{
"$type": "site.standard.document",
"bskyPostRef": {
"cid": "bafyreicbsm4efmozgyqkiegi4svpdylaynpwtc2xjpyjrbugfuhueqadei",
"uri": "at://did:plc:2ikdxjcpbsuoe6mv3qawmazg/app.bsky.feed.post/3mpp7wllywac2"
},
"coverImage": {
"$type": "blob",
"ref": {
"$link": "bafkreieb5wyo3arc3kw5iaho2zc5krco3d3tqmwbefnvqryzucqq5vjtvu"
},
"mimeType": "image/png",
"size": 1207738
},
"path": "/security/application-security/how-github-used-secret-scanning-to-reach-inbox-zero/",
"publishedAt": "2026-07-02T16:00:00.000Z",
"site": "https://github.blog",
"tags": [
"Application security",
"Security",
"GHAS",
"push protection",
"Secret Scanning",
"How GitHub used secret scanning to reach inbox zero",
"The GitHub Blog"
],
"textContent": "GitHub had 20,000+ secret scanning alerts across 15,000 repositories. Here's how we separated signal from noise, built remediation workflows, and reached inbox zero in nine months.\n\nThe post How GitHub used secret scanning to reach inbox zero appeared first on The GitHub Blog.",
"title": "How GitHub used secret scanning to reach inbox zero"
}