From 400953a9076a7977bc94b7a2eb0545e37fa25354 Mon Sep 17 00:00:00 2001 From: Daniel Dunn Date: Mon, 1 Dec 2025 13:11:26 -0600 Subject: [PATCH] Refactor Secret Scanning pattern docs (#58633) Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --- .github/workflows/sync-secret-scanning.yml | 2 +- src/github-apps/scripts/sync.ts | 4 +- .../{ => pattern-docs/fpt}/public-docs.yml | 0 .../data/pattern-docs/ghec/public-docs.yml | 6358 +++++++++++++++++ .../pattern-docs/ghes-3.14/public-docs.yml | 3447 +++++++++ .../pattern-docs/ghes-3.15/public-docs.yml | 3356 +++++++++ .../pattern-docs/ghes-3.16/public-docs.yml | 3707 ++++++++++ .../pattern-docs/ghes-3.17/public-docs.yml | 4007 +++++++++++ .../pattern-docs/ghes-3.18/public-docs.yml | 4292 +++++++++++ .../pattern-docs/ghes-3.19/public-docs.yml | 5722 +++++++++++++++ .../data/public-docs-schema.ts | 2 - .../middleware/secret-scanning.ts | 20 +- src/secret-scanning/scripts/sync.ts | 71 +- src/workflows/git-utils.ts | 4 +- 14 files changed, 30939 insertions(+), 53 deletions(-) rename src/secret-scanning/data/{ => pattern-docs/fpt}/public-docs.yml (100%) create mode 100644 src/secret-scanning/data/pattern-docs/ghec/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.14/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.15/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.16/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.17/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.18/public-docs.yml create mode 100644 src/secret-scanning/data/pattern-docs/ghes-3.19/public-docs.yml diff --git a/.github/workflows/sync-secret-scanning.yml b/.github/workflows/sync-secret-scanning.yml index b8f62db784..e83f1d5d95 100644 --- a/.github/workflows/sync-secret-scanning.yml +++ b/.github/workflows/sync-secret-scanning.yml @@ -53,7 +53,7 @@ jobs: git config --global user.name "docs-bot" git config --global user.email "77750099+docs-bot@users.noreply.github.com" - branchname=sync-secret-scanning-${{ steps.secret-scanning-sync.outputs.sha }} + branchname=sync-secret-scanning-`date +%Y%m%d%H%M%S` remotesha=$(git ls-remote --heads origin $branchname) if [ -n "$remotesha" ]; then diff --git a/src/github-apps/scripts/sync.ts b/src/github-apps/scripts/sync.ts index c7ef4d7b26..889fdbabb1 100755 --- a/src/github-apps/scripts/sync.ts +++ b/src/github-apps/scripts/sync.ts @@ -579,7 +579,9 @@ async function getProgActorResourceContent({ if (gitHubSourceDirectory) { files = await getProgActorContentFromDisk(gitHubSourceDirectory) } else { - files = await getDirectoryContents(owner!, repo!, branch!, resourcePath!) + files = (await getDirectoryContents(owner!, repo!, branch!, resourcePath!)).map( + (file) => file.content, + ) } // We need to format the file content into a single object. Each file diff --git a/src/secret-scanning/data/public-docs.yml b/src/secret-scanning/data/pattern-docs/fpt/public-docs.yml similarity index 100% rename from src/secret-scanning/data/public-docs.yml rename to src/secret-scanning/data/pattern-docs/fpt/public-docs.yml diff --git a/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml new file mode 100644 index 0000000000..52d3682afc --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghec/public-docs.yml @@ -0,0 +1,6358 @@ +- provider: 1Password + supportedSecret: 1Password Service Account Token + secretType: 1password_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aikido + supportedSecret: Aikido API Client Secret + secretType: aikido_api_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aikido + supportedSecret: Aikido CI Scanning Token + secretType: aikido_ci_scanning_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Airtable + supportedSecret: Airtable API Key + secretType: airtable_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Airtable + supportedSecret: Airtable Personal Access Token + secretType: airtable_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id,
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id,
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: Amazon AWS + supportedSecret: Amazon AWS API Key ID + secretType: aws_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: >- + aws_secret_access_key,
aws_session_token, +
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Admin API Key + secretType: anthropic_admin_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Actor Run API Token + secretType: apify_actor_run_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Actor Run Proxy Password + secretType: apify_actor_run_proxy_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify API Token + secretType: apify_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Integration API Token + secretType: apify_integration_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Proxy Password + secretType: apify_proxy_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify UI Token + secretType: apify_ui_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Webhook Dispatch API Token + secretType: apify_webhook_dispatch_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Asaas + supportedSecret: Asaas API Token + secretType: asaas_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure AI Services Key + secretType: azure_ai_services_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Anomaly Detector EE Key + secretType: azure_anomaly_detector_ee_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Anomaly Detector Key + secretType: azure_anomaly_detector_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Key + secretType: azure_app_configuration_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Azure + supportedSecret: Azure Cognitive Services Key + secretType: azure_cognitive_services_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Key + secretType: azure_communication_services_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Computer Vision Key + secretType: azure_computer_vision_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Content Moderator Key + secretType: azure_content_moderator_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Content Safety Key + secretType: azure_content_safety_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Azure + supportedSecret: Azure Custom Vision Prediction Key + secretType: azure_custom_vision_prediction_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Custom Vision Training Key + secretType: azure_custom_vision_training_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Event Grid Key Identifiable + secretType: azure_event_grid_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Face Key + secretType: azure_face_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Fluid Relay Key + secretType: azure_fluid_relay_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Form Recognizer Key + secretType: azure_form_recognizer_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Azure + supportedSecret: Azure Health Decision Support Key + secretType: azure_health_decision_support_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Health Insights Key + secretType: azure_health_insights_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Immersive Reader Key + secretType: azure_immersive_reader_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Internal All In One Key + secretType: azure_internal_all_in_one_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Knowledge Key + secretType: azure_knowledge_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Logic Apps URL + secretType: azure_logic_apps_url + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Luis Authoring Key + secretType: azure_luis_authoring_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Luis Key + secretType: azure_luis_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Maps Key + secretType: azure_maps_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Metrics Advisor Key + secretType: azure_metrics_advisor_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Mixed Reality Key + secretType: azure_mixed_reality_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Inference Key + secretType: azure_ml_inference_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Internal Service Principal Key + secretType: azure_ml_internal_service_principal_identifiable_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure OpenAI Key + secretType: azure_openai_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Azure + supportedSecret: Azure Personalizer Key + secretType: azure_personalizer_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure QnA Maker Key + secretType: azure_qna_maker_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure QnA Maker V2 Key + secretType: azure_qna_maker_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Quantum Key + secretType: azure_quantum_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Key + secretType: