GitGuardian Detection Engine

No entries match these filters. Clear filters

1. changelog Oct 31, 2026 · issue 126

   GitGuardian Detection Engine: Eight checkers now need a custom host, including JFrog Artifactory, AWS Cognito, Bitbucket, Jira, Azure Storage, and Okta.

   • The jenkins_api_token detector now also matches the Jenkins instance URL.
   • The microsoft_azure_storage_account_key_with_account_name detector moves to its own detector group.

   2 more in Everything

2. Detection Engine Updates Version 2.175 (2026-10-27) Oct 27, 2026 · issue 125
   • New detection Portainer API Key detector
   • New detection Weights & Biases API Key checker and analyzer
   • New detection Custom-host checkers activated for eight services
   • Updated detection json_web_token recall improvement
   • Updated detection sentry_org_auth_token recall improvement
   • Updated detection jenkins_api_token host URL matching
   • Updated detection keycloak_access_token precision improvement
   • Updated detection generic_password false positive reduction
   • Updated detection generic_high_entropy_secret false positive reduction
   • Updated detection microsoft_azure_storage_account_key_with_account_name moved to own detector group
3. changelog Oct 23, 2026 · issue 118

   GitGuardian v2.174.0 adds 10 new detectors, 2 new analyzers, and a new SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. validity checker across dozens of credential types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds new detectors for sftp_credentials_assignment SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. credentials, Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. private keys, and Kubernetes bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. stored in kubeconfig files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables validity checker for SMTP credentials.
   • Adds aws_ses_keys checker timeout to reduce kills by apikey-checker.
   • The snyk_key_v2 checker now supports the SNYK-US-02 region.
   • The azure_entra_app_secret detector now detects credentials declared against Microsoft national cloud sign-in hosts.

   +5 more show less

   • The ftp_credentials_assignment detector now handles secrets without a port, and the mssql_assignment detector now detects MSSQL credentials assigned without a port.
   • The algolia_monitoring checker now validates all Algolia keys with more permissions than the default search key.
   • The snowpark_api_credentials checker now supports short account identifiers, hostnames, and full Snowflake URLs.
   • The Azure Entra Access Token checker and Azure Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. API Keys checker now accept a custom host, while the Azure Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. token checker, GitLab Deploy Token checker, and LiteLLM API key checker can now reach custom hosts through a proxy.
   • The n8n API key checker and n8n MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. checker now check keys and tokens found with a host written without its scheme.
   • Adds new detectors for sftp_credentials_assignment SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. credentials, Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. private keys, and Kubernetes bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. stored in kubeconfig files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Enables validity checker for SMTP credentials.

   8 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The line_notify_token detector has been removed.
   • !The ftp_credentials_assignment detector now only captures FTP secrets, not SFTP — SFTP secrets require the new sftp_credentials_assignment detector.
   • !The azure_event_grid_access_key_with_host detector has been merged into azure_event_grid_access_key.
   • !The grafana_service_account_token_with_host detector has been merged into grafana_service_account_token.
   • !The kubernetes_jwt_with_host detector has been merged into kubernetes_jwt.
   • !The planetscale_database_password_with_host_and_username detector has been merged into planetscale_database_password.
   • !The postgres_assignment_attached_port and postgres_assignment_no_port detectors have been merged into postgres_assignment.
4. docs update Oct 16, 2026 · issue 110
   • Updated detection GitGuardian detector library
5. Detection Engine Updates Version 2.174 (2026-10-13) Oct 13, 2026 · issue 111

   Detection Engine 2.174 adds 10 new detectors, 2 new analyzers, and a new SMTPSMTPThe application-layer protocol used to send email between servers and from clients to servers; cyber tools use it to relay alerts, phishing simulations, or exfiltrated data over standard mail infrastructure. validity checker across dozens of credential types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds new detectors for SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. credentials (sftp_credentials_assignment), Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. private keys, and Kubernetes bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. stored in kubeconfig files; adds new analyzers for GoCardless API access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. and Adobe refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API.; and enables a validity checker for SMTP credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Expands snyk_key_v2 checker to support the SNYK-US-02 region, snowpark_api_credentials checker to support short account identifiers, hostnames, and full Snowflake URLs, and algolia_monitoring checker to validate all Algolia keys with more permissions than the default search key.
   • Extends azure_entra_app_secret detector to detect credentials declared against Microsoft national cloud sign-in hosts, GitHub Server-to-server token (ghs_<app id>_<JWT>) detection to any number of scopes including longer tokens previously missed, docker_credentials detector to support the new Docker credential format, ssh_password detector to detect passwords sent in expect scripts after an SSH password prompt, mssql_assignment detector to detect MSSQL credentials assigned without a port, ftp_credentials_assignment checker to handle secrets without a port, and Gemfury detectors to detect credentials outside Gemfury repository URLs.
   • Extends azure_entra_access_token and Azure Active DirectoryActive DirectoryMicrosoft's directory service for Windows networks that centralises authentication and authorisation; cyber tools target or integrate with it because it controls identity and access across most enterprise environments. API Keys checkers to accept a custom host, Azure Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. token, GitLab Deploy Token, and LiteLLM API key checkers to reach custom hosts through a proxy, and n8n API key and MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. checkers to validate keys and tokens found with a host written without its scheme.
   • Merges azure_event_grid_access_key_with_host into azure_event_grid_access_key, grafana_service_account_token_with_host into grafana_service_account_token, kubernetes_jwt_with_host into kubernetes_jwt, planetscale_database_password_with_host_and_username into planetscale_database_password, and postgres_assignment_attached_port and postgres_assignment_no_port into postgres_assignment detectors.

   +1 more show less

   • Reduces false positives in generic_high_entropy_secret by no longer reporting image names from known container registries, in generic_database_assignment from shell command substitutions, empty defaults, the --userns flag, and malformed host or username values, and in microsoft_azure_storage_account_key caused by JFrog reference tokens assigned to jfrog variables.
   • Adds new detectors for SFTPSFTPSSH File Transfer Protocol, a file transfer standard built on top of SSH that provides encrypted upload, download, and remote file management; cyber tools use it to move files or exfiltrate data over an authenticated, encrypted channel. credentials (sftp_credentials_assignment), Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPNVPNA virtual private network, an encrypted tunnel between devices or networks. It carries traffic across another network as though the endpoints had a private connection. private keys, and Kubernetes bearer tokensbearer tokensA credential that grants access to whoever presents it, without a separate proof of possession. Protecting the token matters because a stolen copy can be used by someone else. stored in kubeconfig files; adds new analyzers for GoCardless API access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. and Adobe refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API.; and enables a validity checker for SMTP credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   5 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The line_notify_token detector and checker have been removed (the LINE Notify service is no longer available).
   • !The azure_event_grid_access_key_with_host detector is removed — merged into azure_event_grid_access_key; any references to the old detector name will no longer resolve.
   • !The grafana_service_account_token_with_host detector is removed — merged into grafana_service_account_token.
   • !The kubernetes_jwt_with_host detector is removed — merged into kubernetes_jwt.
   • !The planetscale_database_password_with_host_and_username detector is removed — merged into planetscale_database_password.
   • !The postgres_assignment_attached_port and postgres_assignment_no_port detectors are removed — merged into postgres_assignment.
   • !The ftp_credentials_assignment detector now captures only FTP secrets, not SFTP; SFTP is handled by the new sftp_credentials_assignment detector.
6. changelog Oct 4, 2026 · issue 094

   GitGuardian adds 9 new detectors (Ory, Kong Konnect, AppSignal, PostHog, Datadog, NinzaSMS, TypeSafe AI, Mistral AI v2) and a Cohere analyzer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds the mistralai_apikey_v2 detector for Mistral AI's new prefixed API key format.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new detector for Ory API keys.
   • Adds a new detector for Kong Konnect personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
   • Adds a new detector for AppSignal API keys.
   • Adds a new detector for PostHog OAuth access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..

