That's already a feature.

I would guess MB simply didn't enable it on their Enterprise instance, maybe because they push too many secrets.

https://docs.github.com/en/code-security/secret-scanning/pus...