Managing secret scanning for your organization

About management of secret scanning

Secret scanning can help you mitigate the impact of leaked secrets in your organization's repositories. For more information, see "About secret scanning."

You can manage how GitHub scans for secrets in existing repositories in your organization. You can also enable or disable secret scanning by default for any new repositories that members create in your organization.

If you enable security and analysis features, GitHub performs read-only analysis on your repository. For more information, see "About GitHub's use of your data."

Enabling or disabling secret scanning for existing private repositories

1. In the top right corner of GitHub, click your profile photo, then click Your profile.
   
2. On the left side of your profile page, under "Organizations", click the icon for your organization.
   
3. Under your organization name, click Settings.
   
4. In the left sidebar, click Security & analysis.
   
5. To the right of "Secret scanning", click Disable all or Enable all.
   
6. Optionally, enable secret scanning by default for new private repositories in your organization.
   
7. Click Disable secret scanning or Enable secret scanning to disable or enable the feature for all the repositories in your organization.
   

Enabling or disabling secret scanning for new private repositories

1. In the top right corner of GitHub, click your profile photo, then click Your profile.
   
2. On the left side of your profile page, under "Organizations", click the icon for your organization.
   
3. Under your organization name, click Settings.
   
4. In the left sidebar, click Security & analysis.
   
5. To the right of "Secret scanning", enable or disable the feature by default for new private repositories in your organization.