   +6 more show less

   • Adds a new detector for PostHog OAuth refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API..
   • Adds a new detector for Datadog service access tokens.
   • Adds a new detector for NinzaSMS API keys.
   • Adds a new detector for TypeSafe AI API keys.
   • Adds a new analyzer for Cohere API keys.
   • Base64 Basic Authentication findings now take precedence over overlapping Base64 Generic High Entropy Secret findings.
   • Adds the mistralai_apikey_v2 detector for Mistral AI's new prefixed API key format.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new detector for Ory API keys.
   • Adds a new detector for Kong Konnect personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
   • Adds a new detector for AppSignal API keys.
   • Adds a new detector for PostHog OAuth access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..

   +5 more show less

   • Adds a new detector for PostHog OAuth refresh tokensrefresh tokensA credential used to obtain a new access token without signing in again. It is sent to the authorization service rather than used directly to call the protected API..
   • Adds a new detector for Datadog service access tokens.
   • Adds a new detector for NinzaSMS API keys.
   • Adds a new detector for TypeSafe AI API keys.
   • Adds a new analyzer for Cohere API keys.

   1 more in Everything

7. Detection Engine Updates Version 2.173 (2026-09-28) Sep 28, 2026 · issue 092
   • New detection Ory API Key detector
   • New detection Kong Konnect Personal Access Token detector
   • New detection AppSignal API Key detector
   • New detection PostHog OAuth Access Token detector
   • New detection PostHog OAuth Refresh Token detector
   • New detection Datadog Service Access Token detector
   • New detection NinzaSMS API Key detector
   • New detection TypeSafe AI API Key detector
   • New detection Mistral AI API Key v2 detector (`mistralai_apikey_v2`)
   • Updated detection Azure Cache for Redis Access Key detector regex update
   • Updated detection Databricks Authentication Token With Hostname detector expanded coverage
   • Updated detection Okta Token with Host checker scoped to organization hosts only
   • Updated detection Mistral AI API Key checker robustness improvement
   • Updated detection Base64 Basic Authentication finding precedence over Base64 Generic High Entropy Secret
   • New detection Cohere API Key analyzer
8. changelog Sep 25, 2026 · issue 085

   GitGuardian ships 10 new detectors, 8 new analyzers, and expanded validation for Splunk, Salesforce, Artifactory, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

   • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present.
   • Adds a new detector for generic Sanctum tokens.
   • Adds a new detector for Telnyx API keys with the KEY prefix.
   • Adds a new detector for Bifrost virtual keys, matched alone or together with the URL of the Bifrost deployment.

   +20 more show less

   • Adds a new detector for Bitbucket HTTP access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with the BBDC- prefix.
   • Adds a new detector for Jira Data Center personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
   • Adds a new detector for MetaApi cloud tokens.
   • Adds a new detector for Appwrite instance encryption keys.
   • Adds a new detector for APIclub API keys.
   • Adds a new analyzer for AWS Cognito OAuth credentials with host.
   • Adds a new secret analyzer for Alibaba Cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access..
   • Adds a new analyzer for Databricks access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with hostname.
   • Adds a secret analyzer for PyPI API tokens.
   • Adds a secret analyzer for Contentful Content Management API keys.
   • Adds a new analyzer for DigitalOcean personal access tokens v1.
   • Adds a new analyzer for DigitalOcean tokens.
   • Adds a new analyzer for DigitalOcean OAuth application tokens v1.
   • Adds a new checker for Splunk authentication tokens with custom host support; the Splunk Authentication Token detector now also matches an optional Splunk host alongside the token.
   • Adds a checker for Artifactory reference tokens with custom host support.
   • Expands the Salesforce OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Keys detector to capture the Salesforce instance host and validates credentials against that instance's OAuth token endpoint (production or sandbox) instead of the token introspection endpoint; returns failed_to_check when no host is found.
   • Expands the Scaleway Token detector to catch SCW_SECRET_KEY and SCALEWAY_SECRET_KEY assignments, including when the word scaleway is absent from the document.
   • Expands the Username Password detector to match Spanish, Portuguese, French, and Turkish username/password assignment keywords.
   • Merges the generic_database_assignment_attached_port detector into the generic_database_assignment detector.
   • Updates the Figma personal access tokenpersonal access tokenA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. analyzer to report the folders:read scope, which replaces the deprecated projects:read scope.
   • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
   • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present.
   • Adds a new detector for generic Sanctum tokens.
   • Adds a new detector for Telnyx API keys with the KEY prefix.
   • Adds a new detector for Bifrost virtual keys, matched alone or together with the URL of the Bifrost deployment.

   +15 more show less

   • Adds a new detector for Bitbucket HTTP access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with the BBDC- prefix.
   • Adds a new detector for Jira Data Center personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
   • Adds a new detector for MetaApi cloud tokens.
   • Adds a new detector for Appwrite instance encryption keys.
   • Adds a new detector for APIclub API keys.
   • Adds a new analyzer for AWS Cognito OAuth credentials with host.
   • Adds a new secret analyzer for Alibaba Cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access..
   • Adds a new analyzer for Databricks access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with hostname.
   • Adds a secret analyzer for PyPI API tokens.
   • Adds a secret analyzer for Contentful Content Management API keys.
   • Adds a new analyzer for DigitalOcean personal access tokens v1.
   • Adds a new analyzer for DigitalOcean tokens.
   • Adds a new analyzer for DigitalOcean OAuth application tokens v1.
   • Adds a new checker for Splunk authentication tokens with custom host support; the Splunk Authentication Token detector now also matches an optional Splunk host alongside the token.
   • Adds a checker for Artifactory reference tokens with custom host support.

   5 more in Everything

   └──▷ BREAKING ON UPGRADE

   • !The generic_database_assignment_attached_port detector has been merged into generic_database_assignment; any rules, suppressions, or integrations referencing generic_database_assignment_attached_port by name will no longer match.
   • !The Figma personal access token analyzer now reports the folders:read scope in place of the deprecated projects:read scope; workflows filtering on projects:read scope results will need to be updated.
9. changelog Sep 24, 2026 · issue 084

   GitGuardian Detection Engine: Switches the Databricks Authentication Token With Hostname checker to a more reliable endpoint.

   └──▷ BREAKING ON UPGRADE

   • !The generic_database_assignment_attached_port detector has been merged into generic_database_assignment; any policies, filters, or alert rules referencing generic_database_assignment_attached_port by name will no longer match.
10. changelog Sep 16, 2026 · issue 076

    GitGuardian detection engine gains Akamai and Docker Hub analyzers, expanded n8n host detection, and reduced false positives for generic high-entropy secrets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Updates the GitLab secret analyzer to adapt to changes in GitLab API behavior.
    • Updates the Figma Personal Access Token analyzer to reflect changes in the Figma API.
    • Updates the OpenAI API Key analyzer's scope checker endpoints following OpenAI API updates.

    3 more in Everything

11. changelog Sep 15, 2026 · issue 075

    GitGuardian adds Akamai API Credentials and Docker Hub analyzers, expands n8n host detection, and sharpens entropy secret filtering.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds generic_high_entropy_secret filter that suppresses false positives when the assigned variable name ends with checksum, with no loss of recall.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds a secret analyzer for Akamai API Credentials.
    • Adds a new analyzer for Docker Hub personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
    • Extends n8n MCP Access Token and n8n API Key detectors to recognize n8n hosts given as a container service name or as a scheme-less hostname, and reject unreachable private IP hosts.
    • Improves recall for Hashicorp Vault AppRole Authentication credentials.
    • Adds generic_high_entropy_secret filter that suppresses false positives when the assigned variable name ends with checksum, with no loss of recall.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds a secret analyzer for Akamai API Credentials.
    • Adds a new analyzer for Docker Hub personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..

