A GitHub feature that watches your repository for known secret formats — like API keys and tokens — and alerts you when it spots one. It's on by default for public repositories.