5 / 2374

Secret scanning blocks Anthropic keys by default, adds Salesforce

TL;DR

Secret scanning now detects new secret types from Salesforce, Anthropic, and Cloudsmith, with the new Anthropic secret types blocked with push protection by default. New secret scanning partner Salesforce is… The post Secret scanning blocks Anthropic keys by default, adds Salesforce appeared first on The GitHub Blog.

Nauti's Take

First verify that Push Protection actually covers the Anthropic keys your repositories use, and check who can bypass it. The update improves the default safety net, but the short changelog leaves coverage for Salesforce and Cloudsmith unclear, so teams should confirm the supported secret types and the response path before relying on it.

Sources