    2 more in Everything

12. Detection Engine Updates Version 2.172 (2026-09-14) Sep 14, 2026 · issue 082

    GitGuardian Detection Engine 2.172 adds 10 new detectors, 8 new secret analyzers, and expanded recall for Scaleway, Salesforce, Splunk, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠

    • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present.
    • Adds a new detector for generic Sanctum tokens.
    • Adds a new detector for Telnyx API keys with the KEY prefix.
    • Adds a new detector for Bifrost virtual keys, matched alone or together with the Bifrost deployment URL.

    +24 more show less

    • Adds a new detector for Bitbucket HTTP access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with the BBDC- prefix.
    • Adds a new detector for Jira Data Center personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
    • Adds a new detector for MetaApi cloud tokens.
    • Adds a new detector for Appwrite instance encryption keys.
    • Adds a new detector for APIclub API keys.
    • Adds a checker for Artifactory reference tokens with custom host support.
    • Adds a checker for Splunk authentication tokens with custom host support.
    • Adds a new secret analyzer for AWS Cognito OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. credentials with host.
    • Adds a new secret analyzer for Alibaba Cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. keys.
    • Adds a new secret analyzer for Databricks access tokens with hostname.
    • Adds a new secret analyzer for PyPI API tokens.
    • Adds a new secret analyzer for Contentful Content Management API keys.
    • Adds a new secret analyzer for DigitalOcean personal access tokens v1.
    • Adds a new secret analyzer for DigitalOcean tokens.
    • Adds a new secret analyzer for DigitalOcean OAuth application tokens v1.
    • Expands the Scaleway Token detector to catch SCW_SECRET_KEY and SCALEWAY_SECRET_KEY assignments, including documents where the word scaleway is absent.
    • Expands the Splunk Authentication Token detector to also match an optional Splunk host alongside the token.
    • Expands the Salesforce OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Keys detector to capture the Salesforce instance host and validate against that instance's OAuth token endpoint (production or sandbox), returning failed_to_check when no host is found.
    • Expands the Username Password detector to also match Spanish, Portuguese, French, and Turkish username/password assignment keywords.
    • Expands the generic_high_entropy_secret detector to report secrets located near a localhost mention.
    • Expands the generic_encryption_key detector to report keys located near a localhost mention.
    • Merges the generic_database_assignment_attached_port detector into the generic_database_assignment detector.
    • Expands the Google API Key detector to catch keys containing only one digit.
    • Expands the Figma personal access tokenpersonal access tokenA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. analyzer to report the folders:read scope, replacing the deprecated projects:read scope.
    • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠
    • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present.
    • Adds a new detector for generic Sanctum tokens.
    • Adds a new detector for Telnyx API keys with the KEY prefix.
    • Adds a new detector for Bifrost virtual keys, matched alone or together with the Bifrost deployment URL.

    +15 more show less

    • Adds a new detector for Bitbucket HTTP access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. with the BBDC- prefix.
    • Adds a new detector for Jira Data Center personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
    • Adds a new detector for MetaApi cloud tokens.
    • Adds a new detector for Appwrite instance encryption keys.
    • Adds a new detector for APIclub API keys.
    • Adds a checker for Artifactory reference tokens with custom host support.
    • Adds a checker for Splunk authentication tokens with custom host support.
    • Adds a new secret analyzer for AWS Cognito OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. credentials with host.
    • Adds a new secret analyzer for Alibaba Cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. keys.
    • Adds a new secret analyzer for Databricks access tokens with hostname.
    • Adds a new secret analyzer for PyPI API tokens.
    • Adds a new secret analyzer for Contentful Content Management API keys.
    • Adds a new secret analyzer for DigitalOcean personal access tokens v1.
    • Adds a new secret analyzer for DigitalOcean tokens.
    • Adds a new secret analyzer for DigitalOcean OAuth application tokens v1.

    9 more in Everything

13. changelog Sep 8, 2026 · issue 068

    Six new detectors (Firebase, Coze, Keycloak, Fish Audio, Azure Custom Vision) plus a new Apify analyzer and Docker Hub PATPATA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. detection.

14. Detection Engine Updates Version 2.171 (2026-08-31) Aug 31, 2026 · issue 069

    GitGuardian Detection Engine 2.171 adds Akamai API Credentials and Docker Hub analyzers, plus improved n8n and HashiCorp Vault detection.

    • Adds generic_high_entropy_secret precision improvement: no longer reports secrets whose assigned variable ends with checksum, with no loss of recall.
    • Adds a secret analyzer for Akamai API Credentials.
    • Adds a new analyzer for Docker Hub personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..
    • Improves n8n MCPMCPModel Context Protocol, a standard for connecting AI applications to external tools and data sources. A compatible server exposes capabilities an assistant can use through a common interface. Access Token and n8n API Key detectors to recognize hosts given as a container service name or as a scheme-less hostname, and to reject unreachable private IP hosts.
    • Improves recall for HashiCorp Vault AppRole Authentication credentials.
    • Adds a secret analyzer for Akamai API Credentials.
    • Adds a new analyzer for Docker Hub personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it..

    3 more in Everything

15. Detection Engine Updates Version 2.170 (2026-08-17) Aug 17, 2026 · issue 067

    GitGuardian Detection Engine 2.170 adds six new detectors (Firebase, Coze, Keycloak, Fish Audio, Azure Custom Vision) and a new Apify token analyzer.

    • Adds new detector for Firebase ID tokens.
    • Adds new detector for Coze access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
    • Adds new detector for Keycloak access tokens.
    • Adds new detector for Keycloak refresh and offline tokens.
    • Adds new detector for Fish Audio API keys.

    +6 more show less

    • Adds new detector for Azure Custom Vision Training keys.
    • Adds new analyzer for Apify API tokens.
    • Extends the Docker Credentials detector to catch Docker Hub personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. used with docker login --username / -u.
    • New Relic Key, New Relic Insights Insert Key, and New Relic APMAPMApplication Performance Monitoring — a category of software that collects metrics, traces, and logs from running applications so developers can detect slowdowns and diagnose their root cause. License Key checkers can now identify revoked keys via an empty POST request.
    • Reduces false positives for fastly_personal_token by rejecting proxy-subscription node passwords and 32-char prefixes of longer base64url values.
    • Reduces false positives for scaleway_token by rejecting node UUIDsUUIDsA universally unique identifier, usually a 128-bit value used to identify an object across systems. It is designed to make independently generated identifiers unlikely to collide. from proxy-subscription configs.
    • Adds new detector for Firebase ID tokens.
    • Adds new detector for Coze access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
    • Adds new detector for Keycloak access tokens.
    • Adds new detector for Keycloak refresh and offline tokens.
    • Adds new detector for Fish Audio API keys.

    +2 more show less

    • Adds new detector for Azure Custom Vision Training keys.
    • Adds new analyzer for Apify API tokens.

    4 more in Everything

16. changelog Aug 8, 2026 · issue 039

    GitGuardian adds 7 new detectors, a Supabase JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. checker, and broader PostgreSQL username matching across two August 2026 releases.

    • Adds OpenCode API Key detector for OpenCode API keys.
    • Adds Lovable Access Token detector for Lovable project access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
    • Adds Lovable Git Token detector for Lovable git tokens.
    • Adds a new Supabase Service Role JWT checker for Supabase service_role JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage..
    • Extends generic_password detector to ignore passwords in public proxy-subscription configs (shadowsocks/vmess/vless/trojan/hysteria URIs, Telegram MTProto links, clash/mihomo node lists).

