Secret-Scanning - 1

2026 (1)

January (1)

github: Secret scanning extended metadata to be automatically enabled for certain repositories

GitHub

2026-01-15

GitHub secret scanning will add support for extended metadata checks in repository security configurations, with the change taking effect on February 18, 2026. Extended metadata is implemented as a nested feature under existing validity checks and will be automatically enabled for certain repositories.

2025 (11)

December (2)

github: Enterprise governance and policy improvements for secret scanning

GitHub

2025-12-16

GitHub announced the general availability of enterprise governance and policy improvements for secret scanning, including enterprise-level delegated bypass controls for push protection and support for the new Enterprise Security Manager to provide stronger, more centralized controls and delegation for secret scanning across enterprises.

github: Secret scanning updates — November 2025

GitHub

2025-12-02

GitHub Secret Scanning received updates in November 2025 that added support for 24 new secret types via new provider patterns; details were published in the GitHub Blog changelog.

November (4)

github: Secret scanning alert assignees, security campaigns are generally available

GitHub

2025-11-25

GitHub announced that secret scanning alert assignees and security campaigns are now generally available. Alert assignees will receive email notifications to help teams track and remediate secret scanning alerts more effectively.

github: Secrets in unlisted GitHub gists are reported to secret scanning partners

GitHub

2025-11-25

As of 2025-11-25, GitHub will report publicly leaked secrets found in unlisted gists to the appropriate secret scanning partners, extending secret-scanning reporting beyond only listed/public gists.

github: Secret scanning improves private key detection, updates Sentry pattern names

GitHub

2025-11-12

GitHub secret scanning now recognizes additional private key formats and has upgraded its existing private key detectors to better catch exposed cryptographic credentials. The release also updates Sentry-related pattern names used in scanning.

github: Secret scanning detects Base64-encoded secrets and more — October 2025

GitHub

2025-11-04

GitHub announced October 2025 updates to its secret scanning service, including new detection for Base64-encoded secrets and other expanded support for additional secret types.

October (1)

github: Secret Protection expands default pattern support – September 2025

GitHub

2025-10-07

GitHub updated the Secret Protection default pattern set in September 2025, adding new secret detection patterns and upgrading existing ones to improve coverage across different secret types. The changes expand built-in secret scanning so repositories using the default patterns benefit from broader, more accurate detection without manual configuration.

September (4)

github: Secret scanning adds validators for MongoDB, Meta, and Microsoft Azure

GitHub

2025-09-30

GitHub Secret Scanning has added validity-check validators for secrets related to MongoDB, Meta, and Microsoft Azure. These new checks augment existing validators to improve detection of provider-specific credentials and prevent accidental commits of valid secrets.

github: Accelerate remediation with security campaigns and assignable alerts for code scanning and secret scanning

GitHub

2025-09-23

GitHub announced two enhancements to speed up remediation of security issues: expanding security campaigns to cover secret scanning alerts and adding assignable alerts for both code scanning and secret scanning so teams can assign ownership and track remediation.

github: Delegated bypass controls for push protection now available at the enterprise level

GitHub

2025-09-16

GitHub now offers delegated bypass controls for push protection at the enterprise level. Administrators can choose who is allowed to bypass secret-scanning push protections and designate reviewers for bypass requests, centrally managing approvers to improve governance and reduce risk.

github: Secret scanning validity checks available for Proxima, new validators added

GitHub

2025-09-10

GitHub announced that secret scanning validity checks are now available on GitHub Proxima and Enterprise Server Proxima. The feature is offered to customers using GitHub Secret Protection and GitHub Advanced Security, and several new validators have been added.