Question

You are an organization owner for a GitHub Enterprise Cloud organization with GitHub Advanced Security licensed. Leadership requires that secret scanning be automatically enabled on every existing repository as well as any repository created in the future, without an administrator needing to configure each repo individually. What is the most efficient way to meet this requirement?

Accepted Answer

Enable the GitHub Advanced Security and secret scanning options in the organization's Code security and analysis settings, and select the option to automatically enable them for new repositories.

Answer

Create a repository ruleset at the organization level that requires secret scanning to be active before pushes are accepted.

Answer

Ask each repository administrator to enable secret scanning individually under the repository's Code security and analysis settings.

Answer

Add a GitHub Actions workflow to every repository that runs a secret scanning tool on each push and blocks the merge on detection.