Secret scanning blocks Anthropic keys by default, adds Salesforce

GitHub added Anthropic and Cloudsmith secret detectors to secret scanning and now blocks Anthropic API keys with push protection by default, while Salesforce became a secret scanning partner. The new detectors cover Anthropic's anthropic_service_api_key and anthropic_user_api_key plus Cloudsmith's cloudsmith_api_key, and the two Anthropic types are blocked by default in repositories with secret scanning enabled, including free public repositories. Salesforce's salesforce_marketing_cloud_api_oauth2_token is reported to the issuer when found in public repositories through the secret scanning partnership program.

Secret scanning blocks Anthropic keys by default, adds Salesforce Secret scanning now detects new secret types from Salesforce, Anthropic, and Cloudsmith, with the new Anthropic secret types blocked with push protection by default. New secret scanning partner new-secret-scanning-partner Salesforce is now a secret scanning partner. When a provider’s secret is found in a public repository, GitHub forwards it to the relevant partner so they can revoke or rotate the credential before it can be abused. | Provider | Secret type | |---|---| | Salesforce | salesforce marketing cloud api oauth2 token | Detectors added detectors-added Secret scanning now automatically detects the following new secret types in your repositories. | Provider | Secret type | |---|---| | Anthropic | anthropic service api key | | Anthropic | anthropic user api key | | Cloudsmith | cloudsmith api key | Partner secrets are automatically reported to the secret issuer when found in public repositories through the secret scanning partnership program https://docs.github.com/code-security/secret-scanning/secret-scanning-partnership-program/secret-scanning-partner-program . User secrets generate secret scanning alerts when found in public or private repositories. Push protection defaults expanded push-protection-defaults-expanded The following detectors are now included in push protection by default. Repositories with secret scanning enabled, including free public repositories, will have commits containing these secrets automatically blocked. | Provider | Secret type | |---|---| | Anthropic | anthropic service api key | | Anthropic | anthropic user api key | Learn more learn-more Learn more about secret scanning https://docs.github.com/code-security/secret-scanning/introduction/about-secret-scanning and see the full list of supported secrets https://docs.github.com/code-security/secret-scanning/introduction/supported-secret-scanning-patterns in our documentation. Let us know what you think in the community discussion https://gh.io/community-secret-scanning .