azure_signalr_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Speech Services Key + secretType: azure_speech_services_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Speech Translation Key + secretType: azure_speech_translation_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Internal Default CloudSA Key + secretType: azure_sql_internal_default_cloudsa_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Azure + supportedSecret: Azure Text Analytics Key + secretType: azure_text_analytics_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Text Translation Key + secretType: azure_text_translation_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Video Intelligence Key + secretType: azure_video_intelligence_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Web App Bot Key + secretType: azure_web_app_bot_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Web Pub Sub Key + secretType: azure_web_pub_sub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Microsoft Azure Entra ID Token + secretType: microsoft_azure_entra_id_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Personal Access Token + secretType: bitrise_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Workspace API Token + secretType: bitrise_workspace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Block Protocol + supportedSecret: Block Protocol API Key + secretType: block_protocol_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Brevo + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: Brevo + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Access Token + secretType: buildkite_agent_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Job Token + secretType: buildkite_agent_job_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Registration Token + secretType: buildkite_agent_registration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Cluster Queue Token + secretType: buildkite_cluster_queue_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Cluster Token + secretType: buildkite_cluster_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Packages Registry Token + secretType: buildkite_packages_registry_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Packages Temporary Token + secretType: buildkite_packages_temporary_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Portal Secret + secretType: buildkite_portal_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Portal Token + secretType: buildkite_portal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite User Access Token + secretType: buildkite_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cfx.re + supportedSecret: Cfx.re Server Key + secretType: cfxre_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cockroach Labs + supportedSecret: CockroachDB Cloud API Key + secretType: ccdb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Cohere + supportedSecret: Cohere API Key + secretType: cohere_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Web Token + secretType: contentful_web_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo Access Token + secretType: coveo_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo API Key + secretType: coveo_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Databento + supportedSecret: Databento API Key + secretType: databento_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks API Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Databricks + supportedSecret: Databricks Account Session Token + secretType: databricks_account_session_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Federated Account Session Token + secretType: databricks_federated_account_session_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks OAuth Code + secretType: databricks_oauth_code + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks OAuth Refresh Token + secretType: databricks_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks OAuth Secret Token + secretType: databricks_oauth_secret_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks OAuth Single Use Refresh Token Child + secretType: databricks_oauth_single_use_refresh_token_child + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks OAuth Single Use Refresh Token Parent + secretType: databricks_oauth_single_use_refresh_token_parent + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Scoped API Token + secretType: databricks_scoped_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Scoped Internal Token + secretType: databricks_scoped_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Token + secretType: databricks_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Workspace Session Token + secretType: databricks_workspace_session_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog RCM + secretType: datadog_rcm + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datastax + supportedSecret: Datastax AstraCS Tokens + secretType: datastax_astracs_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DeepSeek + supportedSecret: DeepSeek API Key + secretType: deepseek_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Docker + supportedSecret: Docker Organization Access Token + secretType: docker_organization_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Join Token + secretType: docker_swarm_join_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Unlock Key + secretType: docker_swarm_unlock_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id,
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id,
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Elastic + supportedSecret: Elastic Cloud API Key + secretType: elastic_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: false + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: >- + google_cloud_storage_access_key_secret, +
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: >- + google_cloud_storage_access_key_secret, +
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: GCP API Key Bound to a Service Account + secretType: google_gcp_api_key_bound_service_account + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Gemini API Key + secretType: google_gemini_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id,
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Groq + supportedSecret: Groq API Key + secretType: groq_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: GuardSquare + supportedSecret: GuardSquare AppSweep API Key + secretType: guardsquare_appsweep_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GuardSquare + supportedSecret: GuardSquare CLI Access Token + secretType: guardsquare_cli_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GuardSquare + supportedSecret: GuardSquare Maven Token + secretType: guardsquare_maven_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: hCaptcha + supportedSecret: hCaptcha Siteverify Secret + secretType: hcaptcha_siteverify_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Platform API OAuth2 Token + secretType: heroku_platform_api_oauth2_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Postgres Connection URL + secretType: heroku_postgres_connection_url + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot Private Apps User Token + secretType: hubspot_private_apps_user_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Hugging Face + supportedSecret: Hugging Face Organization API Token + secretType: hf_org_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hugging Face + supportedSecret: Hugging Face User Access Token + secretType: hf_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: true + isduplicate: true +- provider: IBM + supportedSecret: IBM Cloud IAM Key + secretType: ibm_cloud_iam_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Iterative + supportedSecret: DVC Studio Access Token + secretType: iterative_dvc_studio_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Langchain + supportedSecret: Langchain API Personal Key + secretType: langchain_api_personal_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Langchain + supportedSecret: Langchain API Server Key + secretType: langchain_api_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess OAuth Access Token + secretType: lichess_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess Personal Access Token + secretType: lichess_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LinkedIn + supportedSecret: LinkedIn Client Secret + secretType: linkedin_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id,
