What do secret scanning validity checks help security teams understand when a secret is detected?
Select an answer to reveal the explanation.
Short Explanation
Validity checks help you see whether a detected secret still looks live with the provider that issued it, when that check is supported. That tells you which leaked credentials to revoke first. It doesn't auto-delete repos or track license seats.
Full Explanation
The correct answer is determining whether a detected secret still appears active or valid with the issuing provider when validity checking is supported. This helps prioritize remediation: active credentials need immediate rotation and revocation. The tabs-or-spaces preference option is irrelevant to secret validity. The automatic repository deletion option is wrong because detection creates alerts for triage, not blind repo deletion. The enterprise license seat count option confuses licensing with secret scanning. Combine validity signals with push protection, custom patterns for internal tokens, and playbooks for credential rotation across cloud providers.