Secret scanning adds detectors for Lovable, Supabase, and more
GitHub's secret scanning now detects additional secret types from Lovable Labs, Pydantic Services Inc., and Supabase, expanding coverage for partner integrations.
Secret scanning now detects new secret types from Lovable Labs, Pydantic Services Inc., and Supabase.
New secret scanning partner
The following provider joined the secret scanning partnership program. When one of their secrets is found in a public repository, GitHub forwards it to the partner so they can revoke or rotate the credential before it can be abused.
| Provider | Secret type |
|---|---|
| Lovable Labs | lovable_api_key |
Detectors added
Secret scanning now automatically detects the following new secret types in your repositories.
| Provider | Secret type |
|---|---|
| Lovable Labs | lovable_api_key |
| Pydantic Services Inc. | logfire_token |
| Pydantic Services Inc. | pydantic_ai_gateway_api_key |
| Supabase | supabase_oauth_access_token |
| Supabase | supabase_scoped_personal_access_token |
Partner secrets are automatically reported to the secret issuer when found in public repositories through the secret scanning partnership program. User secrets generate secret scanning alerts when found in public or private repositories.
Learn more
Learn more about secret scanning and see the full list of supported secrets in our documentation. Let us know what you think in the community discussion.
The post Secret scanning adds detectors for Lovable, Supabase, and more appeared first on The GitHub Blog.
Source: original entry ↗
More from GitHub
Follow GitHub to get its new changes in your feed and email digest.
Improved detection for withdrawn Dependabot alerts
Dependabot now provides improved detection for withdrawn alerts that are no longer valid due to advisory or vulnerability changes. This makes it easier to identify and manage alerts that have been removed.
Search and filter for budgets now available
The Budgets and alerts page in GitHub billing settings now displays all budgets in a single searchable and filterable list, making it easier to manage multiple budgets.
Code scanning AI Scan metrics in security overview
Organization and enterprise administrators can now view metrics showing AI Scan findings generated and resolved in the security overview dashboard, providing visibility into the impact of AI-powered code scanning on pull requests.