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend API Token + secretType: mailersend_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Password + secretType: mailersend_smtp_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Username + secretType: mailersend_smtp_username + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Microsoft + supportedSecret: Power Automate Webhook SAS + secretType: power_automate_webhook_sas + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Mistral AI + supportedSecret: Mistral AI API Key + secretType: mistral_ai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Database URI with credentials + secretType: mongodb_atlas_db_uri_with_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Service Account Secret + secretType: mongodb_atlas_service_account_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Access Key ID + secretType: navercloud_gov_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secret Key + secretType: navercloud_gov_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service + secretType: navercloud_gov_sts + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service Secret + secretType: navercloud_gov_sts_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Access Key ID + secretType: navercloud_pub_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secret Key + secretType: navercloud_pub_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service + secretType: navercloud_pub_sts + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service Secret + secretType: navercloud_pub_sts_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Neon + supportedSecret: Neon API Key + secretType: neon_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Neon + supportedSecret: Neon Connection URI + secretType: neon_connection_uri + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Netflix + supportedSecret: Netflix NetKey + secretType: netflix_netkey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion API Token + secretType: notion_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneSignal + supportedSecret: OneSignal Rich API Key + secretType: onesignal_rich_authentication_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: OpenRouter + supportedSecret: OpenRouter API Key + secretType: openrouter_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: OpenVSX + supportedSecret: OpenVSX Access Token + secretType: openvsx_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Openweather + supportedSecret: Openweather API Key + secretType: openweather_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Oracle + supportedSecret: Oracle API Key + secretType: oracle_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Paddle + supportedSecret: Paddle API Key + secretType: paddle_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Paddle + supportedSecret: Paddle Sandbox API Key + secretType: paddle_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pangea + supportedSecret: Pangea Token + secretType: pangea_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Perplexity + supportedSecret: Perplexity API Key + secretType: perplexity_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Pineapple Technologies Limited + supportedSecret: Pineapple Technologies Incident API Key + secretType: pineapple_technologies_incident_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pinecone + supportedSecret: Pinecone API Key + secretType: pinecone_api_key,
pinecone_environment + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Access Token + secretType: planning_center_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Application Secret + secretType: planning_center_oauth_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center Personal Access Token + secretType: planning_center_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id,
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Access Token + secretType: polar_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Authorization Code + secretType: polar_authorization_code + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Client Registration Token + secretType: polar_client_registration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Client Secret + secretType: polar_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Customer Session Token + secretType: polar_customer_session_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Personal Access Token + secretType: polar_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Refresh Token + secretType: polar_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar User Session Token + secretType: polar_user_session_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PostHog + supportedSecret: PostHog Feature Flags Secure API Key + secretType: posthog_feature_flags_secure_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PostHog + supportedSecret: PostHog Personal API Key + secretType: posthog_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Rainforest Pay + supportedSecret: Rainforest API Key + secretType: rainforest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Rainforest Pay + supportedSecret: Rainforest Sandbox API Key + secretType: rainforest_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client ID + secretType: ramp_client_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client Secret + secretType: ramp_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Access or Refresh Token + secretType: ramp_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Raycast + supportedSecret: Raycast Access Token + secretType: raycast_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.20' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: RunPod + supportedSecret: RunPod API Key + secretType: runpod_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce Access Token + secretType: salesforce_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce OAuth2 Consumer Key + secretType: salesforce_oauth2_consumer_key,
salesforce_oauth2_consumer_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce Refresh Token + secretType: salesforce_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Scalr + supportedSecret: Scalr API Token + secretType: scalr_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Integration Token + secretType: sentry_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Organization Token + secretType: sentry_organization_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Personal Token + secretType: sentry_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User App Auth Token + secretType: sentry_user_app_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopee + supportedSecret: Shopee Open Platform Partner Key + secretType: shopee_open_platform_partner_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens API Token + secretType: siemens_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens Code Token + secretType: siemens_code_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sindri + supportedSecret: Sindri API Key + secretType: sindri_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Snowflake + supportedSecret: Snowflake Programmatic Access Token + secretType: snowflake_programmatic_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token + secretType: sourcegraph_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Dotcom User Gateway Access Token + secretType: sourcegraph_dotcom_user_gateway + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token with Instance Identifier + secretType: sourcegraph_instance_identifier_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph License Key Token + secretType: sourcegraph_license_key_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Product Subscription Token + secretType: sourcegraph_product_subscription_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tailscale + supportedSecret: Tailscale API Key + secretType: tailscale_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Temporal + supportedSecret: Temporal Cloud API Key + secretType: temporal_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud International Access Token + secretType: tencent_cloud_intl_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat Pay Token + secretType: tencent_wechat_pay_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Thunderstore + supportedSecret: Thunderstore IO API Token + secretType: thunderstore_io_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: true + isduplicate: true +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Val Town + supportedSecret: Val Town API Token + secretType: val_town_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Weights & Biases + supportedSecret: Weights & Biases API Key + secretType: wandb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: xAI + supportedSecret: xAI API Key + secretType: xai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false +- provider: ZenHub + supportedSecret: ZenHub Personal API Key + secretType: zenhub_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.19' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: >- + {% ifversion ghes and ghes > 3.19 %}true{% elsif ghes %}false{% else + %}true{% endif %} + base64Supported: false + isduplicate: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.14/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.14/public-docs.yml new file mode 100644 index 0000000000..d075f3f825 --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.14/public-docs.yml @@ -0,0 +1,3447 @@ +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Google + supportedSecret: Google Cloud Private Key ID + secretType: google_cloud_private_key_id + versions: + fpt: '*' + ghec: '*' + ghes: <3.13 + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: IBM + supportedSecret: IBM Cloud IAM Key + secretType: ibm_cloud_iam_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: IBM + supportedSecret: IBM SoftLayer API Key + secretType: ibm_softlayer_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Sendinblue + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Sendinblue + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.15/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.15/public-docs.yml new file mode 100644 index 0000000000..8fffa54168 --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.15/public-docs.yml @@ -0,0 +1,3356 @@ +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Private Key ID + secretType: google_cloud_private_key_id + versions: + fpt: '*' + ghec: '*' + ghes: <3.13 + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM Cloud IAM Key + secretType: ibm_cloud_iam_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM SoftLayer API Key + secretType: ibm_softlayer_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.16/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.16/public-docs.yml new file mode 100644 index 0000000000..d92cce2afc --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.16/public-docs.yml @@ -0,0 +1,3707 @@ +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Admin API Key + secretType: anthropic_admin_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Asaas + supportedSecret: Asaas API Token + secretType: asaas_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure OpenAI Key + secretType: azure_openai_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Entra ID Token + secretType: microsoft_azure_entra_id_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cfx.re + supportedSecret: Cfx.re Server Key + secretType: cfxre_server_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo Access Token + secretType: coveoaccesstoken + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo API Key + secretType: coveoapikey + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Hugging Face + supportedSecret: Hugging Face Organization API Token + secretType: hf_org_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Hugging Face + supportedSecret: Hugging Face User Access Token + secretType: hf_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM Cloud IAM Key + secretType: ibm_cloud_iam_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM SoftLayer API Key + secretType: ibm_softlayer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Iterative + supportedSecret: DVC Studio Access Token + secretType: iterative_dvc_studio_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Database URI with credentials + secretType: mongodb_atlas_db_uri_with_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Netflix + supportedSecret: Netflix NetKey + secretType: netflix_netkey + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Access Token + secretType: polar_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Authorization Code + secretType: polar_authorization_code + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Client Registration Token + secretType: polar_client_registration_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polat Client Secret + secretType: polar_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Personal Access Token + secretType: polar_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Refresh Token + secretType: polar_refresh_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Scalr + supportedSecret: Scalr API Token + secretType: scalr_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Integration Token + secretType: sentry_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Org Auth Token + secretType: sentry_org_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User App Auth Token + secretType: sentry_user_app_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User Auth Token + secretType: sentry_user_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopee + supportedSecret: Shopee Open Platform Partner Key + secretType: shopee_open_platform_partner_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens API Token + secretType: siemens_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens Code Token + secretType: siemens_code_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sindri + supportedSecret: Sindri API Key + secretType: sindri_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Thunderstore + supportedSecret: Thunderstore IO API Token + secretType: thunderstore_io_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.15' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.17/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.17/public-docs.yml new file mode 100644 index 0000000000..777bb4ee14 --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.17/public-docs.yml @@ -0,0 +1,4007 @@ +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Admin API Key + secretType: anthropic_admin_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Asaas + supportedSecret: Asaas API Token + secretType: asaas_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure OpenAI Key + secretType: azure_openai_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Entra ID Token + secretType: microsoft_azure_entra_id_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cfx.re + supportedSecret: Cfx.re Server Key + secretType: cfxre_server_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Cockroach Labs + supportedSecret: CockroachDB Cloud API Key + secretType: ccdb_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo Access Token + secretType: coveo_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo API Key + secretType: coveo_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Databento + supportedSecret: Databento API Key + secretType: databento_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datastax + supportedSecret: Datastax AstraCS Tokens + secretType: datastax_astracs_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: GCP API Key Bound to a Service Account + secretType: google_gcp_api_key_bound_service_account + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot Private Apps User Token + secretType: hubspot_private_apps_user_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Hugging Face + supportedSecret: Hugging Face Organization API Token + secretType: hf_org_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Hugging Face + supportedSecret: Hugging Face User Access Token + secretType: hf_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM Cloud IAM Key + secretType: ibm_cloud_iam_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: IBM + supportedSecret: IBM SoftLayer API Key + secretType: ibm_softlayer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Iterative + supportedSecret: DVC Studio Access Token + secretType: iterative_dvc_studio_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess OAuth Access Token + secretType: lichess_oauth_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess Personal Access Token + secretType: lichess_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LinkedIn + supportedSecret: LinkedIn Client Secret + secretType: linkedin_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend API Token + secretType: mailersend_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Password + secretType: mailersend_smtp_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Username + secretType: mailersend_smtp_username + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Database URI with credentials + secretType: mongodb_atlas_db_uri_with_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Neon + supportedSecret: Neon API Key + secretType: neon_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Neon + supportedSecret: Neon Connection URI + secretType: neon_connection_uri + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Netflix + supportedSecret: Netflix NetKey + secretType: netflix_netkey + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: OpenRouter + supportedSecret: OpenRouter API Key + secretType: openrouter_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oracle + supportedSecret: Oracle API Key + secretType: oracle_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Access Token + secretType: planning_center_oauth_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Application Secret + secretType: