Hunting Living Secrets: Secret Validity Checks Arrive in GitHub Advanced Security for Azure DevOps
Aug 12, 2025Michael Omokoh

Summary
Introduces secret validity checks to GitHub Advanced Security for Azure DevOps and the standalone Secret Protection experience. This feature queries providers to determine if detected secrets are still active, assigning an 'Active' or 'Unknown' status to alerts. It improves prioritization by allowing users to focus on 'living' secrets and reduces wasted effort on revoked credentials. The post details the workflow, including filtering for active secrets, on-demand verification, and strategies for handling 'Unknown' secrets.
More from the Azure DevOps Advanced Security API Access Control trail
- Copilot Code Reviews for Azure Repos (public preview)
- Copilot Autofix for GitHub Advanced Security for Azure DevOps
- Copilot Code Reviews for Azure Repos
- One-click security scanning and org-wide alert triage come to Advanced Security
- Temporary rollback: build identities can access Advanced Security: read alerts again