docs/content/code-security/security-overview/viewing-metrics-for-secret-...

5.2 KiB

title shortTitle allowTitleToDifferFromFilename intro permissions product type redirect_from topics versions
Viewing metrics for secret scanning push protection View secret scanning metrics true You can use security overview to see how {% data variables.product.prodname_secret_scanning %} push protection is performing in repositories across your organization{% ifversion security-overview-enterprise-secret-scanning-metrics %} or enterprise{% endif %}, and to identify repositories where you may need to take action. {% data reusables.security-overview.permissions %} {% data reusables.gated-features.security-overview %} how_to
/code-security/security-overview/viewing-metrics-for-secret-scanning-push-protection-in-your-organization
Security overview
Advanced Security
Secret scanning
Organizations
Teams
feature
security-overview-push-protection-metrics-page

{% data reusables.secret-scanning.push-protection-org-metrics-beta %}

About metrics for {% data variables.product.prodname_secret_scanning %} push protection

The metrics overview for {% data variables.product.prodname_secret_scanning %} push protection helps you to understand how well you are preventing security leaks in your organization{% ifversion security-overview-enterprise-secret-scanning-metrics %} or across organizations in your enterprise{% endif %}. You can use the metrics to assess how push protection is performing, and to easily identify the repositories where you may need to take action in order to prevent leaks of sensitive information.

The overview shows you a summary of how many pushes containing secrets have been successfully blocked by push protection, as well as how many times push protection was bypassed.

You can also find more granular metrics, such as:

  • The secret types that have been blocked or bypassed the most
  • The repositories that have had the most pushes blocked
  • The repositories that are bypassing push protection the most
  • The percentage distribution of reasons that users give when they bypass the protection

{% ifversion security-overview-additional-tools %}Use the date picker to set the time range that you want to view alert activity and metrics for, and click in the search box to add further filters on the alerts and metrics displayed. For more information, see "AUTOTITLE."

You can see {% data variables.product.prodname_secret_scanning %} metrics if you have:

  • The admin role for the repository.
  • A custom repository role with the "View {% data variables.product.prodname_secret_scanning %} results" fine-grained permissions for the repository. For more information, see "AUTOTITLE."
  • Access to alerts for the repository. For more information, see "AUTOTITLE."

The metrics are based on activity from the default period or your selected period.

Screenshot of the top section of the "Metrics" view for secret scanning on the "Security" tab for an organization.

{% else %}

The metrics are based on activity from the default period or your selected period.

Screenshot of the top section of the "Metrics" view for secret scanning on the "Security" tab for an organization.

{% endif %}

Viewing metrics for {% data variables.product.prodname_secret_scanning %} push protection for an organization

{% data reusables.organizations.navigate-to-org %} {% data reusables.organizations.security-overview %}

  1. In the sidebar, under "Metrics", click {% octicon "graph" aria-hidden="true" %} {% data variables.product.prodname_secret_scanning_caps %}.
  2. Click on an individual secret type or repository to see the associated {% data variables.secret-scanning.alerts %} for your organization. {% data reusables.security-overview.filter-secret-scanning-metrics %}

{% ifversion security-overview-enterprise-secret-scanning-metrics %}

Viewing metrics for {% data variables.product.prodname_secret_scanning %} push protection for an enterprise

You can view metrics for {% data variables.product.prodname_secret_scanning %} push protection across organizations in an enterprise. {% data reusables.security-overview.information-varies-GHAS %}

{% data reusables.security-overview.enterprise-filters-tip %}

{% data reusables.enterprise-accounts.access-enterprise-on-dotcom %} {% data reusables.code-scanning.click-code-security-enterprise %}

  1. In the sidebar, click {% data variables.product.prodname_secret_scanning_caps %} metrics.
  2. Click on an individual secret type or repository to see the associated {% data variables.secret-scanning.alerts %} for your enterprise. {% data reusables.security-overview.filter-secret-scanning-metrics %}

{% endif %}