github / github/roadmap

Secret scanning: `public leak` (high priority) and `multi-repo` (deduping) indicators for alerts [GA]

Aperta
#1,040 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
Enterprise Free GA GitHub Advanced Security (GHAS) Shipped
Lingua principale
Nessun dato sulla lingua
Stelle
8.9k
Fork
1.8k
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

### Value Prop

To help you triage and remediate secret leaks more effectively, GitHub secret scanning indicates if a secret detected in your repository has also leaked publicly with a `public leak` label on the alert. The alert also indicates if the secret was exposed in other repositories across your organization or enterprise with a `multi-repo` label.

### Expected Outcome

These labels provide additional understanding into the distribution of an exposed secret, while also making it easier to assess an alert’s risk and urgency. For example, a secret which has a known associated exposure in a public location has a higher likelihood of exploitation. Detection of public leaks is only currently supported for [provider-based patterns](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/introduction/supported-secret-scanning-patterns#default-patterns).

The `multi-repo` label makes it easier to de-duplicate alerts and is supported for all secret types, including [custom patterns](https://docs.github.com/en/enterprise-cloud@latest/code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/custom-patterns/defining-custom-patterns-for-secret-scanning). You can only view and navigate to other enterprise repositories with duplicate alerts if you have appropriate permissions to view them.

Guida per i contributori

Apri la guida per i contributori

Valutazione

Questa issue non è ancora stata valutata.

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.