Back to updates

Secret-Scanning - 1

2026 (11)

May (1)

github: Secret scanning with GitHub MCP Server is now generally available

GitHub

2026-05-05

GitHub secret scanning in the GitHub MCP server is now generally available. It can be used with MCP-compatible AI coding agents or IDEs, including GitHub Copilot CLI.

April (4)

github: Secret scanning pattern updates and product improvements

GitHub

2026-04-14

GitHub says it is rolling out secret scanning updates that improve detection coverage, APIs, and related workflows. The post says these changes are part of ongoing secret scanning product improvements, but the provided excerpt does not include具体 details.

github: Copilot cloud agent’s validation tools are now 20% faster

GitHub

2026-04-10

GitHub says the validation tools used by Copilot cloud agent are now 20% faster. The tools include CodeQL, the GitHub Advisory Database, secret scanning, and Copilot code review.

github: Ask Copilot in security assessments now available

GitHub

2026-04-09

GitHub added an Ask Copilot entry point in security assessment results, letting organization admins and security managers get contextual explanations and next-step guidance directly from secret risk assessment and Code Security risk assessment views.

github: Secret scanning improvements to alert APIs, webhooks, and delegated workflows

GitHub

2026-04-08

GitHub is rolling out updates to secret scanning alert APIs, webhooks, and delegated workflows. The changes are aimed at improving the developer experience for secret scanning features.

March (5)

github: GitHub secret scanning — coverage update

GitHub

2026-03-31

GitHub secret scanning added nine new secret detectors from seven providers as part of a coverage update. The update includes detectors for providers such as Langchain, Salesforce, and Figma, along with additional secret types from Figma, Google, and OpenVSX.

github: Push protection exemptions from repository settings

GitHub

2026-03-23

GitHub now lets repository admins manage secret scanning push protection exemptions from a repository’s settings. Before this change, exemptions were only configurable through organization- and enterprise-level security configurations.

github: Configure Copilot coding agent’s validation tools

GitHub

2026-03-18

GitHub says Copilot coding agent now automatically runs project tests and linting, plus GitHub validation tools such as CodeQL, advisory database checks, and secret scanning. The new update lets you configure which validation tools the agent uses.

github: Secret scanning in AI coding agents via the GitHub MCP Server

GitHub

2026-03-17

GitHub MCP Server can now scan code changes for exposed secrets before commit or pull request creation. The feature is intended to catch credential leaks early in AI coding agent workflows.

github: Push protection exemptions for roles, teams, and apps

GitHub

2026-03-17

GitHub added push protection exemptions for secret scanning at the organization level. Specific roles, teams, and GitHub Apps can now be exempted, with exemption status checked on each push.

February (1)

github: Secret scanning improvements to extended metadata checks

GitHub

2026-02-18

GitHub Secret Scanning now supports configuring extended metadata checks via security configurations, making it easier to enable these checks across many repositories.