planning_center_oauth_app_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center Personal Access Token + secretType: planning_center_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Access Token + secretType: polar_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Authorization Code + secretType: polar_authorization_code + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Client Registration Token + secretType: polar_client_registration_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Client Secret + secretType: polar_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Personal Access Token + secretType: polar_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Refresh Token + secretType: polar_refresh_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client ID + secretType: ramp_client_id + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client Secret + secretType: ramp_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Access or Refresh Token + secretType: ramp_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Scalr + supportedSecret: Scalr API Token + secretType: scalr_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sendinblue + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Integration Token + secretType: sentry_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Org Auth Token + secretType: sentry_org_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User App Auth Token + secretType: sentry_user_app_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User Auth Token + secretType: sentry_user_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopee + supportedSecret: Shopee Open Platform Partner Key + secretType: shopee_open_platform_partner_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens API Token + secretType: siemens_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens Code Token + secretType: siemens_code_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sindri + supportedSecret: Sindri API Key + secretType: sindri_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token + secretType: sourcegraph_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Dotcom User Gateway Access Token + secretType: sourcegraph_dotcom_user_gateway + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token with Instance Identifier + secretType: sourcegraph_instance_identifier_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph License Key Token + secretType: sourcegraph_license_key_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Product Subscription Token + secretType: sourcegraph_product_subscription_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Tailscale + supportedSecret: Tailscale API Key + secretType: tailscale_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Thunderstore + supportedSecret: Thunderstore IO API Token + secretType: thunderstore_io_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.18/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.18/public-docs.yml new file mode 100644 index 0000000000..90f7e3e273 --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.18/public-docs.yml @@ -0,0 +1,4292 @@ +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Admin API Key + secretType: anthropic_admin_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Asaas + supportedSecret: Asaas API Token + secretType: asaas_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure OpenAI Key + secretType: azure_openai_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Entra ID Token + secretType: microsoft_azure_entra_id_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Personal Access Token + secretType: bitrise_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Workspace API Token + secretType: bitrise_workspace_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Block Protocol + supportedSecret: Block Protocol API Key + secretType: block_protocol_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Brevo + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Brevo + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite User Access Token + secretType: buildkite_user_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Cfx.re + supportedSecret: Cfx.re Server Key + secretType: cfxre_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Cockroach Labs + supportedSecret: CockroachDB Cloud API Key + secretType: ccdb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo Access Token + secretType: coveo_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo API Key + secretType: coveo_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Databento + supportedSecret: Databento API Key + secretType: databento_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog RCM + secretType: datadog_rcm + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Datastax + supportedSecret: Datastax AstraCS Tokens + secretType: datastax_astracs_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Docker + supportedSecret: Docker Organization Access Token + secretType: docker_organization_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Join Token + secretType: docker_swarm_join_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Unlock Key + secretType: docker_swarm_unlock_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: GCP API Key Bound to a Service Account + secretType: google_gcp_api_key_bound_service_account + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Groq + supportedSecret: Groq API Key + secretType: groq_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Platform API OAuth2 Token + secretType: heroku_platform_api_oauth2_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Postgres Connection URL + secretType: heroku_postgres_connection_url + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot Private Apps User Token + secretType: hubspot_private_apps_user_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Hugging Face + supportedSecret: Hugging Face Organization API Token + secretType: hf_org_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Hugging Face + supportedSecret: Hugging Face User Access Token + secretType: hf_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Iterative + supportedSecret: DVC Studio Access Token + secretType: iterative_dvc_studio_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess OAuth Access Token + secretType: lichess_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess Personal Access Token + secretType: lichess_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LinkedIn + supportedSecret: LinkedIn Client Secret + secretType: linkedin_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend API Token + secretType: mailersend_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Password + secretType: mailersend_smtp_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Username + secretType: mailersend_smtp_username + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Database URI with credentials + secretType: mongodb_atlas_db_uri_with_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Service Account Secret + secretType: mongodb_atlas_service_account_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Access Key ID + secretType: navercloud_gov_access_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secret Key + secretType: navercloud_gov_access_key_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service + secretType: navercloud_gov_sts + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service Secret + secretType: navercloud_gov_sts_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Access Key ID + secretType: navercloud_pub_access_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secret Key + secretType: navercloud_pub_access_key_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service + secretType: navercloud_pub_sts + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service Secret + secretType: navercloud_pub_sts_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Neon + supportedSecret: Neon API Key + secretType: neon_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Neon + supportedSecret: Neon Connection URI + secretType: neon_connection_uri + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Netflix + supportedSecret: Netflix NetKey + secretType: netflix_netkey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: OpenRouter + supportedSecret: OpenRouter API Key + secretType: openrouter_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Oracle + supportedSecret: Oracle API Key + secretType: oracle_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pangea + supportedSecret: Pangea Token + secretType: pangea_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Access Token + secretType: planning_center_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Application Secret + secretType: planning_center_oauth_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center Personal Access Token + secretType: planning_center_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Access Token + secretType: polar_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Authorization Code + secretType: polar_authorization_code + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Client Registration Token + secretType: polar_client_registration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Client Secret + secretType: polar_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Personal Access Token + secretType: polar_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Refresh Token + secretType: polar_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client ID + secretType: ramp_client_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client Secret + secretType: ramp_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Access or Refresh Token + secretType: ramp_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: RunPod + supportedSecret: RunPod API Key + secretType: runpod_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce OAuth2 Consumer Key + secretType: salesforce_oauth2_consumer_key
