Secret scanning helps to prevent data leaks and fraud by identifying and flagging known types of secrets (tokens, private keys, etc.). Secrets can accidentally end up published in repositories—even experienced developers can slip up and find that a secret has been included in code published to a repository.
Once a secret is published (in our case, a license key), anyone with read access to the repository can use that license key to query the minFraud®, GeoIP®, and GeoLite services, or download the GeoIP and GeoLite databases—with your privileges.