Secret scanning public monitoring for enterprises

GitHub launched public monitoring in public preview July 1, 2026 for Enterprise Cloud customers with Secret Protection or Advanced Security at no additional cost. The feature monitors all public content on github.com in real time—repos, PR comments, issues, discussions—and attributes leaked secrets to enterprises via identity layer, verified domains, and token metadata. Enterprise owners enable it from the Security tab. Public monitoring never scans private repositories.