salesforce_oauth2_consumer_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce Refresh Token + secretType: salesforce_refresh_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Scalr + supportedSecret: Scalr API Token + secretType: scalr_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Integration Token + secretType: sentry_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Org Auth Token + secretType: sentry_org_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User App Auth Token + secretType: sentry_user_app_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User Auth Token + secretType: sentry_user_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopee + supportedSecret: Shopee Open Platform Partner Key + secretType: shopee_open_platform_partner_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens API Token + secretType: siemens_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens Code Token + secretType: siemens_code_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sindri + supportedSecret: Sindri API Key + secretType: sindri_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token + secretType: sourcegraph_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Dotcom User Gateway Access Token + secretType: sourcegraph_dotcom_user_gateway + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token with Instance Identifier + secretType: sourcegraph_instance_identifier_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph License Key Token + secretType: sourcegraph_license_key_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Product Subscription Token + secretType: sourcegraph_product_subscription_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tailscale + supportedSecret: Tailscale API Key + secretType: tailscale_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Thunderstore + supportedSecret: Thunderstore IO API Token + secretType: thunderstore_io_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: true +- provider: xAI + supportedSecret: xAI API Key + secretType: xai_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + isduplicate: false diff --git a/src/secret-scanning/data/pattern-docs/ghes-3.19/public-docs.yml b/src/secret-scanning/data/pattern-docs/ghes-3.19/public-docs.yml new file mode 100644 index 0000000000..fc62087c1a --- /dev/null +++ b/src/secret-scanning/data/pattern-docs/ghes-3.19/public-docs.yml @@ -0,0 +1,5722 @@ +- provider: 1Password + supportedSecret: 1Password Service Account Token + secretType: 1password_service_account_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adafruit + supportedSecret: Adafruit IO Key + secretType: adafruit_io_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Client Secret + secretType: adobe_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Device Token + secretType: adobe_device_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe PAC Token + secretType: adobe_pac_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Refresh Token + secretType: adobe_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Service Token + secretType: adobe_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Adobe + supportedSecret: Adobe Short-Lived Access Token + secretType: adobe_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aikido + supportedSecret: Aikido API Client Secret + secretType: aikido_api_client_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aikido + supportedSecret: Aikido CI Scanning Token + secretType: aikido_ci_scanning_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Airtable + supportedSecret: Airtable API Key + secretType: airtable_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Airtable + supportedSecret: Airtable Personal Access Token + secretType: airtable_personal_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Auth Token + secretType: aiven_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Aiven + supportedSecret: Aiven Service Password + secretType: aiven_service_password + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Alibaba + supportedSecret: Alibaba Cloud AccessKey ID + secretType: alibaba_cloud_access_key_id
alibaba_cloud_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Access Key ID + secretType: aws_access_key_id
aws_secret_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS API Key ID + secretType: aws_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Amazon AWS + supportedSecret: Amazon AWS Session Token + secretType: aws_secret_access_key
aws_session_token
aws_temporary_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Admin API Key + secretType: anthropic_admin_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic API Key + secretType: anthropic_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Anthropic + supportedSecret: Anthropic Session ID + secretType: anthropic_session_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Actor Run API Token + secretType: apify_actor_run_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Actor Run Proxy Password + secretType: apify_actor_run_proxy_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify API Token + secretType: apify_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Integration API Token + secretType: apify_integration_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Proxy Password + secretType: apify_proxy_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify UI Token + secretType: apify_ui_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Apify + supportedSecret: Apify Webhook Dispatch API Token + secretType: apify_webhook_dispatch_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Asaas + supportedSecret: Asaas API Token + secretType: asaas_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Legacy Format Personal Access Token + secretType: asana_legacy_format_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Asana + supportedSecret: Asana Personal Access Token + secretType: asana_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian API Token + secretType: atlassian_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Atlassian + supportedSecret: Atlassian JSON Web Token + secretType: atlassian_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Authress + supportedSecret: Authress Service Client Access Key + secretType: authress_service_client_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Active Directory Application Secret + secretType: azure_active_directory_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Active Directory User Credential + secretType: azure_active_directory_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure AI Services Key + secretType: azure_ai_services_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Anomaly Detector EE Key + secretType: azure_anomaly_detector_ee_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Anomaly Detector Key + secretType: azure_anomaly_detector_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Direct Management Key + secretType: azure_apim_direct_management_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Gateway Key + secretType: azure_apim_gateway_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Repository Key + secretType: azure_apim_repository_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Apim Subscription Key + secretType: azure_apim_subscription_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Connection String + secretType: azure_app_configuration_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure App Configuration Key + secretType: azure_app_configuration_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Batch Key Identifiable + secretType: azure_batch_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cache