Run secret scanningGITHUB_MCP_RUN_SECRET_SCANNING
Scan files, content, or recent changes for secrets such as API keys, passwords, tokens, and credentials.
This tool is intended for targeted scans of specific files, snippets, or diffs provided directly as content. The files parameter accepts either a single string or an array of strings containing raw file contents or diff hunks, and returns detected secrets with their locations and related secret scanning metadata. Content must not be empty. For full repository scanning, other mechanisms are available.
Caveats:
- Only files within the codebase should be scanned. Files outside of the codebase should not be sent.
- Files listed in .gitignore should be skipped.