GitHub has expanded its secret scanning capabilities to monitor all public repositories for leaked enterprise keys and credentials, with new features including MCP Server integration and improved false positive reduction. The system now provides broader coverage across enterprises and public repositories, helping developers prevent unauthorized access to sensitive data.
·Secret scanning now automatically watches public repos for leaked enterprise keys and credentials
·GitHub introduced general availability of MCP Server integration for secret scanning workflows
·New updates reduce false positives at scale, making the scanning system more trustworthy
·Enterprises gain expanded monitoring capabilities across their public repository infrastructure
·Security best practices guide recommends enabling secret scanning among core GitHub maintainer settings
drawn from The GitHub Blog, Tech Times, infoq.com, wiz.io · updated 13h ago