GitHub on X: "20,000+ secret scanning alerts across 15,000 repos. Nine months later, GitHub reached inbox zero." / X

Post

GitHub
@github
20,000+ secret scanning alerts across 15,000 repos. Nine months later, GitHub reached inbox zero.
1:01 AM · Jul 20, 202693.1KViews
GitHub
@github
Jul 20
The key was separating noise from real risk, validating active credentials, finding owners, and making remediation a shared responsibility across engineering.
GitHub
@github
Jul 20
Here's how we did it ⬇️
How GitHub used secret scanning to reach inbox zero
From github.blog
Fabio Paniconi
@paniconi_fabio
Jul 20
Fix GH actions