# Secret security

Learn about secret scanning patterns, risk report CSV contents, and GitHub secrets.

## Links

* [Understanding GitHub secret types](/en/enterprise-cloud@latest/code-security/reference/secret-security/secret-types)

  Learn about the usage, scope, and access permissions for GitHub secrets.

* [Supported secret scanning patterns](/en/enterprise-cloud@latest/code-security/reference/secret-security/supported-secret-scanning-patterns)

  Lists of supported secrets and the partners that GitHub works with to prevent fraudulent use of secrets that were committed accidentally.

* [Secret scanning detection scope](/en/enterprise-cloud@latest/code-security/reference/secret-security/secret-scanning-scope)

  Secret scanning uses pattern matching and validation to detect secrets. Detection varies based on pattern pairs, token types, and push protection settings.

* [Custom patterns reference](/en/enterprise-cloud@latest/code-security/reference/secret-security/custom-patterns)

  Use specific regular expression syntax to define accurate custom patterns for secret scanning.

* [Contents of the secret risk assessment report CSV](/en/enterprise-cloud@latest/code-security/reference/secret-security/risk-report-csv-contents)

  Understand the data included in the CSV export of the secret risk assessment report.

* [Secret scanning pattern configuration data](/en/enterprise-cloud@latest/code-security/reference/secret-security/secret-pattern-data)

  Understand the data displayed in the secret scanning pattern configuration page to make informed decisions about push protection settings.