Question

You administer Secret Protection for an organization's private repository. The security team complains that when new secret scanning alerts are created, the right people are not being notified quickly enough. You want to ensure that a specific group of security engineers automatically receives notifications for newly detected secret scanning alerts in this repository, without granting them full admin rights. Which action correctly achieves this?

Accepted Answer

Configure the repository's secret scanning alert recipients/notification settings so the designated security team members are added as alert recipients.

Answer

Add the security engineers as repository administrators so they inherit alert notifications automatically.

Answer

Enable push protection on the repository, which sends notifications to the security team whenever a secret is detected.

Answer

Create a custom secret pattern and assign the security team as the pattern owners to route alerts to them.