github
Secret scanning: dry-runs for enterprise-level custom patterns
Summary
As testing tool, a dry-run scan at the enterprise level will allow users to hone their custom regex patterns by determining the estimated number and quality of alerts generated for a specified pattern. This feature follows our release of repository and organization level dry-runs.
Intended Outcome
A poorly authored regular expression can spawn thousands of results across an enterprise. Dry-run scans will allow users to prevent a bloat of results by testing their patterns before submission.
How will it work?
Users can easily test their patterns before publishing at the repository, organization, and now enterprise levels. The dry-run scan will provide users with an estimate of the number of alerts that their pattern would create if published, as well as a sample set of detected secrets in the relevant repositories.
🚢 Shipped to the cloud: https://github.blog/changelog/2022-05-12-secret-scanning-dry-runs-for-enterprise-level-custom-patterns/
This has shipped to GHES 3.6 🚢 https://docs.github.com/en/[email protected]/admin/release-notes Closing out this issue
