https://cybertoolchain.io/tools/gitguardian-detection-engine New releases and features in GitGuardian Detection Engine, tracked by The Cyber Toolchain. en Sat, 31 Oct 2026 07:46:17 GMT https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Sat, 31 Oct 2026 07:46:17 GMT GitGuardian Detection Engine: Eight checkers now need a custom host, including JFrog Artifactory, AWS Cognito, Bitbucket, Jira, Azure Storage, and Okta. • The `jenkins_api_token` detector now also matches the Jenkins instance URL. • The `microsoft_azure_storage_account_key_with_account_name` detector moves to its own detector group. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/10/27/changelog https://docs.gitguardian.com/releases/detection-engine/2026/10/27/changelog Tue, 27 Oct 2026 00:00:00 GMT GitGuardian Detection Engine adds detectors for Portainer API keys, Weights & Biases, and ODBC connection strings, and activates eight custom-host checkers⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Portainer API keys that can match the key alone or together with the URL of the Portainer instance.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a checker for ODBC connection strings supporting SQL Server, MySQL, PostgreSQL, Oracle, and DB2 databases. • Adds a new analyzer for Weights & Biases API keys, including a detector checker. • Activates the JFrog Artifactory reference token checker (`Artifactory Reference Token`), now available with a required custom host. • Activates the JFrog Artifactory token checker (`Artifactory Token`), now available with a required custom host. • Activates the AWS Cognito OAuth 2.0 credentials checker, now available with a required custom host. • Activates the Bitbucket Data Center HTTP access token checker (`Bitbucket HTTP Access Token with Prefix`), now available with a required custom host. • Activates the Jira Data Center personal access token checker, now available with a required custom host. • Activates the Microsoft Azure Storage account key checker, now available with a required custom host. • Activates the Okta OAuth credentials checker (`Okta Keys`) and Okta token checker (`Okta Token`), each now available with a required custom host. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Fri, 23 Oct 2026 11:17:51 GMT GitGuardian v2.174.0 adds 10 new detectors, 2 new analyzers, and a new SMTP validity checker across dozens of credential types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new detectors for `sftp_credentials_assignment` SFTP credentials, Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPN private keys, and Kubernetes bearer tokens stored in kubeconfig files.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables validity checker for SMTP credentials. • Adds `aws_ses_keys` checker timeout to reduce kills by apikey-checker. • The `snyk_key_v2` checker now supports the `SNYK-US-02` region. • The `azure_entra_app_secret` detector now detects credentials declared against Microsoft national cloud sign-in hosts. • The `ftp_credentials_assignment` detector now handles secrets without a port, and the `mssql_assignment` detector now detects MSSQL credentials assigned without a port. • The `algolia_monitoring` checker now validates all Algolia keys with more permissions than the default search key. • The `snowpark_api_credentials` checker now supports short account identifiers, hostnames, and full Snowflake URLs. • The Azure Entra Access Token checker and Azure Active Directory API Keys checker now accept a custom host, while the Azure Entra ID token checker, GitLab Deploy Token checker, and LiteLLM API key checker can now reach custom hosts through a proxy. • The `n8n` API key checker and `n8n` MCP access token checker now check keys and tokens found with a host written without its scheme. Breaking changes: • The `line_notify_token` detector has been removed. • The `ftp_credentials_assignment` detector now only captures FTP secrets, not SFTP — SFTP secrets require the new `sftp_credentials_assignment` detector. • The `azure_event_grid_access_key_with_host` detector has been merged into `azure_event_grid_access_key`. • The `grafana_service_account_token_with_host` detector has been merged into `grafana_service_account_token`. • The `kubernetes_jwt_with_host` detector has been merged into `kubernetes_jwt`. • The `planetscale_database_password_with_host_and_username` detector has been merged into `planetscale_database_password`. • The `postgres_assignment_attached_port` and `postgres_assignment_no_port` detectors have been merged into `postgres_assignment`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/10/13/changelog https://docs.gitguardian.com/releases/detection-engine/2026/10/13/changelog Tue, 13 Oct 2026 00:00:00 GMT Detection Engine 2.174 adds 10 new detectors, 2 new analyzers, and a new SMTP validity checker across dozens of credential types.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds new detectors for SFTP credentials (`sftp_credentials_assignment`), Lago API keys, Composio project API keys, Composio organization API keys, Codex API keys, CARTO Basemaps API keys, Google Chat incoming webhook URLs, HubSpot CLI personal access keys, AmneziaWG VPN private keys, and Kubernetes bearer tokens stored in kubeconfig files; adds new analyzers for GoCardless API access tokens and Adobe refresh tokens; and enables a validity checker for SMTP credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Expands `snyk_key_v2` checker to support the SNYK-US-02 region, `snowpark_api_credentials` checker to support short account identifiers, hostnames, and full Snowflake URLs, and `algolia_monitoring` checker to validate all Algolia keys with more permissions than the default search key. • Extends `azure_entra_app_secret` detector to detect credentials declared against Microsoft national cloud sign-in hosts, GitHub Server-to-server token (`ghs_<app id>_<JWT>`) detection to any number of scopes including longer tokens previously missed, `docker_credentials` detector to support the new Docker credential format, `ssh_password` detector to detect passwords sent in expect scripts after an SSH password prompt, `mssql_assignment` detector to detect MSSQL credentials assigned without a port, `ftp_credentials_assignment` checker to handle secrets without a port, and Gemfury detectors to detect credentials outside Gemfury repository URLs. • Extends `azure_entra_access_token` and Azure Active Directory API Keys checkers to accept a custom host, Azure Entra ID token, GitLab Deploy Token, and LiteLLM API key checkers to reach custom hosts through a proxy, and `n8n` API key and MCP access token checkers to validate keys and tokens found with a host written without its scheme. • Merges `azure_event_grid_access_key_with_host` into `azure_event_grid_access_key`, `grafana_service_account_token_with_host` into `grafana_service_account_token`, `kubernetes_jwt_with_host` into `kubernetes_jwt`, `planetscale_database_password_with_host_and_username` into `planetscale_database_password`, and `postgres_assignment_attached_port` and `postgres_assignment_no_port` into `postgres_assignment` detectors. • Reduces false positives in `generic_high_entropy_secret` by no longer reporting image names from known container registries, in `generic_database_assignment` from shell command substitutions, empty defaults, the `--userns` flag, and malformed host or username values, and in `microsoft_azure_storage_account_key` caused by JFrog reference tokens assigned to `jfrog` variables. Breaking changes: • The `line_notify_token` detector and checker have been removed (the LINE Notify service is no longer available). • The `azure_event_grid_access_key_with_host` detector is removed — merged into `azure_event_grid_access_key`; any references to the old detector name will no longer resolve. • The `grafana_service_account_token_with_host` detector is removed — merged into `grafana_service_account_token`. • The `kubernetes_jwt_with_host` detector is removed — merged into `kubernetes_jwt`. • The `planetscale_database_password_with_host_and_username` detector is removed — merged into `planetscale_database_password`. • The `postgres_assignment_attached_port` and `postgres_assignment_no_port` detectors are removed — merged into `postgres_assignment`. • The `ftp_credentials_assignment` detector now captures only FTP secrets, not SFTP; SFTP is handled by the new `sftp_credentials_assignment` detector. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Sun, 04 Oct 2026 07:49:53 GMT GitGuardian adds 9 new detectors (Ory, Kong Konnect, AppSignal, PostHog, Datadog, NinzaSMS, TypeSafe AI, Mistral AI v2) and a Cohere analyzer.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds the `mistralai_apikey_v2` detector for Mistral AI's new prefixed API key format.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Ory API keys. • Adds a new detector for Kong Konnect personal access tokens. • Adds a new detector for AppSignal API keys. • Adds a new detector for PostHog OAuth access tokens. • Adds a new detector for PostHog OAuth refresh tokens. • Adds a new detector for Datadog service access tokens. • Adds a new detector for NinzaSMS API keys. • Adds a new detector for TypeSafe AI API keys. • Adds a new analyzer for Cohere API keys. • Base64 Basic Authentication findings now take precedence over overlapping Base64 Generic High Entropy Secret findings. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/09/28/changelog https://docs.gitguardian.com/releases/detection-engine/2026/09/28/changelog Mon, 28 Sep 2026 00:00:00 GMT Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Fri, 25 Sep 2026 07:51:51 GMT GitGuardian ships 10 new detectors, 8 new analyzers, and expanded validation for Splunk, Salesforce, Artifactory, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present. • Adds a new detector for generic Sanctum tokens. • Adds a new detector for Telnyx API keys with the `KEY` prefix. • Adds a new detector for Bifrost virtual keys, matched alone or together with the URL of the Bifrost deployment. • Adds a new detector for Bitbucket HTTP access tokens with the `BBDC-` prefix. • Adds a new detector for Jira Data Center personal access tokens. • Adds a new detector for MetaApi cloud tokens. • Adds a new detector for Appwrite instance encryption keys. • Adds a new detector for APIclub API keys. • Adds a new analyzer for AWS Cognito OAuth credentials with host. • Adds a new secret analyzer for Alibaba Cloud IAM. • Adds a new analyzer for Databricks access token with hostname. • Adds a secret analyzer for PyPI API tokens. • Adds a secret analyzer for Contentful Content Management API keys. • Adds a new analyzer for DigitalOcean personal access tokens v1. • Adds a new analyzer for DigitalOcean tokens. • Adds a new analyzer for DigitalOcean OAuth application tokens v1. • Adds a new checker for Splunk authentication tokens with custom host support; the Splunk Authentication Token detector now also matches an optional Splunk host alongside the token. • Adds a checker for Artifactory reference tokens with custom host support. • Expands the Salesforce OAuth2 Keys detector to capture the Salesforce instance host and validates credentials against that instance's OAuth token endpoint (production or sandbox) instead of the token introspection endpoint; returns `failed_to_check` when no host is found. • Expands the Scaleway Token detector to catch `SCW_SECRET_KEY` and `SCALEWAY_SECRET_KEY` assignments, including when the word 'scaleway' is absent from the document. • Expands the Username Password detector to match Spanish, Portuguese, French, and Turkish username/password assignment keywords. • Merges the `generic_database_assignment_attached_port` detector into the `generic_database_assignment` detector. • Updates the Figma personal access token analyzer to report the `folders:read` scope, which replaces the deprecated `projects:read` scope. Breaking changes: • The `generic_database_assignment_attached_port` detector has been merged into `generic_database_assignment`; any rules, suppressions, or integrations referencing `generic_database_assignment_attached_port` by name will no longer match. • The Figma personal access token analyzer now reports the `folders:read` scope in place of the deprecated `projects:read` scope; workflows filtering on `projects:read` scope results will need to be updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Thu, 24 Sep 2026 07:52:33 GMT GitGuardian Detection Engine: Switches the Databricks Authentication Token With Hostname checker to a more reliable endpoint. Breaking changes: • The `generic_database_assignment_attached_port` detector has been merged into `generic_database_assignment`; any policies, filters, or alert rules referencing `generic_database_assignment_attached_port` by name will no longer match. