# Example using detect-secrets detect-secrets scan --baseline .secrets.baseline GitHub automatically scans public repositories for known secret formats. Ensure your organization has this enabled. What Security Teams Should Monitor If you are a blue team defender or a security manager, monitor your internal GitHub (GitHub Enterprise) for password.txt files. You can use the GitHub REST API to periodically search your organization’s repositories:
A typical automated query looks like this:
In the world of GitHub security, convenience is the enemy of safety. Plain text passwords belong nowhere near a Git repository—public or private. Stay secure. Audit your repos. And delete that password.txt file today.
# Example using detect-secrets detect-secrets scan --baseline .secrets.baseline GitHub automatically scans public repositories for known secret formats. Ensure your organization has this enabled. What Security Teams Should Monitor If you are a blue team defender or a security manager, monitor your internal GitHub (GitHub Enterprise) for password.txt files. You can use the GitHub REST API to periodically search your organization’s repositories:
A typical automated query looks like this:
In the world of GitHub security, convenience is the enemy of safety. Plain text passwords belong nowhere near a Git repository—public or private. Stay secure. Audit your repos. And delete that password.txt file today.