Secret Scanning for Users provides alerts to users when which condition is met?

• A. When enabled on the private repository, users can receive alerts
• B. It is always on for all repositories
• C. If enabled on the public repository, users can receive secret scanning alerts
• D. It only scans secrets in pull requests

Answer: (C)

Secret scanning alerts are shown to users when the feature is actively enabled on a repository that is public. When secret scanning is turned on for a public repository, GitHub scans the code for exposed secrets and can generate alerts that users with access can see. This aligns with the idea that alerts depend on having the scan enabled for a public repo, rather than being automatically on for all repos or being limited to private repos or to pull requests. Scanning applies to the repository’s contents in general, not just to PRs.