Secret Scanning - 2

2025 (6)

November (1)

github: Secret scanning detects Base64-encoded secrets and more — October 2025

GitHub

2025-11-04

GitHub announced October 2025 updates to its secret scanning service, including new detection for Base64-encoded secrets and other expanded support for additional secret types.

October (1)

github: Secret Protection expands default pattern support – September 2025

GitHub

2025-10-07

GitHub updated the Secret Protection default pattern set in September 2025, adding new secret detection patterns and upgrading existing ones to improve coverage across different secret types. The changes expand built-in secret scanning so repositories using the default patterns benefit from broader, more accurate detection without manual configuration.

September (4)

github: Secret scanning adds validators for MongoDB, Meta, and Microsoft Azure

GitHub

2025-09-30

GitHub Secret Scanning has added validity-check validators for secrets related to MongoDB, Meta, and Microsoft Azure. These new checks augment existing validators to improve detection of provider-specific credentials and prevent accidental commits of valid secrets.

github: Accelerate remediation with security campaigns and assignable alerts for code scanning and secret scanning

GitHub

2025-09-23

GitHub announced two enhancements to speed up remediation of security issues: expanding security campaigns to cover secret scanning alerts and adding assignable alerts for both code scanning and secret scanning so teams can assign ownership and track remediation.

github: Delegated bypass controls for push protection now available at the enterprise level

GitHub

2025-09-16

GitHub now offers delegated bypass controls for push protection at the enterprise level. Administrators can choose who is allowed to bypass secret-scanning push protections and designate reviewers for bypass requests, centrally managing approvers to improve governance and reduce risk.

github: Secret scanning validity checks available for Proxima, new validators added

GitHub

2025-09-10

GitHub announced that secret scanning validity checks are now available on GitHub Proxima and Enterprise Server Proxima. The feature is offered to customers using GitHub Secret Protection and GitHub Advanced Security, and several new validators have been added.