for Redis Access Key + secretType: azure_cache_for_redis_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cognitive Services Key + secretType: azure_cognitive_services_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Connection String + secretType: azure_communication_services_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Communication Services Key + secretType: azure_communication_services_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Computer Vision Key + secretType: azure_computer_vision_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Registry Key Identifiable + secretType: azure_container_registry_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Content Moderator Key + secretType: azure_content_moderator_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Content Safety Key + secretType: azure_content_safety_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Cosmosdb Key Identifiable + secretType: azure_cosmosdb_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Custom Vision Prediction Key + secretType: azure_custom_vision_prediction_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Custom Vision Training Key + secretType: azure_custom_vision_training_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure DevOps Personal Access Token + secretType: azure_devops_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Event Grid Key Identifiable + secretType: azure_event_grid_key_identifiable + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Event Hub Key Identifiable + secretType: azure_event_hub_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Face Key + secretType: azure_face_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Fluid Relay Key + secretType: azure_fluid_relay_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Form Recognizer Key + secretType: azure_form_recognizer_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Function Key + secretType: azure_function_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Health Decision Support Key + secretType: azure_health_decision_support_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Health Insights Key + secretType: azure_health_insights_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Immersive Reader Key + secretType: azure_immersive_reader_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Internal All In One Key + secretType: azure_internal_all_in_one_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Connection String + secretType: azure_iot_device_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Key + secretType: azure_iot_device_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Device Provisioning Key + secretType: azure_iot_device_provisioning_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Connection String + secretType: azure_iot_hub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Hub Key + secretType: azure_iot_hub_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure IoT Provisioning Connection String + secretType: azure_iot_provisioning_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Knowledge Key + secretType: azure_knowledge_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Luis Authoring Key + secretType: azure_luis_authoring_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Luis Key + secretType: azure_luis_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Service Management Certificate + secretType: azure_management_certificate + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Maps Key + secretType: azure_maps_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Metrics Advisor Key + secretType: azure_metrics_advisor_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Mixed Reality Key + secretType: azure_mixed_reality_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Inference Key + secretType: azure_ml_inference_identifiable_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Internal Service Principal Key + secretType: azure_ml_internal_service_principal_identifiable_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure ML Studio (classic) Web Service Key + secretType: azure_ml_web_service_classic_identifiable_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure OpenAI Key + secretType: azure_openai_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Personalizer Key + secretType: azure_personalizer_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure QnA Maker Key + secretType: azure_qna_maker_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure QnA Maker V2 Key + secretType: azure_qna_maker_v2_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Quantum Key + secretType: azure_quantum_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Relay Key Identifiable + secretType: azure_relay_key_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SAS Token + secretType: azure_sas_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Admin Key + secretType: azure_search_admin_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Search Query Key + secretType: azure_search_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Service Bus Key Identifiable + secretType: azure_service_bus_identifiable + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Connection String + secretType: azure_signalr_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SignalR Key + secretType: azure_signalr_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Speech Services Key + secretType: azure_speech_services_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Speech Translation Key + secretType: azure_speech_translation_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Connection String + secretType: azure_sql_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL Internal Default CloudSA Key + secretType: azure_sql_internal_default_cloudsa_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure SQL password + secretType: azure_sql_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Storage Account Access Key + secretType: azure_storage_account_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Azure Text Analytics Key + secretType: azure_text_analytics_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Text Translation Key + secretType: azure_text_translation_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Video Intelligence Key + secretType: azure_video_intelligence_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Azure Web App Bot Key + secretType: azure_web_app_bot_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Web Pub Sub Connection String + secretType: azure_web_pub_sub_connection_string + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Azure Web Pub Sub Key + secretType: azure_web_pub_sub_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Azure + supportedSecret: Microsoft Azure Entra ID Token + secretType: microsoft_azure_entra_id_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Azure + supportedSecret: Microsoft Corporate Network User Credential + secretType: microsoft_corporate_network_user_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Baidu + supportedSecret: Baidu Cloud API Access Key + secretType: baiducloud_api_accesskey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Beamer + supportedSecret: Beamer API Key + secretType: beamer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Bitbucket + supportedSecret: Bitbucket Server Personal Access Token + secretType: bitbucket_server_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Personal Access Token + secretType: bitrise_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Bitrise + supportedSecret: Bitrise Workspace API Token + secretType: bitrise_workspace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Block Protocol + supportedSecret: Block Protocol API Key + secretType: block_protocol_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Brevo + supportedSecret: Sendinblue API Key + secretType: sendinblue_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Brevo + supportedSecret: Sendinblue SMTP Key + secretType: sendinblue_smtp_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Access Token + secretType: buildkite_agent_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Job Token + secretType: buildkite_agent_job_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Agent Registration Token + secretType: buildkite_agent_registration_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Cluster Queue Token + secretType: buildkite_cluster_queue_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Cluster Token + secretType: buildkite_cluster_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Packages Registry Token + secretType: buildkite_packages_registry_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Packages Temporary Token + secretType: buildkite_packages_temporary_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Portal