You manage a GitHub Enterprise account and must enable push protection for secret scanning across the organization’s repositories. What should you do first?

To enable push protection for secret scanning in GitHub Enterprise, you must first purchase a GitHub Advanced Security (GHAS) license. GHAS provides advanced security features, including secret scanning with push protection, dependency review, and code scanning. Without a GHAS license, these advanced features are not available. Purchasing Premium Plus support offers enhanced technical assistance but doesn't unlock specific security features. Enforcing MFA improves account security but is unrelated to enabling secret scanning. Creating an access policy for secrets might be a subsequent step for managing access, but it doesn't enable the secret scanning feature itself.