GitHub Secret Scanning Push Protection

Blocks git pushes that contain recognized secrets (API keys, tokens, private keys) before they land in your repository.

Free tier

• Push protection for users is on by default for every GitHub.com account
• Stops you from pushing supported secrets to public repositories

Best for

Everyone. AI tools often paste keys straight into code.

Related fix guides

• Environment variables are undefined in production (Vite and Next.js apps from Cursor, v0 and Bolt)

Sources

Checked on 2026-11-11. Vendors change pricing often, so confirm on the official page before you commit.

• https://docs.github.com/en/code-security/secret-scanning/introduction/about-push-protection