commit Scanning via AI Coding Agents section below for the recommended plugin
How Secret Scanning Works
Secret scanning automatically detects exposed credentials across:
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/github/awesome-copilot
- Categories
- Backend & APIs, Security, Git & Pull Requests, Documentation, AI & Agent Building
- First seen
- Apr 16, 2026
More from github/awesome-copilot
All 318- Dependabot4.4K
- Copilot Spaces4.4K
- Doublecheck4.3K
- Flowstudio Power Automate Mcp4.2K
- Gsap Framer Scroll Animation4K
- Eval Driven Dev3.9K
- Autoresearch3.4K
- Draw Io Diagram Generator2.9K
- Github Actions Hardening2.6K
- Github Actions Efficiency2.4K
- Automate This2.3K
- Acquire Codebase Knowledge2.3K
- Napkin2.3K
- Cloud Design Patterns2.3K
- Cli Mastery2.1K
- Spring Boot Testing2.1K
- Codeql2K
- Microsoft Agent Framework2K
- Flowstudio Power Automate Build1.9K
- Flowstudio Power Automate Debug1.9K
- Issue Fields Migration1.9K
- Gtm Positioning Strategy1.9K
- Publish To Pages1.9K
- Reviewing Oracle To Postgres Migration1.8K
Recommended
More Backend & APIs
sql-queriesanthropics/knowledge-work-pluginsWrite correct, performant SQL across all major data warehouse dialects (Snowflake, BigQuery, Databricks, PostgreSQL, etc.). Use when writing queries, optimizing4.6Kskills.sh installs
coralogix-docscoralogix/cx-cliSearch and read official Coralogix platform documentation using **`cx docs search`** and **`cx docs fetch`**. Use when the user asks how Coralogix features work4.6Kskills.sh installs
zsxq-topicunnoo/zsxq-skill知识星球主题管理：搜索主题、查看主题详情、发布帖子、编辑主题、发表评论、回复某条评论（楼中楼）、回答提问、删除主题；通过 api call 查看主题评论列表、设置精华、设置标签、查看自己提的问题与已回答记录。当用户需要查找内容、发帖、编辑主题、评论、回复评论、回答问题、删除主题、查看主题评论、查看自己的提问记录、或管理4.6Kskills.sh installs
langgraph-docslangchain-ai/deepagentsFetches and references LangGraph Python documentation to build stateful agents, create multi-agent workflows, and implement human-in-the-loop patterns. Use when4.6Kskills.sh installs
legacy-modernizerjeffallan/claude-skillsDesigns incremental migration strategies, identifies service boundaries, produces dependency maps and migration roadmaps, and generates API facade designs for a4.6Kskills.sh installs
instaclawnapoleond/instaclawPhoto sharing platform for AI agents. Use this skill to share images, browse feeds, like posts, comment, and follow other agents. Requires ATXP authentication.4.6Kskills.sh installs