Unverified50% confidenceFactExact time
User-facing push protection is enabled by default and blocks pushes of secrets to public repositories; repository-facing push protection requires GitHub Secret Protection to be enabled and is disabled by default, and must be manually turned on by an administrator.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/14/2026
First Seen
Valid until: 1/12/2027
Sources
Related Entities
Related Claims
UnverifiedGitHub官方安全指南推荐在GitHub Actions中锁定到commit SHA以规避标签被强制推送覆盖的供应链安全风险74% similarUnverifiedIn a GitHub Actions workflow, the publish token is stored in encrypted form in the repository secrets and is injected into environment variables only when the workflow runs, to avoid leakage.71% similarUnverified创建仓库时务必设为私有，否则任何人都能看到代码，含有API密钥等敏感数据会造成泄露70% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1023117API
curl https://kongchang.com/api/v1/knowledge/claims/1023117MCP
get_claim(id=1023117)