🛡️ Security

Secret Scanning

An automated check that searches code and commit history for credential-shaped strings. Push protection extends it by blocking commits that contain a detected secret before they reach the repository.

📚 Deep Dive

Learn Article

How to Find and Remove Secrets Hidden in Your Git History

A deleted credential still lives in your commit history. Enumerate it, revoke it at the source first, then rewrite history and add push protection to keep it out.

intermediate 4 min read

Back to Glossary