    +4 more show less

    • Extends generic_high_entropy_secret and base64_generic_high_entropy_secret detectors to ignore secrets whose decoded context is a public proxy-subscription config or a URL-signing token (S3 presigned parameters, HLS stream tokens, booking/redirect tokens).
    • Extends aws_iam detector to ignore presigned-URL parameters and GitHub avatar IDs.
    • Extends generic_encryption_key detector to ignore Talend encrypted passwords (enc:system|routine.encryption.key.vN:... format).
    • Hardens the Azure Event Hub checker with the same Atom-feed validation requirement.

    9 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The Amadeus OAuth credentials detector and checker have been disabled; the Amadeus self-service API has been discontinued.
    • !The github_oauth_token detector and checker have been removed; the service for this detector is no longer available.
    • !The attached-port PostgreSQL variant detector has been merged into the Generic Database Assignment detector.
17. Detection Engine Updates Version 2.169.1 (2026-08-04) Aug 4, 2026 · issue 037

    GitGuardian Detection Engine 2.169.1 adds Lovable token detectors and tightens GitHub and npm token precision.

    • New detector: identifies Lovable project access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions..
    • New detector: identifies Lovable git tokens.
    • GitHub Personal Access Token, GitHub OAuth Token, and GitHub App Token detectors now skip values that fail format validation, reducing false positives from generic detectors.
    • npm Token detector now skips values that fail format validation, reducing false positives from generic detectors.

    4 details in Everything

18. Detection Engine Updates Version 2.169 (2026-08-03) Aug 3, 2026 · issue 037

    GitGuardian Detection Engine 2.169 adds 7 new detectors, a Supabase JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. checker, and expands PostgreSQL credential matching.

    • New detector for Slack Workflow Builder webhook trigger URLs.
    • New detector for n8n API keys.
    • New detector for Atlassian auth keys (OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. access tokensaccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. issued by auth.atlassian.com).
    • New detector for AWS Cognito User Pool access tokens.
    • New detector for OpenAI platform access tokens.

    +6 more show less

    • New detector for Vercel OIDCOIDCOpenID Connect, a sign-in protocol built on OAuth 2.0. An application uses identity information from a trusted provider instead of maintaining a separate password for each user. workload-identity tokens.
    • New detector for OpenCode API keys.
    • New checker for Supabase service_role JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage..
    • Azure Event Hub and Azure Service Bus checkers now only report a key as valid when the 200 response is a genuine Service Bus Atom feed, blocking false-valid results behind intercepting proxies.
    • PostgreSQL credentials detectors now match usernames containing dashes (e.g. workflow-prod-user) and raise the username length bound from 20 to 30 characters.
    • Generic Database Assignment detector now incorporates the attached-port variant.

    11 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The grafbase_access_token detector and checker have been removed entirely.
    • !The Amadeus OAuth credentials detector and checker have been disabled.
19. changelog Jul 23, 2026 · issue 023
    • Updated Hume AI API key checker endpoint.
20. docs update Jul 23, 2026 · docs issue 004
    • Updated Hume AI API key checker endpoint.
21. Detection Engine Updates Version 2.168 (2026-07-20) Jul 20, 2026 · issue 030

    GitGuardian Detection Engine 2.168 adds 4 new detectors, 2 new validity checkers, and extends HTML/Markdown scanning to 5 token types.

    • New detector for Azure Immersive Reader Key credentials.
    • New detector for Alibaba Cloud Model Studio (Qwen / DashScope) Coding Plan API keys.
    • New detector for Alibaba Cloud Model Studio (Qwen / DashScope) Token Plan API keys.
    • New detector for Prefect Cloud API keys.
    • New validity checker for Alibaba Cloud IAMIAMIdentity and Access Management — a framework of policies and services for controlling who can authenticate to systems and what resources they are authorized to use, letting cyber tools enforce least-privilege and audit access. keys.

    +4 more show less

    • New validity checker for GitLab Deploy Tokens when username and host are present.
    • Generic High Entropy Secret detector now covers additional credential key-name prefixes: access, app, vault, sign, dev, prod, and staging.
    • Okta Token with Host detector updated to match regional and preview host domains, raising precision from ~0% to ~100% on reviewed samples.
    • HTML and Markdown file scanning extended to npm, GitHub Personal Access, GitHub OAuth, GitHub App, and Slack Application tokens.

    9 details in Everything

22. Detection Engine Updates Version 2.167 (2026-07-07) Jul 7, 2026 · issue 022

    GitGuardian v2.167 adds 11 new secret detectors spanning Azure, AI/LLMLLMA large language model, a neural network trained on large amounts of text to recognize patterns and generate language. Applications use it for tasks such as answering, summarizing and writing code. platforms, and developer tools, plus expanded validity checking.

    • New detector for LiteLLM API Key (without host capture).
    • New detector for Azure SQL Credentials (Assignment).
    • New detector for Azure Machine Learning keys.
    • New detector for Azure Video Indexer keys.
    • New detector for Apify Proxy Token.

    +11 more show less

    • New detector for Alibaba Cloud Model Studio / DashScope (Qwen) signed workspace API keys.
    • New detector for Authress Service Client Access Key.
    • New detectors for Gemfury Deploy/Push Token and Full Access Token (both without username).
    • New detector for Azure Health Insights keys.
    • New detector for Azure Fluid Relay keys.
    • New validity checker for LiteLLM API Key Without Host, with custom host support.
    • New validity checker for Llama Cloud API Key.
    • New validity checker for New Relic APMAPMApplication Performance Monitoring — a category of software that collects metrics, traces, and logs from running applications so developers can detect slowdowns and diagnose their root cause. License Key.
    • New validity checkers for npm Token and npm Token (prefixed variant).
    • Improved recall for Datadog API Key and Snyk Key detectors.
    • Precision improvement for Okta Token with Host: generic Okta domains (e.g. login.okta.com) are now excluded from host capture.

    16 details in Everything

23. Detection Engine Updates Version 2.166 (2026-06-23) Jun 23, 2026 · issue 014

    GitGuardian adds 9 new secret detectors (Amadeus, Kinde, TomTom, Datadog, 5 Azure services) plus Gemfury validity checkers.

    • New detector for Amadeus OAuth Credentials.
    • New detector for Kinde OAuth Credentials.
    • New detector for TomTom API Key.
    • New detector for Datadog Personal Access Token.
    • New detector for Azure Maps Key.

    +6 more show less

    • New detector for Azure Mixed Reality Key.
    • New detector for Azure Service Bus Key.
    • New detector for Azure Quantum Key.
    • New detector for Azure Bot Direct Line Key.
    • Adds validity checkers for Gemfury Deploy/Push Token and Gemfury Full Access Token.
    • Updates LiteLLM API Key checker to use the models endpoint and validate JSON response shape.

    11 details in Everything

24. Detection Engine Updates Version 2.166 (2026-06-23) Jun 23, 2026 · release notes

    GitGuardian Detection Engine v2.166 adds nine new secret detectors and validity checkers for Gemfury tokens.

    • Adds nine new detectors: Amadeus OAuth Credentials, Kinde OAuth Credentials, TomTom API Key, Datadog Personal Access Token, Azure Maps Key, Azure Mixed Reality Key, Azure Service Bus Key, Azure Quantum Key, and Azure Bot Direct Line Key
    • Adds validity checkers for Gemfury Deploy/Push tokens and Full Access tokensAccess tokensA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions.

    2 details in Everything

25. Detection Engine Updates Version 2.165 (2026-06-09) Jun 9, 2026 · release notes

    GitGuardian Detection Engine 2.165 adds 8 new secret detectors and custom-host support for Okta, Azure, and AWS validations

    • Adds detectors for Stitch API Key, ActiveMQ Credentials, Instantly API Key, Gitea Access Token, Fal.ai API Key, SurrealDB Cloud JWT Token, Kimi API Key, and Wiz OAuth Credentials.
    • Adds custom_host_support to Okta Token, Okta OAuth Credentials, Azure Storage Account Key, and AWS Cognito OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms. Credentials validity checkers.
    • Updates Sumo Logic checker to validate against Switzerland and Korea deployments while removing the retired India endpoint.
    • Improves detection accuracy for azure_active_directory_api_keys by reducing false positives via updated matchers.

