Public Monitoring Adds Triage, Validity, API, and Webhooks
GitHub has updated its public monitoring feature for GitHub Enterprise Cloud, introducing advanced alert management, ongoing token validity checks, REST API support, and enterprise webhooks to help security teams handle leaked secrets at scale.
Radwan AbdulhadiEditor and technology writer
Enhanced Alert Management for Enterprises
GitHub has announced major updates to its public monitoring capabilities, designed to help enterprises triage and remediate leaked secrets at scale. Enterprises utilizing public monitoring can now manage findings directly from the enterprise security dashboard using a comprehensive suite of alert management features.
The updated functionality allows security teams to close alerts as Dismissed or Fixed, provide optional comments explaining their decisions, and reopen closed alerts if circumstances change. Additionally, an activity timeline provides an audit trail of all actions and state changes taken on an alert. Security personnel can also filter and sort alert lists by repository, committer, secret type, attribution method—such as membership or verified domain—and state, allowing them to focus on critical exposures.
Automated Validity Checks for Prioritization
To assist security teams in quickly prioritizing their responses, public monitoring now automatically checks token validity on an ongoing basis for supported providers. Alerts clearly display whether a credential is Active, Inactive, or Unknown.
This continuous monitoring helps organizations immediately identify which leaked credentials represent active risks. GitHub notes that closing an alert updates its state for the enterprise, though it does not automatically revoke the exposed credential or remove it from the public repository.
Integration via REST API and Webhooks
Organizations looking to incorporate public monitoring findings into custom incident response pipelines can now leverage newly introduced programmatic tools. Enterprise admins and security managers can query attributed findings using a dedicated REST API endpoint.
Furthermore, enterprise webhooks have been expanded to support the secret scanning public monitoring alert event. This enables teams to receive real-time notifications whenever a newly detected leak is attributed to their organization, streamlining automated workflows.
Availability and Licensing Details
The updated public monitoring tools are detailed in the official GitHub Changelog, outlining how enterprises can enable the features and manage alert settings directly from the enterprise security dashboard.
Public monitoring remains available in public preview for GitHub Enterprise Cloud customers, including environments utilizing data residency. The feature is included at no additional cost for users with a GitHub Advanced Security or GitHub Secret Protection license.
Community Engagement and Further Resources
Developers and enterprise administrators interested in discussing the latest security updates can engage with peers and maintainers through the GitHub Community channels.
Sources
- GitHub ChangelogPublic monitoring adds triage, validity, API, and webhooks
Continue chronologically
Related entity coverage
Related stories
GitHub Package Firewall Enters Public Preview for Enterprise
GitHub introduces a new package firewall in public preview to protect CI/CD hosts and developer workstations against installation-time malware attacks.
GitHub Adds AI Scan Metrics to Security Overview
GitHub is adding AI Scan metrics to its security overview, giving organization and enterprise administrators new data on findings and fixes.
GitHub Expands Enforcement of Advanced Security Settings
GitHub now lets enterprise administrators enforce Advanced Security configurations across organizations, limiting lower-level overrides.
GitHub Actions API and UI Updates Query Count Results
GitHub has introduced updates to query results in the GitHub Actions API and UI to improve performance and provide more accurate record counts.