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Wed, 16 Sep 2026 07:42:33 GMT GitGuardian detection engine gains Akamai and Docker Hub analyzers, expanded n8n host detection, and reduced false positives for generic high-entropy secrets.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Updates the GitLab secret analyzer to adapt to changes in GitLab API behavior. • Updates the Figma Personal Access Token analyzer to reflect changes in the Figma API. • Updates the OpenAI API Key analyzer's scope checker endpoints following OpenAI API updates. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Tue, 15 Sep 2026 13:01:42 GMT GitGuardian adds Akamai API Credentials and Docker Hub analyzers, expands n8n host detection, and sharpens entropy secret filtering.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds `generic_high_entropy_secret` filter that suppresses false positives when the assigned variable name ends with `checksum`, with no loss of recall.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a secret analyzer for Akamai API Credentials. • Adds a new analyzer for Docker Hub personal access tokens. • Extends `n8n MCP Access Token` and n8n API Key detectors to recognize n8n hosts given as a container service name or as a scheme-less hostname, and reject unreachable private IP hosts. • Improves recall for Hashicorp Vault AppRole Authentication credentials. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/09/14/changelog https://docs.gitguardian.com/releases/detection-engine/2026/09/14/changelog Mon, 14 Sep 2026 00:00:00 GMT GitGuardian Detection Engine 2.172 adds 10 new detectors, 8 new secret analyzers, and expanded recall for Scaleway, Salesforce, Splunk, and more.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Brightcove OAuth credentials.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds a new detector for Infor ION API Gateway OAuth client credentials, capturing the authorization host and token endpoint when present. • Adds a new detector for generic Sanctum tokens. • Adds a new detector for Telnyx API keys with the `KEY` prefix. • Adds a new detector for Bifrost virtual keys, matched alone or together with the Bifrost deployment URL. • Adds a new detector for Bitbucket HTTP access tokens with the `BBDC-` prefix. • Adds a new detector for Jira Data Center personal access tokens. • Adds a new detector for MetaApi cloud tokens. • Adds a new detector for Appwrite instance encryption keys. • Adds a new detector for APIclub API keys. • Adds a checker for Artifactory reference tokens with custom host support. • Adds a checker for Splunk authentication tokens with custom host support. • Adds a new secret analyzer for AWS Cognito OAuth 2.0 credentials with host. • Adds a new secret analyzer for Alibaba Cloud IAM keys. • Adds a new secret analyzer for Databricks access tokens with hostname. • Adds a new secret analyzer for PyPI API tokens. • Adds a new secret analyzer for Contentful Content Management API keys. • Adds a new secret analyzer for DigitalOcean personal access tokens v1. • Adds a new secret analyzer for DigitalOcean tokens. • Adds a new secret analyzer for DigitalOcean OAuth application tokens v1. • Expands the Scaleway Token detector to catch `SCW_SECRET_KEY` and `SCALEWAY_SECRET_KEY` assignments, including documents where the word 'scaleway' is absent. • Expands the Splunk Authentication Token detector to also match an optional Splunk host alongside the token. • Expands the Salesforce OAuth2 Keys detector to capture the Salesforce instance host and validate against that instance's OAuth token endpoint (production or sandbox), returning `failed_to_check` when no host is found. • Expands the Username Password detector to also match Spanish, Portuguese, French, and Turkish username/password assignment keywords. • Expands the `generic_high_entropy_secret` detector to report secrets located near a localhost mention. • Expands the `generic_encryption_key` detector to report keys located near a localhost mention. • Merges the `generic_database_assignment_attached_port` detector into the `generic_database_assignment` detector. • Expands the Google API Key detector to catch keys containing only one digit. • Expands the Figma personal access token analyzer to report the `folders:read` scope, replacing the deprecated `projects:read` scope. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Tue, 08 Sep 2026 07:45:10 GMT Six new detectors (Firebase, Coze, Keycloak, Fish Audio, Azure Custom Vision) plus a new Apify analyzer and Docker Hub PAT detection. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/08/31/changelog https://docs.gitguardian.com/releases/detection-engine/2026/08/31/changelog Mon, 31 Aug 2026 00:00:00 GMT GitGuardian Detection Engine 2.171 adds Akamai API Credentials and Docker Hub analyzers, plus improved n8n and HashiCorp Vault detection. • Adds `generic_high_entropy_secret` precision improvement: no longer reports secrets whose assigned variable ends with `checksum`, with no loss of recall. • Adds a secret analyzer for Akamai API Credentials. • Adds a new analyzer for Docker Hub personal access tokens. • Improves n8n MCP Access Token and n8n API Key detectors to recognize hosts given as a container service name or as a scheme-less hostname, and to reject unreachable private IP hosts. • Improves recall for HashiCorp Vault AppRole Authentication credentials. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/08/17/changelog https://docs.gitguardian.com/releases/detection-engine/2026/08/17/changelog Mon, 17 Aug 2026 00:00:00 GMT GitGuardian Detection Engine 2.170 adds six new detectors (Firebase, Coze, Keycloak, Fish Audio, Azure Custom Vision) and a new Apify token analyzer. • Adds new detector for Firebase ID tokens. • Adds new detector for Coze access tokens. • Adds new detector for Keycloak access tokens. • Adds new detector for Keycloak refresh and offline tokens. • Adds new detector for Fish Audio API keys. • Adds new detector for Azure Custom Vision Training keys. • Adds new analyzer for Apify API tokens. • Extends the Docker Credentials detector to catch Docker Hub personal access tokens used with `docker login --username` / `-u`. • New Relic Key, New Relic Insights Insert Key, and New Relic APM License Key checkers can now identify revoked keys via an empty POST request. • Reduces false positives for `fastly_personal_token` by rejecting proxy-subscription node passwords and 32-char prefixes of longer base64url values. • Reduces false positives for `scaleway_token` by rejecting node UUIDs from proxy-subscription configs. