How GitHub used secret scanning to reach inbox zero

GitHub Security piloted Secret Scanning and identified over 20,000 secrets across more than 15,000 repositories. Five specific repos held roughly 18,000 inactive test fixtures that the team closed in days. Engineers enabled push protection to stop new debt while rotating active credentials before rewriting git history.