Secret scanning: Blocks the push of code that contains credentials (like passwords and API keys) to repositories, and also scans repos to find any already-published credentials.