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Sat, 08 Aug 2026 05:10:19 GMT GitGuardian adds 7 new detectors, a Supabase JWT checker, and broader PostgreSQL username matching across two August 2026 releases. • Adds `OpenCode API Key` detector for OpenCode API keys. • Adds `Lovable Access Token` detector for Lovable project access tokens. • Adds `Lovable Git Token` detector for Lovable git tokens. • Adds a new `Supabase Service Role JWT` checker for Supabase `service_role` JWTs. • Extends `generic_password` detector to ignore passwords in public proxy-subscription configs (shadowsocks/vmess/vless/trojan/hysteria URIs, Telegram MTProto links, clash/mihomo node lists). • Extends `generic_high_entropy_secret` and `base64_generic_high_entropy_secret` detectors to ignore secrets whose decoded context is a public proxy-subscription config or a URL-signing token (S3 presigned parameters, HLS stream tokens, booking/redirect tokens). • Extends `aws_iam` detector to ignore presigned-URL parameters and GitHub avatar IDs. • Extends `generic_encryption_key` detector to ignore Talend encrypted passwords (`enc:system|routine.encryption.key.vN:...` format). • Hardens the Azure Event Hub checker with the same Atom-feed validation requirement. Breaking changes: • The Amadeus OAuth credentials detector and checker have been disabled; the Amadeus self-service API has been discontinued. • The `github_oauth_token` detector and checker have been removed; the service for this detector is no longer available. • The attached-port PostgreSQL variant detector has been merged into the Generic Database Assignment detector. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/08/04/changelog https://docs.gitguardian.com/releases/detection-engine/2026/08/04/changelog Tue, 04 Aug 2026 00:00:00 GMT GitGuardian Detection Engine 2.169.1 adds Lovable token detectors and tightens GitHub and npm token precision. • New detector: identifies Lovable project access tokens. • New detector: identifies Lovable git tokens. • GitHub Personal Access Token, GitHub OAuth Token, and GitHub App Token detectors now skip values that fail format validation, reducing false positives from generic detectors. • npm Token detector now skips values that fail format validation, reducing false positives from generic detectors. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/08/03/changelog https://docs.gitguardian.com/releases/detection-engine/2026/08/03/changelog Mon, 03 Aug 2026 00:00:00 GMT GitGuardian Detection Engine 2.169 adds 7 new detectors, a Supabase JWT checker, and expands PostgreSQL credential matching. • New detector for Slack Workflow Builder webhook trigger URLs. • New detector for n8n API keys. • New detector for Atlassian auth keys (OAuth 2.0 access tokens issued by `auth.atlassian.com`). • New detector for AWS Cognito User Pool access tokens. • New detector for OpenAI platform access tokens. • New detector for Vercel OIDC workload-identity tokens. • New detector for OpenCode API keys. • New checker for Supabase `service_role` JWTs. • Azure Event Hub and Azure Service Bus checkers now only report a key as valid when the 200 response is a genuine Service Bus Atom feed, blocking false-valid results behind intercepting proxies. • PostgreSQL credentials detectors now match usernames containing dashes (e.g. `workflow-prod-user`) and raise the username length bound from 20 to 30 characters. • Generic Database Assignment detector now incorporates the attached-port variant. Breaking changes: • The `grafbase_access_token` detector and checker have been removed entirely. • The Amadeus OAuth credentials detector and checker have been disabled. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine https://docs.gitguardian.com/releases/detection-engine Thu, 23 Jul 2026 16:01:31 GMT • Updated Hume AI API key checker endpoint. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/07/20/changelog https://docs.gitguardian.com/releases/detection-engine/2026/07/20/changelog Mon, 20 Jul 2026 00:00:00 GMT GitGuardian Detection Engine 2.168 adds 4 new detectors, 2 new validity checkers, and extends HTML/Markdown scanning to 5 token types. • New detector for Azure Immersive Reader Key credentials. • New detector for Alibaba Cloud Model Studio (Qwen / DashScope) Coding Plan API keys. • New detector for Alibaba Cloud Model Studio (Qwen / DashScope) Token Plan API keys. • New detector for Prefect Cloud API keys. • New validity checker for Alibaba Cloud IAM keys. • New validity checker for GitLab Deploy Tokens when username and host are present. • Generic High Entropy Secret detector now covers additional credential key-name prefixes: `access`, `app`, `vault`, `sign`, `dev`, `prod`, and `staging`. • Okta Token with Host detector updated to match regional and preview host domains, raising precision from ~0% to ~100% on reviewed samples. • HTML and Markdown file scanning extended to npm, GitHub Personal Access, GitHub OAuth, GitHub App, and Slack Application tokens. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/07/07/changelog https://docs.gitguardian.com/releases/detection-engine/2026/07/07/changelog Tue, 07 Jul 2026 00:00:00 GMT GitGuardian v2.167 adds 11 new secret detectors spanning Azure, AI/LLM platforms, and developer tools, plus expanded validity checking. • New detector for LiteLLM API Key (without host capture). • New detector for Azure SQL Credentials (Assignment). • New detector for Azure Machine Learning keys. • New detector for Azure Video Indexer keys. • New detector for Apify Proxy Token. • New detector for Alibaba Cloud Model Studio / DashScope (Qwen) signed workspace API keys. • New detector for Authress Service Client Access Key. • New detectors for Gemfury Deploy/Push Token and Full Access Token (both without username). • New detector for Azure Health Insights keys. • New detector for Azure Fluid Relay keys. • New validity checker for LiteLLM API Key Without Host, with custom host support. • New validity checker for Llama Cloud API Key. • New validity checker for New Relic APM License Key. • New validity checkers for npm Token and npm Token (prefixed variant). • Improved recall for Datadog API Key and Snyk Key detectors. • Precision improvement for Okta Token with Host: generic Okta domains (e.g. login.okta.com) are now excluded from host capture. