Question
Which of the following statements best describes secret scanning push protection?
- A. Buttons for sensitive actions in the GitHub UI are disabled.
- B. Commits that contain secrets are blocked before code is added to the repository. Correct
- C. Users need to reply to a 2FA challenge before any push events.
- D. Secret scanning alerts must be closed before a branch can be merged into the repository.
Explanation
Push protection checks pushes for highly identifiable secrets and blocks the push before the secret reaches the repository. The contributor must then remove the secret or, if needed, bypass the protection. It does not disable buttons in the GitHub UI or add a 2FA challenge to pushes. It also acts at push time, so it is not a merge rule requiring existing alerts to be closed.
