--- title: GitHub Introduces Default Secret Scanning Push... description: GitHub has introduced push protection and secret scanning features for public repositories. Push protection allows developers to remove secrets from commits or... canonical: https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: GitHub Introduces Default Secret Scanning Push Protection for Public Repositories | daily.dev og:description: GitHub has introduced push protection and secret scanning features for public repositories. Push protection allows developers to remove secrets from commits or... og:url: https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux og:image: https://api.daily.dev/og/posts/cgq1RJ4uX.png og:image:alt: GitHub Introduces Default Secret Scanning Push Protection for Public Repositories og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # GitHub Introduces Default Secret Scanning Push Protection for Public Repositories **[Collections](https://daily.dev/sources/collections)** · 1 min read · 1 upvotes · 0 comments ## Summary GitHub has introduced push protection and secret scanning features for public repositories. Push protection allows developers to remove secrets from commits or bypass a block, while secret scanning detects and lists any leaked secrets. Leaked secrets can pose a significant risk to reputation, revenue, and legal exposure. The secret scanning feature identifies over 200 token types and patterns from more than 180 service providers and has added validity checks for popular services like AWS, Microsoft, Google, and Slack. ## Content GitHub has recently introduced push protection and secret scanning features for public repositories. Push protection allows developers to remove secrets from commits or bypass a block, while secret scanning detects and lists any leaked secrets. Secret scanning push protection is now mandatory for all pushes to public repositories, with users having the option to bypass the block if necessary. GitHub has already detected over 1 million leaked secrets on public repositories in the first eight weeks of 2024. Leaked secrets can pose a significant risk to reputation, revenue, and even legal exposure. In addition to the push protection feature, GitHub also offers several other security features for private repositories. The secret scanning feature identifies over 200 token types and patterns from more than 180 service providers and has recently added validity checks for popular services like AWS, Microsoft, Google, and Slack. These updates come after GitHub experienced an ongoing repo confusion attack with repositories containing obfuscated malware. ## Similar posts on daily.dev - [Don’t just attend KubeCon \+ CloudNativeCon, Merge Forward your experience\!](https://daily.dev/posts/don-t-just-attend-kubecon-cloudnativecon-merge-forward-your-experience--l0rpp73x8) · CNCF · 1 upvotes · 0 comments - [Announcing H2 2026 KCDs](https://daily.dev/posts/announcing-h2-2026-kcds-m96goajm1) · CNCF · 1 upvotes · 0 comments - [Two months of Open Community Groups](https://daily.dev/posts/two-months-of-open-community-groups-asf52zhbs) · CNCF · 0 upvotes · 0 comments - [CNCF Unveils Schedule for KubeCon \+ CloudNativeCon Europe 2026](https://daily.dev/posts/cncf-unveils-schedule-for-kubecon-cloudnativecon-europe-2026-ikhcoa5cb) · CNCF · 2 upvotes · 0 comments - [CNCF Debuts KubeCon \+ CloudNativeCon Japan 2026 Schedule](https://daily.dev/posts/cncf-debuts-kubecon-cloudnativecon-japan-2026-schedule-xp5pyudub) · CNCF · 1 upvotes · 0 comments --- Tags: [#devtools](https://daily.dev/tags/devtools), [#github](https://daily.dev/tags/github), [#security](https://daily.dev/tags/security) [View this post on daily.dev](https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"GitHub Introduces Default Secret Scanning Push Protection for Public Repositories","url":"https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux"},"datePublished":"2024-03-01T10:00:54.215Z","dateModified":"2026-03-15T03:40:35.432Z","description":"GitHub has introduced push protection and secret scanning features for public repositories. Push protection allows developers to remove secrets from commits or...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b7496882c0a0651b12d0296cf4051c13?_a=AQAEufR","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/b7496882c0a0651b12d0296cf4051c13?_a=AQAEufR","isAccessibleForFree":true,"articleSection":"Collections","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Collections","logo":"https://media.daily.dev/image/upload/s--fk_6ycEi--/f_auto,q_auto/v1780996001/logos/collections?_a=BAMAMiWQ0","url":"https://daily.dev/sources/collections"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/github-introduces-default-secret-scanning-push-protection-for-public-repositories-cgq1rj4ux","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"devtools,github,security","timeRequired":"PT1M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Collections","item":"https://daily.dev/sources/collections"},{"@type":"ListItem","position":3,"name":"GitHub Introduces Default Secret Scanning Push Protection for Public Repositories"}]} ```