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/06/23/changelog https://docs.gitguardian.com/releases/detection-engine/2026/06/23/changelog Tue, 23 Jun 2026 00:00:00 GMT GitGuardian adds 9 new secret detectors (Amadeus, Kinde, TomTom, Datadog, 5 Azure services) plus Gemfury validity checkers. • New detector for Amadeus OAuth Credentials. • New detector for Kinde OAuth Credentials. • New detector for TomTom API Key. • New detector for Datadog Personal Access Token. • New detector for Azure Maps Key. • New detector for Azure Mixed Reality Key. • New detector for Azure Service Bus Key. • New detector for Azure Quantum Key. • New detector for Azure Bot Direct Line Key. • Adds validity checkers for Gemfury Deploy/Push Token and Gemfury Full Access Token. • Updates LiteLLM API Key checker to use the models endpoint and validate JSON response shape. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/06/23/changelog https://docs.gitguardian.com/releases/detection-engine/2026/06/23/changelog Tue, 23 Jun 2026 00:00:00 GMT GitGuardian Detection Engine v2.166 adds nine new secret detectors and validity checkers for Gemfury tokens. • Adds nine new detectors: Amadeus OAuth Credentials, Kinde OAuth Credentials, TomTom API Key, Datadog Personal Access Token, Azure Maps Key, Azure Mixed Reality Key, Azure Service Bus Key, Azure Quantum Key, and Azure Bot Direct Line Key • Adds validity checkers for Gemfury Deploy/Push tokens and Full Access tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/06/09/changelog https://docs.gitguardian.com/releases/detection-engine/2026/06/09/changelog Tue, 09 Jun 2026 00:00:00 GMT GitGuardian Detection Engine 2.165 adds 8 new secret detectors and custom-host support for Okta, Azure, and AWS validations • Adds detectors for `Stitch API Key`, `ActiveMQ Credentials`, `Instantly API Key`, `Gitea Access Token`, `Fal.ai API Key`, `SurrealDB Cloud JWT Token`, `Kimi API Key`, and `Wiz OAuth Credentials`. • Adds `custom_host_support` to Okta Token, Okta OAuth Credentials, Azure Storage Account Key, and AWS Cognito OAuth 2.0 Credentials validity checkers. • Updates Sumo Logic checker to validate against Switzerland and Korea deployments while removing the retired India endpoint. • Improves detection accuracy for `azure_active_directory_api_keys` by reducing false positives via updated matchers. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/05/25/changelog https://docs.gitguardian.com/releases/detection-engine/2026/05/25/changelog Mon, 25 May 2026 00:00:00 GMT GitGuardian Detection Engine v2.164 adds detectors for Authentik, Pagar.me, Adobe, LiteLLM, brapi.dev, Open VSX and Adafruit IO; improves precision for Snyk, Finicity, Hunter • Adds new detection capability for 'Authentik API Token'. • Adds new detection capability for 'Pagar.me Encryption Key'. • Adds new detection capability for 'Adobe Refresh Token'. • Adds new detection capability for 'LiteLLM API Key'. • Adds new detection capability for 'brapi.dev API Key'. • Adds new detection capability for 'Open VSX Access Token'. • Adds analyzer support for 'Adafruit IO API Key'. • Improves precision for the 'snyk_key' detector from ~40% to ~90%. • Improves precision for the 'finicity_authentication_keys' detector from ~67% to ~98%. • Improves precision for the 'hunter_api_key' detector from ~9% to ~100%. • Reduces false positives for 'datadog_api_credentials'. • Reduces false positives for 'github_access_token'. • Reduces false positives for 'heroku_platform_key'. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/05/21/changelog https://docs.gitguardian.com/releases/detection-engine/2026/05/21/changelog Tue, 12 May 2026 00:00:00 GMT Detection Engine v2.163 adds six new detectors, updates GitHub/Azure DevOps precision, and surfaces Azure OpenAI HTTP status codes • Adds `sap_oauth_credentials` detector to detect SAP OAuth Credentials (replacing the deprecated `sap_ai_core_credentials`) in cyber tooling • Adds new detectors for Aikido API OAuth2 Credentials, Logflare Access Token, PolyAPI API Key, Apollo.io API Key, and AES Cipher Key keys in cyber tooling • Updates Azure DevOps Personal Access Token detector to improve precision and catch new formats of Azure DevOps PATs in cyber tooling • Updates GitHub App Token detector to improve precision and catch new formats of GitHub Server-to-server Tokens in cyber tooling • Surfaces upstream HTTP status codes on failure for Azure OpenAI API keys instead of generic invalid-secret errors via the Azure OpenAI analyzer in cyber tooling Breaking changes: • The `sap_ai_core_credentials` detector is replaced by `sap_oauth_credentials`; any logic dependent on the previous name will stop matching new credentials until updated. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/05/04/changelog https://docs.gitguardian.com/releases/detection-engine/2026/05/04/changelog Mon, 27 Apr 2026 00:00:00 GMT Detection Engine 2.162 adds 16 new detectors (Cloudflare V2, Snyk V2, Baidu, etc.) and analyzer support for Azure AI Search. • Adds detection support for Cloudflare API Token V2 format • Adds detection for Aikido CI Scanning Token, Baidu AI Cloud API Key, Baidu Cloud API Keys, HashiCorp Consul ACL Token, ElevenLabs API Key, Datadog Application Key, Volcengine API Key, QQ Robot API Keys, Canva Integration OAuth 2.0, Bitrise Personal Access Token, Bitrise Workspace API Token, MaxMind License Key, CockroachDB API Key, Coder Session Token • Adds analyzer support for Azure AI Search and Azure OpenAI API keys • Updates Google Cloud detector to use less memory on secret-dense files • Disables the `grafbase_access_token` checker ahead of its removal Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/04/17/changelog https://docs.gitguardian.com/releases/detection-engine/2026/04/17/changelog Tue, 14 Apr 2026 00:00:00 GMT Adds detectors for Payhere, HubSpot, Birdeye, Datadog and GitGuardian tokens plus analyzers for Intercom, Notion and Azure Cosmos DB. • Add a new detector for `Payhere App Credentials` with its corresponding checker • Add a new detector for `Hubspot API Key` with its corresponding checker • Add a new detector for `Birdeye API Key` with its corresponding