Enabling extended metadata checks for your repository

About extended metadata checks

Extended metadata checks, often referred to as analyzers in other tools, are a secret scanning feature that you can enable for supported tokens.

When you enable extended metadata checks for tokens, secret scanning provides you with additional information about detected secrets, such as ownership and contact details. This information helps you:

• Gain deeper insight into detected secrets: Know who owns a secret.
• Improve incident response: Quickly identify responsible teams or individuals when a secret is leaked.
• Enhance compliance: Ensure secrets align with your organization’s governance and security policies.

This information appears on GitHub, in the page for the related secret scanning alert, helping you prioritize and remediate exposures more efficiently.

Metadata availability varies depending on the secret type. For more information, see 评估来自机密扫描的警报.

Enabling extended metadata checks

Before enabling metadata checks, you need to ensure that validity checks are enabled for the repository. See 为存储库启用有效性检查.

1. 在 GitHub 上，导航到存储库的主页面。

2. 在仓库名称下，单击 “Settings”****。 如果看不到“设置”选项卡，请选择“”下拉菜单，然后单击“设置”。

   

3. 在边栏的“Security”部分中，单击“ Advanced Security”****。

4. Under "Secret Protection", to the right of "Validity checks", click Enable.

5. Under "Secret Protection", to the right of "Extended metadata", click Enable.

Further reading

• 管理来自机密扫描的警报