Question

You are the organization security admin for a company with 300 existing repositories and dozens of new repositories created each month. Leadership wants push protection to automatically apply to every repository going forward, including any repo created after today, without requiring an engineer to toggle a setting per repo. Which action best achieves this goal?

Accepted Answer

Enable push protection in the organization's code security and analysis settings and select the option to automatically enable it for repositories added to the organization

Answer

Add a branch protection rule to the default branch of each repository that requires a passing secret scanning status check

Answer

Create a repository template with push protection enabled and instruct all teams to base new repositories on that template

Answer

Write a scheduled GitHub Actions workflow that scans commits nightly and rejects any that contain secrets