feat: secret scanning eventtype

Author: leftrightleft

github_app_for_splunk/default/eventtypes.conf

@@ -14,7 +14,7 @@ search = `github_webhooks` action IN ("submitted","edited","dismissed") pull_req
 search = `github_webhooks` after=* before=* "commits{}.id"=* ref=* "pusher.name"=*
 
 [GitHub::Repo]
-search = `github_webhooks` action IN ("created","deleted","archived","unarchived","edited","renamed","transferred","publicized","privatized") "repository.name"=* NOT "pull_request.id"=* NOT "project_card.id"=* NOT "project.number"=* NOT "project_column.id"=* NOT "check_run.id"=*
+search = `github_webhooks` action IN ("created","deleted","archived","unarchived","edited","renamed","transferred","publicized","privatized") "repository.name"=* NOT "pull_request.id"=* NOT "project_card.id"=* NOT "project.number"=* NOT "project_column.id"=* NOT "check_run.id"=* NOT "alert.created_at"=* NOT "alert.number"=*
 
 [GitHub::Project]
 search = `github_webhooks` action IN ("created","edited","closed","reopenend","deleted") "project.number"=*
@@ -31,6 +31,9 @@ search = `github_webhooks` action IN ("queued","created","started","completed")
 [GitHub::CodeScanning]
 search = `github_webhooks` action IN ("appeared_in_branch", "closed_by_user", "created", "fixed", "reopened", "reopened_by_user") "alert.created_at"=*
 
+[GitHub::SecretScanning]
+search = `github_webhooks` action IN ("created", "resolved") "alert.secret_type"=*
+
 [GitHub::VulnerabilityAlert]
 search = `github_webhooks` action IN ("create", "dismiss", "resolve") "alert.external_identifier"=*