    4 details in Everything

26. Detection Engine Updates Version 2.164 (2026-05-25) May 25, 2026 · release notes

    GitGuardian Detection Engine v2.164 adds detectors for Authentik, Pagar.me, Adobe, LiteLLM, brapi.dev, Open VSX and Adafruit IO; improves precision for Snyk, Finicity, Hunter

    • Adds new detection capability for Authentik API Token.
    • Adds new detection capability for Pagar.me Encryption Key.
    • Adds new detection capability for Adobe Refresh Token.
    • Adds new detection capability for LiteLLM API Key.
    • Adds new detection capability for brapi.dev API Key.

    +8 more show less

    • Adds new detection capability for Open VSX Access Token.
    • Adds analyzer support for Adafruit IO API Key.
    • Improves precision for the snyk_key detector from ~40% to ~90%.
    • Improves precision for the finicity_authentication_keys detector from ~67% to ~98%.
    • Improves precision for the hunter_api_key detector from ~9% to ~100%.
    • Reduces false positives for datadog_api_credentials.
    • Reduces false positives for github_access_token.
    • Reduces false positives for heroku_platform_key.

    13 details in Everything

27. Detection Engine Updates Version 2.163 (2026-05-12) May 12, 2026 · release notes

    Detection Engine v2.163 adds six new detectors, updates GitHub/Azure DevOps precision, and surfaces Azure OpenAI HTTP status codes

    • Adds sap_oauth_credentials detector to detect SAP OAuth Credentials (replacing the deprecated sap_ai_core_credentials) in cyber tooling
    • Adds new detectors for Aikido API OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. Credentials, Logflare Access Token, PolyAPI API Key, Apollo.io API Key, and AES Cipher Key keys in cyber tooling
    • Updates Azure DevOps Personal Access Token detector to improve precision and catch new formats of Azure DevOps PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it. in cyber tooling
    • Updates GitHub App Token detector to improve precision and catch new formats of GitHub Server-to-server Tokens in cyber tooling
    • Surfaces upstream HTTP status codes on failure for Azure OpenAI API keys instead of generic invalid-secret errors via the Azure OpenAI analyzer in cyber tooling

    5 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The sap_ai_core_credentials detector is replaced by sap_oauth_credentials; any logic dependent on the previous name will stop matching new credentials until updated.
28. Detection Engine Updates Version 2.162 (2026-04-27) Apr 27, 2026 · release notes

    Detection Engine 2.162 adds 16 new detectors (Cloudflare V2, Snyk V2, Baidu, etc.) and analyzer support for Azure AI Search.

    • Adds detection support for Cloudflare API Token V2 format
    • Adds detection for Aikido CI Scanning Token, Baidu AI Cloud API Key, Baidu Cloud API Keys, HashiCorp Consul ACLACLAn access control list, a set of rules allowing or denying operations for particular users, services or network addresses. It decides who can use a resource. Token, ElevenLabs API Key, Datadog Application Key, Volcengine API Key, QQ Robot API Keys, Canva Integration OAuth 2.0OAuth 2.0An open authorization framework (IETF RFC 6749) that lets a service grant limited API access to a third party without sharing credentials, giving cyber tools a standard way to authenticate against external platforms., Bitrise Personal Access Token, Bitrise Workspace API Token, MaxMind License Key, CockroachDB API Key, Coder Session Token
    • Adds analyzer support for Azure AI Search and Azure OpenAI API keys
    • Updates Google Cloud detector to use less memory on secret-dense files
    • Disables the grafbase_access_token checker ahead of its removal

    5 details in Everything

29. Detection Engine Updates Version 2.161 (2026-04-14) Apr 14, 2026 · release notes

    Adds detectors for Payhere, HubSpot, Birdeye, Datadog and GitGuardian tokens plus analyzers for Intercom, Notion and Azure Cosmos DB.

    • Add a new detector for Payhere App Credentials with its corresponding checker
    • Add a new detector for Hubspot API Key with its corresponding checker
    • Add a new detector for Birdeye API Key with its corresponding checker
    • Add a new detector for Datadog API Keys with its corresponding checker
    • Add a new detector for Payhere Merchant Secret

    +8 more show less

    • Add detector and checker for GitGuardian Personal Access Token
    • Add detector and checker for GitGuardian Service Access Token
    • Add a new checker for Azure SignalR Connection String
    • Add a new analyzer for Intercom Access Token
    • Add analyzer for GitGuardian Personal Access Token
    • Add analyzer for GitGuardian Service Access Token
    • Add a new analyzer for Notion Integration Token
    • Add a new analyzer for Azure Cosmos DB Credentials

    13 details in Everything

30. Detection Engine Updates Version 2.160 (2026-03-31) Mar 31, 2026 · release notes

    GitGuardian Detection Engine v2.160 adds private key registration checks and new Paymob/Sentry/Figma/Datadog/GCloud support

    • Adds Generic Private Key, OpenSSH Private Key, RSA Private Key, and Elliptic Curve Private Key checkers to verify if keys are registered with GitLab or GitHub
    • Adds new detectors for Paymob API Key, Paymob Secret Key, Paymob HMAC Secret, and ConvertTo-SecureString Password
    • Adds new analyzers for Sentry User Auth Token, Figma Personal Access Token, Datadog API Credentials, and Google Cloud Keys

    3 details in Everything

31. Detection Engine Updates Version 2.159 (2026-03-20) Mar 20, 2026 · release notes

    GitGuardian Detection Engine v2.159 adds 19 new detectors and 4 analyzers for Azure, SAP, Oracle, and other services.

    • Add a detector for Polar Organization Access Token
    • Add a detector for Google Cloud Express API Key
    • Add a detector for Microsoft Azure Storage Account Key with Account Name
    • Add a detector for Azure Language API Key
    • Add a detector for Azure IoTIoTA collective label for internet-connected physical devices — sensors, cameras, routers, appliances — that tools target because they run embedded firmware with limited patching and broad network exposure. Hub Connection String

    +18 more show less

    • Implement detector for DeepL Free API keys
    • Implement detector for DeepL Pro API keys
    • Add a detector for Azure Document Intelligence Key
    • Add a detector for Azure Speech Services Key
    • Add a detector for Azure Computer Vision API Key
    • Add a detector for Azure Text Translation Key
    • Add a detector for Oracle JDBCJDBCA Java standard API for connecting applications to relational databases, maintained as part of the Java SE platform, letting tools query any compliant database through a single consistent interface. credentials
    • Add detector for new GitGuardian Public Monitoring API Key format
    • Add detector for new GitGuardian Internal Monitoring Key format
    • Add a detector for SAP AI Core Credentials
    • Add a detector for Odoo External API Key
    • Add a detector for K3s tokens
    • Add a detector for Zoho API Key
    • Add a detector for passwords in ServiceNow configuration files
    • Add a new analyzer for Azure App Configuration Connection String
    • Add a new analyzer for Google API Key
    • Add a new analyzer for Azure Speech Services Key
    • Add a new analyzer for FTP credentials

    23 details in Everything

32. Detection Engine Updates Version 2.158 (2026-03-03) Mar 3, 2026 · release notes

    GitGuardian Detection Engine 2.158 adds detectors for MiniMax, Retell, Azure Storage Keys, and curl credentials.

