Question 018
### When GitHub runs a scan of all historical code in enterprise repositories what is the notification behavior? (Select two.)
> https://docs.github.com/en/code-security/secret-scanning/managing-alerts-from-secret-scanning/monitoring-alerts#historical-scans
- [x] GitHub notifies the enterprise owners and security managers, even if no secrets are found.
- [x] GitHub notifies Repository administrators, security managers, and users with custom roles with read/write access whenever a secret is detected in a repository.
- [ ] GitHub notifies the enterprise owners and security managers, only if it detects exposed secrets.
- [ ] GitHub notifies the commit authors of the commits that contain exposed secrets.