checker • Add a new detector for `Datadog API Keys` with its corresponding checker • Add a new detector for `Payhere Merchant Secret` • Add detector and checker for `GitGuardian Personal Access Token` • Add detector and checker for `GitGuardian Service Access Token` • Add a new checker for `Azure SignalR Connection String` • Add a new analyzer for `Intercom Access Token` • Add analyzer for `GitGuardian Personal Access Token` • Add analyzer for `GitGuardian Service Access Token` • Add a new analyzer for `Notion Integration Token` • Add a new analyzer for `Azure Cosmos DB Credentials` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/04/13/changelog https://docs.gitguardian.com/releases/detection-engine/2026/04/13/changelog Tue, 31 Mar 2026 00:00:00 GMT GitGuardian Detection Engine v2.160 adds private key registration checks and new Paymob/Sentry/Figma/Datadog/GCloud support • Adds `Generic Private Key`, `OpenSSH Private Key`, `RSA Private Key`, and `Elliptic Curve Private Key` checkers to verify if keys are registered with GitLab or GitHub • Adds new detectors for `Paymob API Key`, `Paymob Secret Key`, `Paymob HMAC Secret`, and `ConvertTo-SecureString Password` • Adds new analyzers for `Sentry User Auth Token`, `Figma Personal Access Token`, `Datadog API Credentials`, and `Google Cloud Keys` Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/03/20/changelog https://docs.gitguardian.com/releases/detection-engine/2026/03/20/changelog Fri, 20 Mar 2026 00:00:00 GMT GitGuardian Detection Engine v2.159 adds 19 new detectors and 4 analyzers for Azure, SAP, Oracle, and other services. • Add a detector for Polar Organization Access Token • Add a detector for Google Cloud Express API Key • Add a detector for Microsoft Azure Storage Account Key with Account Name • Add a detector for Azure Language API Key • Add a detector for Azure IoT Hub Connection String • Implement detector for DeepL Free API keys • Implement detector for DeepL Pro API keys • Add a detector for Azure Document Intelligence Key • Add a detector for Azure Speech Services Key • Add a detector for Azure Computer Vision API Key • Add a detector for Azure Text Translation Key • Add a detector for Oracle JDBC credentials • Add detector for new GitGuardian Public Monitoring API Key format • Add detector for new GitGuardian Internal Monitoring Key format • Add a detector for SAP AI Core Credentials • Add a detector for Odoo External API Key • Add a detector for K3s tokens • Add a detector for Zoho API Key • Add a detector for passwords in ServiceNow configuration files • Add a new analyzer for Azure App Configuration Connection String • Add a new analyzer for Google API Key • Add a new analyzer for Azure Speech Services Key • Add a new analyzer for FTP credentials Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/03/03/changelog https://docs.gitguardian.com/releases/detection-engine/2026/03/03/changelog Tue, 03 Mar 2026 00:00:00 GMT GitGuardian Detection Engine 2.158 adds detectors for MiniMax, Retell, Azure Storage Keys, and curl credentials. • Adds a new detector and checker for `MiniMax API Key` signatures • Adds a new detector and checker for `Retell API Key` signatures • Adds a new detector and checker for `Microsoft Azure Storage Account Key` with Account Name • Adds a new detector for `curl username password` credentials Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/02/19/changelog https://docs.gitguardian.com/releases/detection-engine/2026/02/19/changelog Thu, 19 Feb 2026 00:00:00 GMT Detection Engine 2.157 adds 30+ new detectors for Azure, payments, and CI/CD, plus revokers for Slack and Heroku. • Adds `Yookassa API Key`, `WireGuard Credentials`, `Nuclei Private Key`, `PostHog Project API Key`, and `OpenClaw Auth Token` detectors for broader secret coverage • Introduces new revokers for `SendGrid Key`, `Slack User Token`, `Slackbot Token`, and `Heroku Platform Key` to enable automated remediation • Adds a new `Anthropic Admin Key` analyzer to verify credential validity in real-time • Adds `Azure DevOps PAT With Org` analyzer for organization-scoped access verification • Expands detector coverage with 20+ new detectors including Azure cloud services, WooCommerce, Mercado Pago, and GitLab CI/CD Job tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/01/29/changelog https://docs.gitguardian.com/releases/detection-engine/2026/01/29/changelog Thu, 29 Jan 2026 00:00:00 GMT GitGuardian Detection Engine v2.156 adds 7 new detectors and enhances Azure SAS URL checking. • Added `Modelscope API Key` detector • Added `Proxmox API Token` detector • Added `ZegoCloud Secret` detector • Added `Deepgram API Key` detector • Added `Microsoft Power Apps Webhook` detector • Added `Mem0 API Key` detector • Added `Obsidian API Key` detector Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2026/01/12/changelog https://docs.gitguardian.com/releases/detection-engine/2026/01/12/changelog Mon, 12 Jan 2026 00:00:00 GMT GitGuardian Detection Engine v2.155 adds 18+ new detectors for cloud platforms and introduces enhanced precision checks. • Adds `Oracle JDBC connection string` detector and checker • Adds `Azure Entra App Secret` detector and checker • Adds `Azure Entra Access Token` detector and checker • Adds `GitLab SCIM Token` detector and checker • Adds `GitLab Agent Kubernetes Token` detector and checker • Adds `ASI :One API Key` detector and checker • Adds `Azure IoT Device Connection String` detector and checker • Adds `Xendit Secret API Key` detector and checker • Adds `Supabase API Key` detector and checker • Adds `Neoload Web Access Token` detector and checker • Adds `MongoDB Credentials` detector and checker for mismatched port assignments • Adds `Azure Cache for Redis Access Key` detector and checker • Adds `GitLab Feed Token` detector • Adds `Clerk Webhook Token` detector • Adds `Better Auth Secret` detector • Adds `Elastic Search API Key` detector • Adds `Redis Credentials` detector for mismatched port assignments • Adds `Azure Relay Key` detector Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/12/15/changelog https://docs.gitguardian.com/releases/detection-engine/2025/12/15/changelog Mon, 15 Dec 2025 00:00:00 GMT New Cloudflare R2 and Azure SAS URL detectors, MySQL assignment detector, and Tailscale SCIM key checker added in Detection Engine 2.154. • `Cloudflare R2 Token` detector adds support for detecting