Clearer names for secret scanning detector types

Дата публикации: 10-07-2026 20:06:10

To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change…
The post Clearer names for secret scanning detector types appeared first on The GitHub Blog.

Основное содержимое страницы с новостью.

To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same.

All existing product documentation links continue to work. We’ve added redirects and updated the terminology across our documentation. There are no changes to webhook events, audit log events, or the REST API.

There are two kinds of secrets we detect:

• Provider secrets are issued by a specific service (e.g., an AWS key, a Stripe token).
• Generic secrets aren’t tied to any provider (e.g., private keys, connection strings, passwords).

There are two ways we detect them:

• Patterns use deterministic detection (i.e., regular expressions combined with additional checks like entropy analysis). Patterns reliably catch secrets with a recognizable structure and include both provider patterns for provider secrets, as well as generic patterns like private keys and connection strings.
• AI-detected secrets use AI to catch generic secrets that don’t follow a predictable format (e.g., passwords). The model reads the surrounding code to find harder-to-detect unstructured secrets.

Learn more

Learn more about secret scanning and see the full list of supported secrets in our documentation. Let us know what you think in the community discussion.

Схожие новости

#	Наименование новости	Тональность	Информативность	Дата публикации
1	Innersource security advisories are generally available	0	5	08-07-2026
2	Organization-level targeting for GitHub Code Quality	5	7	09-07-2026
3	New pull requests dashboard is now generally available	5	7	09-07-2026
4	CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection	5	7	10-07-2026
5	Ask Copilot for a repository overview	0	5	09-07-2026
6	GitHub Mobile: Improved filters and sorting for Copilot sessions	0	5	10-07-2026
7	Per-user states for multi-user budgets in the REST API	5	7	10-07-2026
8	5 Best Kubernetes Security Tools in 2026: Full Breakdown	0	5	06-05-2026
9	Поддельный Go DNS Scanner обнаружили в 222 GitHub-репозиториях с вредоносным ПО	0	7	11-07-2026
10	The Hidden Cost of AI Security Scanners	0	7	20-05-2026

Классификация: Пресс-релизы. Схожих патентов: 0. Схожих новостей: 10. Тональность: 0. Информативность: 3. Источник: github.blog.