BriefsNewsGitHubAvailable now

GitHub secret scanning now blocks Anthropic API keys by default and adds Salesforce

GitHub added new secret types from Salesforce, Anthropic and Cloudsmith, and push protection now blocks two Anthropic key types by default.

Announced by GitHubPublished Checked

Summary

GitHub secret scanning now detects new secret types from Anthropic and Cloudsmith, and Salesforce joins as a partner. The two Anthropic key types are included in push protection by default, so commits containing them are blocked in repositories with secret scanning enabled, including free public ones.

What changed

  • Salesforce is now a secret scanning partner for one Marketing Cloud OAuth2 token type.
  • New detectors cover two Anthropic key types and one Cloudsmith API key type.
  • Anthropic service and user API keys are now blocked by push protection by default.
  • Free public repositories with secret scanning enabled get the new default blocking.

Availability

Available now

“Secret scanning now automatically detects the following new secret types in your repositories.”

Founder takeaway

If you keep Anthropic API keys near code, check that secret scanning is enabled on your repositories so push protection can block accidental commits. Nothing else needs to be set up for these two key types.

Sources

  1. GitHub — Secret scanning blocks Anthropic keys by default, adds Salesforce - GitHub ChangelogPublished · Checked

Researched and drafted with AI from the official sources above, then checked automatically before publishing. Spotted a mistake? Tell us.

Recent

More briefs

All briefs

  1. Published Tool

    Available now

    Google Research releases Deep Review, an agentic AI tool for checking documents

    Deep Review, an AI system that checks long technical documents, is now public, with two free reviews per week and an API for heavier use.

    Google Research · Announced

  2. Published News

    Available now

    GitHub's AI classifier for secret scanning cuts false alerts and scan time

    GitHub describes a fine-tuned ModernBERT model that sorts real credentials from lookalikes, replacing an LLM-based pipeline in secret scanning.

    GitHub · Announced

  3. Published Workflow

    Available now

    AWS adds SpaceXAI's Grok 4.7 AI model to Amazon Bedrock, with agent tests

    Grok 4.7 is on Amazon Bedrock, and AWS tested how its reasoning effort setting affects accuracy and token use in AI agents.

    AWS · Announced

One email, every Monday

Briefs are published here every weekday. Monday Heist is the weekly email: one useful AI workflow, the files to use it, and the catch. Free, and you can leave in one click.

One email. Every Monday.