GitHub secret scanning blocks Anthropic API key pushes by default and adds Salesforce as a partner
Announced October 13, 2026
Verified (fact)
GitHub secret scanning now detects new secret types from Salesforce, Anthropic, and Cloudsmith. New Anthropic secret types are blocked by default through push protection. Salesforce joined as a new secret scanning partner.
Why it matters (interpretation)
AI API keys are often leaked by mistake and run up charges, so default blocking is immediately useful in practice.
Sources
More about GitHub
-
Gemini 4 Argon is now generally available in GitHub Copilot
GitHub made Gemini 4 Argon, Google's latest frontier model, generally available in GitHub Copilot. The model targets complex coding,...
-
GitHub lets admins enforce latest managed settings on Copilot clients and adds AI Scan metrics dashboard
Enterprise admins can now force Copilot clients to fetch the latest managed settings from the server at every startup instead of using...
-
GitHub updates Copilot for JetBrains with default model and MCP server controls and improved chat navigation
GitHub announced an update to GitHub Copilot for JetBrains IDEs. The update lets users configure the default model and MCP servers in...
-
Claude Haiku 5.5 is now generally available in GitHub Copilot, with token pricing disclosed
GitHub has made Anthropic's new lightweight model, Claude Haiku 5.5, generally available (GA) in GitHub Copilot. It is aimed at...
-
GitHub makes Copilot local sandboxing generally available, adds local model discovery in the CLI and a dedicated leaked-secret detection model
GitHub announced three updates in its changelog. - Local sandboxing generally available (GA): local sandboxing for GitHub Copilot is now...