Cloudflare R2 authentication tokens • `Azure SAS URL` detector adds support for detecting Azure Shared Access Signature URLs • `MySQL Credentials` detector now uses a new assignment detection mode that excludes port-based matching • Adds a checker for Tailscale SCIM keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/12/05/changelog https://docs.gitguardian.com/releases/detection-engine/2025/12/05/changelog Fri, 05 Dec 2025 00:00:00 GMT Detection Engine 2.153 adds 6 new detectors, 883 secret providers and improves recall for MySQL and GitLab tokens. • Adds detectors for HighLevel Private Integration Token, Elastic API Key, Google Cloud Keys (base64), Socket Dev API Key, Upstash Redis Credentials, and Vapid Key • Adds a new checker for Oracle credentials • Adds support for 883 new secret providers to improve incident prioritization on generic secrets Breaking changes: • The `aws_iam` analyzer is removed; AWS IAM scope analysis is now performed by NHI integration with AWS Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/11/18/changelog https://docs.gitguardian.com/releases/detection-engine/2025/11/18/changelog Tue, 18 Nov 2025 00:00:00 GMT Detection Engine 2.152 adds Google Cloud Access Token detection and updates several existing detectors. • Adds a new detector and checker for Google Cloud Access Tokens • Updates Hashicorp Vault Token detector to catch more patterns • Updates PagerDuty Authorization Token regex with token prefix • Updates docker_credentials checker endpoint • Updates fullstory_api_key checker endpoint Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/11/10/changelog https://docs.gitguardian.com/releases/detection-engine/2025/11/10/changelog Mon, 10 Nov 2025 00:00:00 GMT Detection Engine v2.151 adds 13 new detectors for AI services, cloud platforms, and databases. • Adds `Hume AI API Key` detector and checker • Adds `Hume AI Secret Key` detector and checker • Adds `Azure AI Face Authentication` detector and checker • Adds `Neon API Key` detector and checker • Adds `E2B API Key` detector and checker • Adds `MailerSend API Key` detector and checker • Adds `Scraper API Key` detector and checker • Adds `AIProxy API Key` detector • Adds `Cloudsmith Entitlement Token` detector and checker • Adds `AWS Bedrock Long-term API Key` detector and checker • Adds `Harness API Key` detector and checker • Adds `Grafbase Access Token` detector and checker • Adds `AssemblyAI Access Token` detector and checker • Deprecates `Pinecone API Keys` detector in favor of `pinecone_api_key` • Adds `pinecone_api_key_v2` detector for new Pinecone API key format Breaking changes: • `Pinecone API Keys` detector is deprecated and will be replaced by the `pinecone_api_key` detector Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/10/21/changelog https://docs.gitguardian.com/releases/detection-engine/2025/10/21/changelog Tue, 21 Oct 2025 00:00:00 GMT New Coveo API Key detector and improved DigitalOcean Spaces Token checker in Detection Engine 2.150 • Adds a new Coveo API Key detector and checker to the engine. • Upgrades the DigitalOcean Spaces Token analyzer to check for bucket listing permissions. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/10/10/changelog https://docs.gitguardian.com/releases/detection-engine/2025/10/10/changelog Fri, 10 Oct 2025 00:00:00 GMT Adds new detectors for Comet API keys, Langfuse credentials, and Okta OAuth/API tokens with host fields. • Added a detector and checker for Comet API keys • Added a detector and checker for Langfuse credentials • Added a detector and checker for Okta OAuth credentials with host • Added a detector and checker for Okta API tokens with host Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/09/22/changelog https://docs.gitguardian.com/releases/detection-engine/2025/09/22/changelog Mon, 22 Sep 2025 00:00:00 GMT Detection Engine 2.148 expands secret detection across AI services, cloud platforms, and DevOps tools. • Adds detector for VirusTotal API keys • Adds detector for Cloudflare Turnstile secret keys • Adds detector for Stability AI API Key • Adds detector for Azure Cognito OAuth credentials • Adds detector with host-specific checks for Azure Cognito OAuth credentials with Host • Extends Artifactory support to include dashes in hostnames for Access Token, Basic Auth Credentials, Reference Token with Host, and Token with Host • Adds detector for GitLab Feature Flags Client Token with Project ID • Adds new detector for Kubernetes JWT with Host • Adds detector for GitLab Trigger Token • Adds detector for Brave Search API keys • Adds detector for GitLab deploy tokens • Adds detector for Firecrawl API keys • Adds detector for Dify API keys • Adds detector for GitLab Runner Authentication Token • Adds detector for Ubidots API keys • Adds detector for Vapi API keys • Adds detector for Llama Cloud API keys • Extends Azure Cosmos DB credentials host pattern to improve recall • Restricts GitLab Token detector pattern to reduce false positives • Improves ODBC connection string precision Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/09/15/changelog https://docs.gitguardian.com/releases/detection-engine/2025/09/15/changelog Mon, 15 Sep 2025 00:00:00 GMT New Weaviate and Cursor API detectors with validity checkers; Snowflake URIs get validation. • Adds new detection for `Weaviate Token with Hostname` and its corresponding validity checker. • Adds new detection for `Cursor API Key` (Admin & User) and its corresponding validity checker. • Adds a new validity checker for the `snowflake_uri` detector. