Export Default Secret Types Enabled at Enterprise Level

[nkunchapu-wowcorp]

Select Topic Area

General

Body

Hi GitHub Team and community,

We’re looking for a way to export or retrieve the list of default secret scanning patterns (secret types) that are enabled at the enterprise level.

At the moment, while we can view and manage secret scanning settings via the UI, there doesn’t appear to be a straightforward way to:

Programmatically export the list of enabled default secret types

Audit or report on these configurations across the enterprise

Use this data for compliance, documentation, or internal security reviews

Use case:
We operate in a regulated environment where we need to regularly audit security controls. Being able to export the enabled secret types would allow us to:

Validate coverage against internal policies

Maintain evidence for compliance audits

Automate reporting across multiple organizations and repositories

Request:
It would be extremely helpful to have one of the following:

An API endpoint to list/export enabled default secret types at the enterprise level

CLI support via gh

Or a downloadable report from the UI

If this functionality already exists, we’d appreciate guidance. Otherwise, we’d love to see this considered for the roadmap.

Thanks in advance!