1
0
mirror of synced 2025-12-30 12:02:01 -05:00

Secret scanning validity checks for partner patterns - [Public Beta] (#37289)

Co-authored-by: mc <42146119+mchammer01@users.noreply.github.com>
Co-authored-by: github-actions <github-actions@github.com>
Co-authored-by: Courtney Claessens <courtneycl@github.com>
Co-authored-by: Sophie <29382425+sophietheking@users.noreply.github.com>
Co-authored-by: Siara <108543037+SiaraMist@users.noreply.github.com>
This commit is contained in:
Anne-Marie
2023-08-11 19:42:20 +02:00
committed by GitHub
parent 54f11c865f
commit 12677484aa
12 changed files with 108 additions and 19 deletions

View File

@@ -0,0 +1,5 @@
# Reference: #9861.
# Documentation for secret scanning: validity check for partner patterns (GHAS).
versions:
ghec: '*'
ghes: '>=3.12'

View File

@@ -0,0 +1,7 @@
{% ifversion ghec %}
Validity checks for partner patterns is available on all types of repositories on {% data variables.product.prodname_dotcom_the_website %}. To use this feature, you must have a license for {% data variables.product.prodname_GH_advanced_security %}.
{% elsif ghes %}
Validity checks for partner patterns is available on all types of repositories in {% data variables.product.product_name %}. This feature requires a license for {% data variables.product.prodname_GH_advanced_security %}.
{% endif %}

View File

@@ -0,0 +1 @@
1. Under {% data variables.product.prodname_secret_scanning_caps %}, select the checkbox next to "Automatically verify if a secret is valid by sending it to the relevant partner".

View File

@@ -0,0 +1,5 @@
{% note %}
**Note:** Validity checks for partner patterns is currently in beta and subject to change.
{% endnote %}

View File

@@ -0,0 +1,7 @@
| Validity | Result |
|-------------------------|--------------------------------------------------------------------------------|
| Active secret | {% data variables.product.company_short %} confirmed this secret is active |
| Active secret | {% data variables.product.company_short %} checked with this secret's provider and found that the secret is active |
| Possibly active secret | {% data variables.product.company_short %} does not support validation checks for this token type yet |
| Possibly active secret | {% data variables.product.company_short %} could not verify this secret |
| Secret appears inactive | You should make sure no unauthorized access has already occurred |