Microsoft

Hunting Living Secrets: Secret Validity Checks Arrive in GitHub Advanced Security for Azure DevOps

Aug 12, 2025Michael Omokoh
Hunting Living Secrets: Secret Validity Checks Arrive in GitHub Advanced Security for Azure DevOps
SummaryAI, from the source post

Introduces secret validity checks to GitHub Advanced Security for Azure DevOps and the standalone Secret Protection experience. This feature queries providers to determine if detected secrets are still active, assigning an 'Active' or 'Unknown' status to alerts. It improves prioritization by allowing users to focus on 'living' secrets and reduces wasted effort on revoked credentials. The post details the workflow, including filtering for active secrets, on-demand verification, and strategies for handling 'Unknown' secrets.

More from the Azure DevOps Advanced Security API Access Control trail