Monitored public sources

GitGuardian Public Monitoring continuously scans public GitHub for exposed secrets related to your organization. It is now expanding beyond GitHub to cover additional public sources, starting with DockerHub.

Each source is described by the same four characteristics:

• What we scan - the type of public content we analyze on that source (for example, commits or container image layers).
• Scan model - how the source is covered over time:
  • Real-time: new content is scanned as it is published.
  • Historical: existing public content is scanned, as opposed to new content as it appears.
• Attachment reasons - the rules that attach a detected secret to your company. Each source supports a subset of these rules, depending on the data it exposes. See Company public perimeter for how attachment works.
• Availability - whether the source is generally available or in limited availability.

Supported sources

Source	What we scan	Scan model	Attachment reasons	Availability
GitHub - Commits	Public commits	Real-time + historical	Developer · Organization · Secret grasper	Generally available
GitHub - Gists	Public gists	Historical only	Developer	Generally available
DockerHub - Image layers	Public image layers	Historical only	Secret grasper · Domain in secret value · Domain in owner profile	Limited availability

For the specifics of each source, see:

• GitHub - commits and gists
• DockerHub - public container image layers

Limited availability

Sources marked as Limited availability are currently enabled for selected workspaces. Contact your account team to request access.