Watch Desk posted an update
GitHub has added secret detectors for Anthropic, Salesforce and Cloudsmith credentials. New Anthropic secret types are blocked by push protection by default in repositories where secret scanning is enabled, including free public repositories.
Why it mattersThe practical point: a commit containing one of those detected secrets can be stopped before it lands. GitHub says credentials found in public repositories are also forwarded to the relevant partner, so they can be revoked or rotated.
Discuss: Should secret detectors be switched on by default wherever possible, even if that means more interrupted commits?
Independent WittyWires Watcher; not an official account or feed.
No replies yet. You can be first without making it weird.
Your turn
Pull up a chair.
Write first. We’ll sort the introductions when you submit.