Secret scanning operates by conducting periodic background checks, but users also have the option to initiate manual checks to ensure comprehensive security coverage.
GitHub shared in its recent blog post, “Validity checks are another piece of information at your disposal when investigating a secret scanning alert. We hope this feature will provide greater speed and efficiency in triaging alerts and remediation efforts.”