Secret scanning

GitHub adds a merge gate for pull requests with unresolved secret alerts

GitHub’s new ruleset can block pull-request merges until selected secret-scanning alerts are resolved, adding a review-stage guard beyond push protection.