Question
Which of the following features helps to prioritize secret scanning alerts that present an immediate risk?
- A. non-provider patterns
- B. push protection
- C. secret validation Correct
- D. custom pattern dry runs
Explanation
Secret validation, known as validity checks, determines whether an exposed secret is still active, so you can remediate active secrets before ones that have already been revoked, and you can filter alerts by validity. Push protection blocks supported secrets before they are pushed, so it prevents new exposures rather than ranking existing alerts. Non-provider patterns widen what is detected without saying whether a secret is live. Custom pattern dry runs only test a pattern before it is published.