    • Adds a new detector and checker for MiniMax API Key signatures
    • Adds a new detector and checker for Retell API Key signatures
    • Adds a new detector and checker for Microsoft Azure Storage Account Key with Account Name
    • Adds a new detector for curl username password credentials

    4 details in Everything

33. Detection Engine Updates Version 2.157 (2026-02-19) Feb 19, 2026 · release notes

    Detection Engine 2.157 adds 30+ new detectors for Azure, payments, and CI/CD, plus revokers for Slack and Heroku.

    • Adds Yookassa API Key, WireGuard Credentials, Nuclei Private Key, PostHog Project API Key, and OpenClaw Auth Token detectors for broader secret coverage
    • Introduces new revokers for SendGrid Key, Slack User Token, Slackbot Token, and Heroku Platform Key to enable automated remediation
    • Adds a new Anthropic Admin Key analyzer to verify credential validity in real-time
    • Adds Azure DevOps PAT With Org analyzer for organization-scoped access verification
    • Expands detector coverage with 20+ new detectors including Azure cloud services, WooCommerce, Mercado Pago, and GitLab CI/CD Job tokens

    5 details in Everything

34. Detection Engine Updates Version 2.156 (2026-01-29) Jan 29, 2026 · release notes

    GitGuardian Detection Engine v2.156 adds 7 new detectors and enhances Azure SAS URL checking.

    • Added Modelscope API Key detector
    • Added Proxmox API Token detector
    • Added ZegoCloud Secret detector
    • Added Deepgram API Key detector
    • Added Microsoft Power Apps Webhook detector

    +2 more show less

    • Added Mem0 API Key detector
    • Added Obsidian API Key detector

    7 details in Everything

35. Detection Engine Updates Version 2.155 (2026-01-12) Jan 12, 2026 · release notes

    GitGuardian Detection Engine v2.155 adds 18+ new detectors for cloud platforms and introduces enhanced precision checks.

    • Adds Oracle JDBC connection string detector and checker
    • Adds Azure Entra App Secret detector and checker
    • Adds Azure Entra Access Token detector and checker
    • Adds GitLab SCIM Token detector and checker
    • Adds GitLab Agent Kubernetes Token detector and checker

    +13 more show less

    • Adds ASI :One API Key detector and checker
    • Adds Azure IoT Device Connection String detector and checker
    • Adds Xendit Secret API Key detector and checker
    • Adds Supabase API Key detector and checker
    • Adds Neoload Web Access Token detector and checker
    • Adds MongoDB Credentials detector and checker for mismatched port assignments
    • Adds Azure Cache for Redis Access Key detector and checker
    • Adds GitLab Feed Token detector
    • Adds Clerk Webhook Token detector
    • Adds Better Auth Secret detector
    • Adds Elastic Search API Key detector
    • Adds Redis Credentials detector for mismatched port assignments
    • Adds Azure Relay Key detector

    18 details in Everything

36. Detection Engine Updates Version 2.154 Dec 15, 2025 · release notes

    New Cloudflare R2 and Azure SAS URL detectors, MySQL assignment detector, and Tailscale SCIMSCIMA standard for creating, updating and removing user accounts and groups across applications. It helps an identity provider keep access in sync when people join, change roles or leave. key checker added in Detection Engine 2.154.

    • Cloudflare R2 Token detector adds support for detecting Cloudflare R2 authentication tokens
    • Azure SAS URL detector adds support for detecting Azure Shared Access Signature URLs
    • MySQL Credentials detector now uses a new assignment detection mode that excludes port-based matching
    • Adds a checker for Tailscale SCIM keys.

    4 details in Everything

37. Detection Engine Updates Version 2.153 Dec 5, 2025 · release notes

    Detection Engine 2.153 adds 6 new detectors, 883 secret providers and improves recall for MySQL and GitLab tokens.

    • Adds detectors for HighLevel Private Integration Token, Elastic API Key, Google Cloud Keys (base64), Socket Dev API Key, Upstash Redis Credentials, and Vapid Key
    • Adds a new checker for Oracle credentials
    • Adds support for 883 new secret providers to improve incident prioritization on generic secrets

    3 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The aws_iam analyzer is removed; AWS IAMAWS IAMAWS Identity and Access Management is Amazon's service for controlling who and what can call AWS APIs, by attaching policies that allow or deny actions on resources. Cyber tools use it to scope credentials to least privilege. scope analysis is now performed by NHINHIA non-human identity, an account or credential used by software or a device rather than a person. Service accounts, workload identities and automation tokens need their own permissions and lifecycle controls. integration with AWS
38. Detection Engine Updates Version 2.152 Nov 18, 2025 · release notes

    Detection Engine 2.152 adds Google Cloud Access Token detection and updates several existing detectors.

    • Adds a new detector and checker for Google Cloud Access Tokens
    • Updates Hashicorp Vault Token detector to catch more patterns
    • Updates PagerDuty Authorization Token regex with token prefix
    • Updates docker_credentials checker endpoint
    • Updates fullstory_api_key checker endpoint

    5 details in Everything

39. Detection Engine Updates Version 2.151 Nov 10, 2025 · release notes

    Detection Engine v2.151 adds 13 new detectors for AI services, cloud platforms, and databases.

    • Adds Hume AI API Key detector and checker
    • Adds Hume AI Secret Key detector and checker
    • Adds Azure AI Face Authentication detector and checker
    • Adds Neon API Key detector and checker
    • Adds E2B API Key detector and checker

    +10 more show less

    • Adds MailerSend API Key detector and checker
    • Adds Scraper API Key detector and checker
    • Adds AIProxy API Key detector
    • Adds Cloudsmith Entitlement Token detector and checker
    • Adds AWS Bedrock Long-term API Key detector and checker
    • Adds Harness API Key detector and checker
    • Adds Grafbase Access Token detector and checker
    • Adds AssemblyAI Access Token detector and checker
    • Deprecates Pinecone API Keys detector in favor of pinecone_api_key
    • Adds pinecone_api_key_v2 detector for new Pinecone API key format

    15 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !Pinecone API Keys detector is deprecated and will be replaced by the pinecone_api_key detector
40. Detection Engine Updates Version 2.150 Oct 21, 2025 · release notes

    New Coveo API Key detector and improved DigitalOcean Spaces Token checker in Detection Engine 2.150

    • Adds a new Coveo API Key detector and checker to the engine.
    • Upgrades the DigitalOcean Spaces Token analyzer to check for bucket listing permissions.

    2 details in Everything

41. Detection Engine Updates Version 2.149 Oct 10, 2025 · release notes

    Adds new detectors for Comet API keys, Langfuse credentials, and Okta OAuth/API tokens with host fields.

    • Added a detector and checker for Comet API keys
    • Added a detector and checker for Langfuse credentials
    • Added a detector and checker for Okta OAuth credentials with host
    • Added a detector and checker for Okta API tokens with host

    4 details in Everything

42. Detection Engine Updates Version 2.148 Sep 22, 2025 · release notes

    Detection Engine 2.148 expands secret detection across AI services, cloud platforms, and DevOps tools.

    • Adds detector for VirusTotal API keys
    • Adds detector for Cloudflare Turnstile secret keys
    • Adds detector for Stability AI API Key
    • Adds detector for Azure Cognito OAuth credentials
    • Adds detector with host-specific checks for Azure Cognito OAuth credentials with Host

    +15 more show less

    • Extends Artifactory support to include dashes in hostnames for Access Token, Basic Auth Credentials, Reference Token with Host, and Token with Host
    • Adds detector for GitLab Feature Flags Client Token with Project ID
    • Adds new detector for Kubernetes JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. with Host
    • Adds detector for GitLab Trigger Token
    • Adds detector for Brave Search API keys
    • Adds detector for GitLab deploy tokens
    • Adds detector for Firecrawl API keys
    • Adds detector for Dify API keys
    • Adds detector for GitLab Runner Authentication Token
    • Adds detector for Ubidots API keys
    • Adds detector for Vapi API keys
    • Adds detector for Llama Cloud API keys
    • Extends Azure Cosmos DB credentials host pattern to improve recall
    • Restricts GitLab Token detector pattern to reduce false positives
    • Improves ODBCODBCA standard API, maintained by Microsoft, for connecting applications to relational databases regardless of vendor. Cyber tools use it to query databases without writing engine-specific code. connection string precision

    20 details in Everything

43. Detection Engine Updates Version 2.147 Sep 15, 2025 · release notes

    New Weaviate and Cursor API detectors with validity checkers; Snowflake URIs get validation.

