Secret Scanning for Partners operates how?

• A. Runs only on private repos
• B. Run automatically on all public repositories and strings that match secret patterns are reported directly to the partner
• C. Requires manual initiation
• D. Only scans environment variables

Answer: (B)

Secret scanning for partners works by automatically scanning all public repositories for potential secrets. When the scan detects a string that matches known secret patterns—such as API keys, access tokens, or other credentials—it reports the finding directly to the partner. This happens without manual initiation, ensuring that secrets introduced into public code are surfaced promptly so the owner can rotate them and mitigate risk. It isn’t limited to private repos, and it isn’t restricted to environment variables only, since secrets can be embedded in code, configuration files, and other files in public repos. This automatic, direct-reporting behavior is what makes the option describing automatic scanning of all public repositories with direct reporting to the partner the best match.