REPORTED DEVELOPMENT
GitHub Public Monitoring periodically checks detected-secret validity and exposes status through alerts, APIs and webhooks. It is a public preview for eligible Enterprise Cloud customers with licensing included. Closing an alert does not revoke or delete the secret.
WHY IT MATTERS TO THE MARKET
Detection status and actual credential revocation are separate controls.