To enhance auditing and troubleshooting, we’ve introduced new webhook and audit log events to track the completion of certain secret backfill scans on repositories.
The events specify the type of backfill scan completed (e.g., Git backfill or issues backfill) and the secret types scanned, including custom patterns. Note that secrets detected through Copilot Secret Scanning are not included.
Backfill scans cover the entire repository and occur when secret scanning is enabled or patterns are updated. These events do not include information on incremental scans, which focus on new content pushed to a repository.
A repository must have a GitHub Advanced Security license to access these events.
Learn more about how to secure your repositories with secret scanning.
The post Audit log and webhook events for secret scan completions appeared first on The GitHub Blog.