Secret scanning supports on-demand token validity checks

GitHub Advanced Security customers can now perform on-demand validity checks for supported partner patterns, and the alert index view now shows if a secret is active. This builds on our release of enabling automatic validation checks for supported partner patterns back in April.

When the “Automatically verify if a secret is valid” setting is enabled on a repository, users will see a “Verify secret” button on the alert page. This sends the secret to our relevant partner provider to see if the secret is active and updates the status on the alert and index pages.

As we work with our partners to add support for more secrets, we'll update the "Validity check" column in the documented supported secrets list.

• Learn more about secret scanning
• Become a secret scanning partner
• Got feedback? Open a discussion in our code security community