They have something called advanced security that can scan for things like secrets. It works on PRs though, so not very helpful if you have a public repo.