    • Adds new detection for Weaviate Token with Hostname and its corresponding validity checker.
    • Adds new detection for Cursor API Key (Admin & User) and its corresponding validity checker.
    • Adds a new validity checker for the snowflake_uri detector.

    3 details in Everything

44. Detection Engine Updates Version 2.146 Aug 27, 2025 · release notes

    Detection Engine v2.146 adds detectors for Africa's Talking, Clipdrop, StackHawk, and Murf API keys.

    • Adds Africa's Talking API key detector
    • Adds Clipdrop API key detector
    • Adds StackHawk API key detector
    • Adds Murf API key detector

    4 details in Everything

45. Detection Engine Updates Version 2.145 Aug 7, 2025 · release notes

    GitGuardian Detection Engine v2.145 enhances gitlab_personal_token_v2 detection with broader regex

    • Expands the gitlab_personal_token_v2 detector pattern to catch longer GitLab personal tokens

    1 detail in Everything

46. Detection Engine Updates Version 2.144 Jul 25, 2025 · release notes

    Detection Engine 2.144 adds detectors for Weights & Biases, Bitbucket App Passwords, and Mercado Pago tokens.

    • Adds Weights & Biases API Key detector to identify secrets in codebases
    • Adds Bitbucket App Password detector as a new surface for access tokenaccess tokenA credential that authorizes a client to use a service or API. It usually has limited permissions and a lifetime; anyone holding it may be able to use those permissions. detection
    • Adds Mercado Pago Access Token detector with verification checker for payment service credentials

    3 details in Everything

47. Detection Engine Updates Version 2.143 Jul 15, 2025 · release notes

    Detection Engine v2.143 adds new secret detectors and validation checkers for GitLab, Coze, Tavus, Heroku, Tableau, Notion, and Salesforce.

    • Adds ssh_password_with_port detector to match SSH credentials including specific ports
    • Adds detection support for GitLab incoming mail tokens
    • Adds detection support for Coze personal access tokenspersonal access tokensA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.
    • Adds detection support for Tavus API keys
    • Adds detection support for Heroku Platform Keys (prefixed variants)

    +10 more show less

    • Adds detection support for Tableau Cloud PATsPATsA personal access token, a credential used by scripts and integrations instead of a user's password. Its permissions and expiry depend on the service issuing it.
    • Adds detection support for Notion Integration Token v2 format
    • Adds validation checker for Coze Personal Access Tokens
    • Adds validation checker for Tavus API Keys
    • Adds validation checker for Heroku Platform Keys
    • Adds validation checker for Tableau Cloud PATs
    • Adds validation checker for Notion Integration Token v2
    • Adds validation checker for Salesforce OAuth2OAuth2An open authorization framework (RFC 6749) that lets a service grant limited access to a user's resources on another service without exposing credentials, giving cyber tools a standard way to authenticate against third-party APIs. tokens
    • Enhances JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store. detectors to only catch signed JWTsJWTsJSON Web Tokens — an open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object. Cyber tools use them for stateless authentication without server-side session storage.
    • Improves Generic High Entropy Secret detector to ignore IDs in ServiceNow migration files

    15 details in Everything

48. Detection Engine Updates Version 2.142 Jul 2, 2025 · release notes

    Detection Engine 2.142 adds AI71 and AMP token detectors with accuracy improvements

    • Adds new detector for AI71 API Key to recognize AI71 service API keys
    • Adds new detector for AMP API Token to recognize AMP service API tokens

    2 details in Everything

49. Detection Engine Updates Version 2.141 Jun 16, 2025 · release notes

    Detection Engine 2.141 adds secret detectors and validity checkers for Kubernetes certificates, AI services, and other platforms.

    • Adds Kubernetes User Certificate with Port detector that extracts port numbers for Kubernetes user certificates
    • Adds NVIDIA API Key detector for NVIDIA services
    • Adds Alchemy API Key v2 detector for Alchemy services
    • Adds OpenRouter API Key detector for OpenRouterOpenRouterA unified API gateway that routes requests to dozens of LLM providers under one endpoint, letting cyber tools swap or compare models without rewriting provider-specific integration code. services
    • Adds Duffel API Key detector for Duffel services

    +12 more show less

    • Adds Apify Token detector for Apify services
    • Adds Jina API Key detector for Jina services
    • Adds Deno Account Token detector for Deno accounts
    • Adds Segment Workspace Key v2 detector for Segment services
    • Adds Resend API Key detector for Resend services
    • Adds VKontakte Access Token detector for VKontakte services
    • Adds Fireworks AI API Key detector for Fireworks AI services
    • Improves Generic High Entropy Secret detector by removing AWS ECRECRAmazon Elastic Container Registry, AWS's managed service for storing and distributing Docker and OCI container images, giving cyber tools a private, IAM-gated registry without self-hosting infrastructure. images from misclassified secrets
    • Improves Google OAuth2 Keys detector with updated regex for better detection accuracy
    • Improves Checkout Sandbox Secret Key detector with enhanced pattern and updated endpoint for improved accuracy
    • Improves Bunny.net API Key detector by fixing checker for better validation
    • Improves Dify API Key detector by updating checker endpoint for enhanced detection

    17 details in Everything

50. Detection Engine Updates Version 2.140 Jun 10, 2025 · release notes

    Detection Engine v2.140 adds 12 new detectors for GitLab, K8s JWTJWTAn open standard (RFC 7519) for encoding claims as a signed, optionally encrypted JSON object passed between parties. Cyber tools use it to verify identity and permissions without querying a central session store., Laravel keys and AI services.

    • Adds detection for Laravel Encryption Key with Host
    • Adds detection for Kubernetes JWT with Host
    • Adds detection for GitLab Feature Flags Client Token with Project ID
    • Adds detection for GitLab Trigger Token
    • Adds detection for Brave Search API Key

    +8 more show less

    • Adds detection for GitLab Deploy Token
    • Adds detection for Firecrawl API Key
    • Adds detection for Dify API Key
    • Adds detection for GitLab Runner Authentication Token
    • Adds detection for Ubidots API Key
    • Adds detection for Vapi API Key
    • Adds detection for Llama Cloud API Key
    • Enhances Azure Cosmos DB credentials detector with improved host pattern for higher recall

    13 details in Everything

51. Detection Engine Updates Version 2.139 May 29, 2025 · release notes

    New GitLab feature flags token detection and improved AMQP/Confluent/Azure detector accuracy in Detection Engine v2.139

    • Adds GitLab Feature Flags Client Token detector to identify tokens used for managing GitLab project feature flags.
    • Enhances AMQP Credentials detector with improved multimatch selection to reduce false positive combinations.
    • Improves Confluent Keys detector accuracy by refining multimatch selection to lower false positives.
    • Excludes secrets ending with .certificate from Generic High Entropy Secret detection to reduce noise.
    • Updates Microsoft Azure Storage Connection String checker to accept additional fields for Azure storage access.

    +2 more show less

    • Increases precision of Microsoft Azure Storage Account Key detector to reduce false positives.
    • Establishes priority rule favoring confluent_api_keys detector over amqp_assignment and amqp_assignment_attached_port.

