8c62486a96
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> Co-authored-by: Isaac Brown <101839405+isaacmbrown@users.noreply.github.com> Co-authored-by: mchammer01 <42146119+mchammer01@users.noreply.github.com> Co-authored-by: Anne-Marie <102995847+am-stead@users.noreply.github.com> Co-authored-by: Hector Alfaro <hectorsector@github.com> Co-authored-by: Vanessa <vgrl@github.com> Co-authored-by: Erin Havens <erinhav@github.com> Co-authored-by: Aaron Waggener <73763104+aaronwaggener@users.noreply.github.com> Co-authored-by: Sam Browning <106113886+sabrowning1@users.noreply.github.com> Co-authored-by: Sarah Schneider <sarahs@users.noreply.github.com> Co-authored-by: Sarita Iyer <66540150+saritai@users.noreply.github.com> Co-authored-by: Sarah Schneider <sarahs@github.com>
49 lines
3.3 KiB
Markdown
49 lines
3.3 KiB
Markdown
---
|
|
title: Enabling Copilot secret scanning's generic secret detection
|
|
shortTitle: Enable generic secret detection
|
|
intro: 'You can enable {% data variables.secret-scanning.generic-secret-detection %} for your repository or organization. Alerts for generic secrets, such as passwords, are displayed in a separate list on the {% data variables.product.prodname_secret_scanning %} alerts page.'
|
|
allowTitleToDifferFromFilename: true
|
|
permissions: '{% data reusables.permissions.security-repo-enable %}'
|
|
versions:
|
|
feature: secret-scanning-ai-generic-secret-detection
|
|
type: how_to
|
|
topics:
|
|
- Secret scanning
|
|
- Secret Protection
|
|
- AI
|
|
- Copilot
|
|
redirect_from:
|
|
- /code-security/secret-scanning/enabling-ai-powered-generic-secret-detection
|
|
- /code-security/secret-scanning/using-advanced-secret-scanning-and-push-protection-features/generic-secret-detection/enabling-ai-powered-generic-secret-detection
|
|
---
|
|
|
|
## Enabling {% data variables.secret-scanning.generic-secret-detection %}
|
|
|
|
{% data reusables.secret-scanning.generic-secret-detection-policy-note %}
|
|
|
|
You can enable {% data variables.secret-scanning.generic-secret-detection %} in the security settings page of your repository or organization.
|
|
|
|
{% data reusables.secret-scanning.copilot-secret-scanning-generic-secrets-subscription-note %}
|
|
|
|
### Enabling {% data variables.secret-scanning.generic-secret-detection %} for your repository
|
|
|
|
{% data reusables.repositories.navigate-to-repo %}
|
|
{% data reusables.repositories.sidebar-settings %}
|
|
{% data reusables.repositories.navigate-to-code-security-and-analysis %}
|
|
1. Under "{% data variables.product.prodname_secret_protection %}", to the right of "Scan for generic passwords", click **Enable**.
|
|
|
|
### Enabling {% data variables.secret-scanning.generic-secret-detection %} for your organization
|
|
|
|
You must configure {% data variables.secret-scanning.generic-secret-detection %} for your organization using a {% data variables.product.prodname_custom_security_configuration %}. You can then apply the {% data variables.product.prodname_security_configuration %} to all (or selected) repositories in your organization.
|
|
|
|
1. Create a new {% data variables.product.prodname_custom_security_configuration %}, or edit an existing one. See [AUTOTITLE](/code-security/securing-your-organization/enabling-security-features-in-your-organization/creating-a-custom-security-configuration#creating-a-custom-security-configuration).
|
|
1. When creating the custom security configuration, ensure that "{% data variables.product.prodname_secret_protection %}" is set to **Enabled**, and that the dropdown menu for "Scan for generic secrets" is also set to **Enabled**.
|
|
1. Apply the {% data variables.product.prodname_custom_security_configuration %} to one or more repositories. For more information, see [Applying a {% data variables.product.prodname_custom_security_configuration %}](/code-security/securing-your-organization/meeting-your-specific-security-needs-with-custom-security-configurations/applying-a-custom-security-configuration).
|
|
|
|
For information on how to view alerts for generic secrets that have been detected using AI, see [AUTOTITLE](/code-security/secret-scanning/managing-alerts-from-secret-scanning/viewing-alerts).
|
|
|
|
## Further reading
|
|
|
|
* [AUTOTITLE](/code-security/secret-scanning/copilot-secret-scanning/responsible-ai-generic-secrets)
|
|
* [AUTOTITLE](/code-security/secret-scanning/introduction/about-secret-scanning)
|