Secret scanning: what is free, what needs a Secret Protection licence

This sheet compares Public repo scanning, Private/internal scanning, Custom patterns, Delegated bypass, AI-detected secrets.

CriterionPublic repo scanningPrivate/internal scanningCustom patternsDelegated bypassAI-detected secrets
What it doesScans full Git history across all branchesSecret scanning on private and internal reposDetect org-specific secret formatsControl who self-bypasses push protection vs requests reviewDetect unstructured secrets, e.g. plaintext passwords

The verdict, the full comparison, 6 rules and 3 traps are part of GH-100 access. Unlock GH-100.