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/08/27/changelog https://docs.gitguardian.com/releases/detection-engine/2025/08/27/changelog Wed, 27 Aug 2025 00:00:00 GMT Detection Engine v2.146 adds detectors for Africa's Talking, Clipdrop, StackHawk, and Murf API keys. • Adds `Africa's Talking` API key detector • Adds `Clipdrop` API key detector • Adds `StackHawk` API key detector • Adds `Murf` API key detector Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/08/07/changelog https://docs.gitguardian.com/releases/detection-engine/2025/08/07/changelog Thu, 07 Aug 2025 00:00:00 GMT GitGuardian Detection Engine v2.145 enhances `gitlab_personal_token_v2` detection with broader regex • Expands the `gitlab_personal_token_v2` detector pattern to catch longer GitLab personal tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/07/25/changelog https://docs.gitguardian.com/releases/detection-engine/2025/07/25/changelog Fri, 25 Jul 2025 00:00:00 GMT Detection Engine 2.144 adds detectors for Weights & Biases, Bitbucket App Passwords, and Mercado Pago tokens. • Adds `Weights & Biases API Key` detector to identify secrets in codebases • Adds `Bitbucket App Password` detector as a new surface for access token detection • Adds `Mercado Pago Access Token` detector with verification checker for payment service credentials Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/07/15/changelog https://docs.gitguardian.com/releases/detection-engine/2025/07/15/changelog Tue, 15 Jul 2025 00:00:00 GMT Detection Engine v2.143 adds new secret detectors and validation checkers for GitLab, Coze, Tavus, Heroku, Tableau, Notion, and Salesforce. • Adds `ssh_password_with_port` detector to match SSH credentials including specific ports • Adds detection support for GitLab incoming mail tokens • Adds detection support for Coze personal access tokens • Adds detection support for Tavus API keys • Adds detection support for Heroku Platform Keys (prefixed variants) • Adds detection support for Tableau Cloud PATs • Adds detection support for Notion Integration Token v2 format • Adds validation checker for Coze Personal Access Tokens • Adds validation checker for Tavus API Keys • Adds validation checker for Heroku Platform Keys • Adds validation checker for Tableau Cloud PATs • Adds validation checker for Notion Integration Token v2 • Adds validation checker for Salesforce OAuth2 tokens • Enhances JWT detectors to only catch signed JWTs • Improves Generic High Entropy Secret detector to ignore IDs in ServiceNow migration files Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/07/02/changelog https://docs.gitguardian.com/releases/detection-engine/2025/07/02/changelog Wed, 02 Jul 2025 00:00:00 GMT Detection Engine 2.142 adds AI71 and AMP token detectors with accuracy improvements • Adds new detector for `AI71 API Key` to recognize AI71 service API keys • Adds new detector for `AMP API Token` to recognize AMP service API tokens Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/06/16/changelog https://docs.gitguardian.com/releases/detection-engine/2025/06/16/changelog Mon, 16 Jun 2025 00:00:00 GMT Detection Engine 2.141 adds secret detectors and validity checkers for Kubernetes certificates, AI services, and other platforms. • Adds `Kubernetes User Certificate with Port` detector that extracts port numbers for Kubernetes user certificates • Adds `NVIDIA API Key` detector for NVIDIA services • Adds `Alchemy API Key v2` detector for Alchemy services • Adds `OpenRouter API Key` detector for OpenRouter services • Adds `Duffel API Key` detector for Duffel services • Adds `Apify Token` detector for Apify services • Adds `Jina API Key` detector for Jina services • Adds `Deno Account Token` detector for Deno accounts • Adds `Segment Workspace Key v2` detector for Segment services • Adds `Resend API Key` detector for Resend services • Adds `VKontakte Access Token` detector for VKontakte services • Adds `Fireworks AI API Key` detector for Fireworks AI services • Improves `Generic High Entropy Secret` detector by removing AWS ECR images from misclassified secrets • Improves `Google OAuth2 Keys` detector with updated regex for better detection accuracy • Improves `Checkout Sandbox Secret Key` detector with enhanced pattern and updated endpoint for improved accuracy • Improves `Bunny.net API Key` detector by fixing checker for better validation • Improves `Dify API Key` detector by updating checker endpoint for enhanced detection Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/06/10/changelog https://docs.gitguardian.com/releases/detection-engine/2025/06/10/changelog Tue, 10 Jun 2025 00:00:00 GMT Detection Engine v2.140 adds 12 new detectors for GitLab, K8s JWT, Laravel keys and AI services. • Adds detection for Laravel Encryption Key with Host • Adds detection for Kubernetes JWT with Host • Adds detection for GitLab Feature Flags Client Token with Project ID • Adds detection for GitLab Trigger Token • Adds detection for Brave Search API Key • Adds detection for GitLab Deploy Token • Adds detection for Firecrawl API Key • Adds detection for Dify API Key • Adds detection for GitLab Runner Authentication Token • Adds detection for Ubidots API Key • Adds detection for Vapi API Key • Adds detection for Llama Cloud API Key • Enhances Azure Cosmos DB credentials detector with improved host pattern for higher recall Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/05/29/changelog https://docs.gitguardian.com/releases/detection-engine/2025/05/29/changelog Thu, 29 May 2025 00:00:00 GMT New GitLab feature flags token detection and improved AMQP/Confluent/Azure detector accuracy in Detection Engine v2.139 • Adds `GitLab Feature Flags Client Token` detector to identify tokens used for managing GitLab project feature flags. • Enhances `AMQP Credentials` detector with improved multimatch selection to reduce false positive combinations. • Improves `Confluent Keys` detector accuracy by refining multimatch selection to lower false positives. • Excludes secrets ending with '.certificate' from `Generic High Entropy Secret` detection to reduce noise. • Updates `Microsoft Azure Storage Connection String` checker to accept additional fields for Azure storage access. • Increases precision of `Microsoft Azure Storage Account Key` detector to reduce false positives. • Establishes priority rule favoring `confluent_api_keys` detector over `amqp_assignment` and `amqp_assignment_attached_port`. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine https://docs.gitguardian.com/releases/detection-engine/2025/05/20/changelog https://docs.gitguardian.com/releases/detection-engine/2025/05/20/changelog Tue, 20 May 2025 00:00:00 GMT New detectors added for Azure Entra ID tokens, Communication Services, App Configuration, and others • Adds detection for Azure Entra ID authentication tokens. • Adds detection for Azure Communication Services connection strings. • Adds detection for Azure DevOps Personal Access Tokens. • Adds detection for Laravel application encryption keys. • Adds detection for Azure App Configuration connection strings. • Adds detection for X AI API keys. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/gitguardian-detection-engine