    7 details in Everything

52. Detection Engine Updates Version 2.138 May 20, 2025 · release notes

    New detectors added for Azure Entra IDEntra IDMicrosoft's cloud-based identity and access management service, formerly Azure Active Directory, used by cyber tools to authenticate users and enforce access policies in Microsoft 365 and Azure environments. tokens, Communication Services, App Configuration, and others

    • Adds detection for Azure Entra ID authentication tokens.
    • Adds detection for Azure Communication Services connection strings.
    • Adds detection for Azure DevOps Personal Access Tokens.
    • Adds detection for Laravel application encryption keys.
    • Adds detection for Azure App Configuration connection strings.

    +1 more show less

    • Adds detection for X AI API keys.

    6 details in Everything

53. Detection Engine Updates Version 2.136 + 2.137 Apr 29, 2025 · release notes

    Detection Engine v2.136+2.137 adds detectors for Perplexity AI, Anthropic, and Azure services.

    • Adds a detector for Perplexity AI API keys.
    • Adds a detector for Azure SignalR connection strings.
    • Adds detectors for Azure Event Grid access keys and a checker for azure_event_grid_access_key_with_host.
    • Adds a detector and checker for Anthropic admin keys.
    • Adds a detector for GitGuardian Platform Magic Links.

    5 details in Everything

54. Detection Engine Updates Version 2.135 Apr 14, 2025 · release notes

    New Artifactory secret detectors and improved Snowflake/IBM detection coverage

    • Adds Artifactory Reference Token detector for identifying reference tokens in artifact repositories.
    • Adds Artifactory Reference Token With Host detector for identifying reference tokens alongside host information.
    • Adds Artifactory Master Key detector for identifying master keys used for administrative access.
    • Adds Artifactory Basic Auth Credentials detector for identifying basic authentication credentials.
    • Enhances Snowpark API credentials detector to identify more Snowflake credential patterns.

    +1 more show less

    • Reduces false positives in IBM Platform API key detector (IBM Cloud Key).

    6 details in Everything

55. Detection Engine Updates Version 2.134 Mar 19, 2025 · release notes

    Detection Engine v2.134 adds Azure Logic App SAS detector and improves OpenAI/LINE detectors

    • Adds a new detector for Azure Logic App Shared Access Signature secrets

    1 detail in Everything

56. Detection Engine Updates Version 2.133 Feb 27, 2025 · release notes

    Detection Engine v2.133 adds detectors for OpenAI Project/Admin keys, 1Password service tokens, DeepSeek, and Netlify v2.

    • OpenAI Project API Key (v2) detector added to identify the new format of OpenAI project API keys
    • OpenAI Admin API Key detector added for OpenAI admin API keys
    • 1Password Service Account Token detector added to identify 1Password service account tokens
    • DeepSeek API Key detection enabled for DeepSeek API keys
    • Netlify Token (v2) detection introduced for the latest version of Netlify tokens

    +3 more show less

    • GitHub Tokens recall and validation improved for GitHub authentication tokens
    • Dropbox Key detector group split into Dropbox Key and Dropbox Access Token for improved granularity
    • Generic Passwords secrets containing ***** excluded to reduce false positives

    8 details in Everything

57. Detection Engine Updates Version 2.131 + 2.132 Feb 11, 2025 · release notes

    Adds SMBSMBA network file-sharing protocol developed by Microsoft that lets systems share files, printers, and named pipes over a network; cyber tools target or speak it because it is ubiquitous in Windows environments. Credentials, Azure Storage Connection String, DeepSeek API Key, Netlify Token v2, and 1Password Service Account Token detectors.

    • Adds smb_uri detection for SMB credentials inside a connection URI
    • New detector for Microsoft Azure Storage Connection String (Azure Blob Storage)
    • Added detector and new checker for DeepSeek API Key
    • New detector added for Netlify Token v2
    • New detector added for 1Password Service Account Token

    5 details in Everything

58. Detection Engine Updates Version 2.130 Jan 28, 2025 · release notes

    Detection Engine 2.130 adds Artifactory and HubSpot token detectors with enhanced GitHub validation

    • Adds detection for HubSpot Private App Token
    • Enhances validation rules for GitHub Enterprise Tokens, OAuth Access Tokens, Personal Access Tokens, Server-to-Server Tokens, generic GitHub Tokens, and User-to-Server Tokens

    2 details in Everything

59. November 4, 2024 Nov 4, 2024 · release notes

    GitGuardian Detection Engine v2.125 adds four new secret detection detectors.

    • Adds detection for Cloudflare Tunnel Credentials
    • Adds detection for InfluxDB Token with Host
    • Adds detection for Rails Master Key Assignment
    • Adds detection for standard InfluxDB Token

    4 details in Everything

60. October 7, 2024 Oct 7, 2024 · release notes

    GitGuardian Detection Engine v2.122 adds support for Atlassian, Bitbucket, and Mistral AI secret detectors.

    • Adds Atlassian Access Token detector to the secrets detection engine
    • Adds Bitbucket Access Token detector to the secrets detection engine
    • Adds Mistral AI API Key detector to the secrets detection engine

    3 details in Everything

61. August 26, 2024 Aug 26, 2024 · release notes

    GitGuardian Detection Engine v2.120 adds Buildkite API Token and Generic Password YAML detectors

    • Adds Buildkite API Token detector to the secrets detection engine.
    • Adds Generic Password YAML detector to the secrets detection engine.

    2 details in Everything

    └──▷ BREAKING ON UPGRADE

    • !The reCAPTCHA Key detector no longer validates key validity against Google APIs.
62. June 4, 2024 Jun 4, 2024 · release notes

    GitGuardian Detection Engine v2.114 adds support for 9 new secret types including Langchain and OpenAI keys

    • Adds detection for ASP.NET Decryption Key secrets
    • Adds detection for ASP.NET Validation Key secrets
    • Adds detection for Langchain API Key secrets
    • Adds detection for OpenAI Project API Key secrets
    • Adds detection for OpenAI Service Account secrets

    +5 more show less

    • Adds detection for Sourcegraph Enterprise Subscription Token secrets
    • Adds detection for Sourcegraph License Key Token secrets
    • Adds detection for Sourcegraph User Gateway Access Token secrets
    • Adds detection for WakaTime API Key secrets
    • Updates coverage for Sentry Token, Generic Database assignment, Generic FTP Assignment, and Generic Username Password detectors

    10 details in Everything

63. May 20, 2024 May 20, 2024 · release notes

    GitGuardian Detection Engine v2.113 adds 5 new secret detectors and improves 10 existing ones.

    • Adds support for detecting Nylas API Key secrets
    • Adds support for detecting Sourcegraph Access Token v3 secrets
    • Adds support for detecting Duplo Cloud API Key secrets
    • Adds support for detecting Fernet Key secrets
    • Adds support for detecting Vercel Blob Token secrets

    +10 more show less

    • Improves Base64 Generic High Entropy Secret detection coverage
    • Improves Generic Database Assignment detection coverage
    • Improves Generic High Entropy Secret detection coverage
    • Improves PostgreSQL CLI Credentials detection coverage
    • Improves Postgres assignment attached port detection coverage
    • Improves PostgreSQL Pgpass Credentials detection coverage
    • Improves PostgreSQL URI detection coverage
    • Improves Sourcegraph Access Token v2 detection coverage
    • Improves Yelp API Key detection coverage
    • Improves Google Gemini API Key detection coverage

    15 details in Everything

64. April 15, 2024 Apr 15, 2024 · release notes

    Generic CLI Secret and Generic Database Assignment detectors active by default for non-VCSVCSVersion control system: software that tracks changes to files over time, letting teams collaborate and roll back mistakes. Cyber tools use it to manage source code, configs, and signatures. data sources

    • Upgrade to version 2.110 with the addition of 4 new detectors (Dropbox Key, Midtrans API Key, Sanity Token, Zuplo API Key) and improvements to existing detectors.

    1 detail in Everything