Back to updates

Secret Scanning - 1

2026 (7)

August (1)

github: Secret scanning coverage updates

GitHub

2026-08-07

GitHub updated secret scanning coverage by adding more secrets to push protection, onboarding a new secret scanning partner, and including richer metadata in alerts. The post also notes the Secret Scanning Partnership Program now includes Lovable Labs.

July (6)

github: Improvements to secret scanning and public monitoring

GitHub

2026-07-15

GitHub rolled out updates to secret scanning and public monitoring. Resend is now a secret scanning partner, and secret scanning can detect new secret types from APIclub.

github: Manage secret scanning custom patterns via REST API

GitHub

2026-07-13

GitHub now supports managing secret scanning custom patterns through the REST API. The new generally available endpoints let security teams list, create, and edit custom patterns programmatically.

github: Clearer names for secret scanning detector types

GitHub

2026-07-10

GitHub is renaming secret scanning detector types to make it clearer how each detector finds secrets. This is a naming-only change.

github: Secret scanning extended metadata and multipart validation

GitHub

2026-07-07

GitHub secret scanning now surfaces extended metadata for supported secret types to help identify ownership and impact of leaked secrets. The update also includes general availability of extended metadata checks and multipart validation support.

github: Secret scanning public monitoring for enterprises

GitHub

2026-07-02

GitHub announced secret scanning public monitoring for enterprises, aimed at helping organizations detect and respond to secret leaks as soon as they appear publicly. The post is a brief announcement and does not include implementation details in the provided text.

github: Secret scanning adds validators for Asana, IBM, and MessageBird

GitHub

2026-07-01

GitHub secret scanning now validates Asana, IBM, and MessageBird secrets to help determine whether detected credentials are still active. The update adds validity checks for these secret types.