Secret Scanning is automatically performed on which type of repositories?

• A. Private repos
• B. Public repos
• C. Enterprise repos
• D. Archived repos

Answer: (B)

Secret Scanning is the process of automatically checking code for exposed credentials like API keys and tokens. It is performed automatically on public repositories because anything in public code is accessible to anyone, so catching secrets there helps prevent real-world leaks. Private repositories typically require enabling Secret Scanning through a GitHub security plan, so they aren’t scanned automatically by default. Archived repositories aren’t treated the same as active ones, so automatic scanning isn’t assumed for them.