Secret + secretType: buildkite_portal_secret + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite Portal Token + secretType: buildkite_portal_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Buildkite + supportedSecret: Buildkite User Access Token + secretType: buildkite_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canadian Digital Service + supportedSecret: Canadian Digital Service Notify API Key + secretType: cds_canada_notify_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva App Secret + secretType: canva_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Connect API Secret + secretType: canva_connect_api_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Canva + supportedSecret: Canva Secret + secretType: canva_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cashfree + supportedSecret: Cashfree API Key + secretType: cashfree_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cfx.re + supportedSecret: Cfx.re Server Key + secretType: cfxre_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Checkout.com + supportedSecret: Checkout.com Production Secret Key + secretType: checkout_production_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Checkout.com + supportedSecret: Checkout.com Test Secret Key + secretType: checkout_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Chief Tools + supportedSecret: Chief Tools Token + secretType: chief_tools_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Bot API Token + secretType: circleci_bot_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Personal Access Token + secretType: circleci_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Project Access Token + secretType: circleci_project_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CircleCI + supportedSecret: CircleCI Release API Token + secretType: circleci_release_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Clojars + supportedSecret: Clojars Deploy Token + secretType: clojars_deploy_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: CloudBees + supportedSecret: CloudBees CodeShip Credential + secretType: codeship_credential + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Cockroach Labs + supportedSecret: CockroachDB Cloud API Key + secretType: ccdb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Cohere + supportedSecret: Cohere API Key + secretType: cohere_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Personal Access Token + secretType: contentful_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Contentful + supportedSecret: Contentful Web Token + secretType: contentful_web_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Contributed Systems + supportedSecret: Contributed Systems Credentials + secretType: contributed_systems_credentials + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo Access Token + secretType: coveo_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Coveo + supportedSecret: Coveo API Key + secretType: coveo_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: crates.io + supportedSecret: Crates.io API Token + secretType: cratesio_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Databento + supportedSecret: Databento API Key + secretType: databento_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Databricks + supportedSecret: Databricks Access Token + secretType: databricks_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog API Key + secretType: datadog_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog Application Key + secretType: datadog_app_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datadog + supportedSecret: Datadog RCM + secretType: datadog_rcm + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Datastax + supportedSecret: Datastax AstraCS Tokens + secretType: datastax_astracs_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DeepSeek + supportedSecret: DeepSeek API Key + secretType: deepseek_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Defined Networking + supportedSecret: Defined Networking Managed Nebula API Key + secretType: defined_networking_nebula_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Client API Key + secretType: devcycle_client_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Mobile API Key + secretType: devcycle_mobile_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DevCycle + supportedSecret: DevCycle Server API Key + secretType: devcycle_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean OAuth Token + secretType: digitalocean_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Personal Access Token + secretType: digitalocean_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean Refresh Token + secretType: digitalocean_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: DigitalOcean + supportedSecret: DigitalOcean System Token + secretType: digitalocean_system_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Discord + supportedSecret: Discord Bot Token + secretType: discord_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Docker + supportedSecret: Docker Organization Access Token + secretType: docker_organization_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Personal Access Token + secretType: docker_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Join Token + secretType: docker_swarm_join_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Docker + supportedSecret: Docker Swarm Unlock Key + secretType: docker_swarm_unlock_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Audit Token + secretType: doppler_audit_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler CLI Token + secretType: doppler_cli_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Personal Token + secretType: doppler_personal_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler SCIM Token + secretType: doppler_scim_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Account Token + secretType: doppler_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Doppler + supportedSecret: Doppler Service Token + secretType: doppler_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Access Token + secretType: dropbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Dropbox + supportedSecret: Dropbox Short-Lived Access Token + secretType: dropbox_short_lived_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Live Access Token + secretType: duffel_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Duffel + supportedSecret: Duffel Test Access Token + secretType: duffel_test_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace API Token + secretType: dynatrace_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Dynatrace + supportedSecret: Dynatrace Internal Token + secretType: dynatrace_internal_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Production API Key + secretType: easypost_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: EasyPost + supportedSecret: EasyPost Test API Key + secretType: easypost_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Production Client ID (App ID) + secretType: ebay_production_client_id
ebay_production_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: eBay + supportedSecret: eBay Sandbox Client ID (App ID) + secretType: ebay_sandbox_client_id
ebay_sandbox_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Elastic + supportedSecret: Elastic Cloud API Key + secretType: elastic_cloud_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Facebook + supportedSecret: Facebook Access Token + secretType: facebook_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Fastly + supportedSecret: Fastly API Token + secretType: fastly_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Figma + supportedSecret: Figma Personal Access Token + secretType: figma_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Finicity + supportedSecret: Finicity App Key + secretType: finicity_app_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Firebase + supportedSecret: Firebase Cloud Messaging Server Key + secretType: firebase_cloud_messaging_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Live API Secret Key + secretType: flutterwave_live_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Flutterwave + supportedSecret: Flutterwave Test API Secret Key + secretType: flutterwave_test_api_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io Developer Token + secretType: frameio_developer_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Frame.io + supportedSecret: Frame.io JSON Web Token + secretType: frameio_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: FullStory + supportedSecret: FullStory API Key + secretType: fullstory_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: GitHub + supportedSecret: GitHub App Installation Access Token + secretType: github_app_installation_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub OAuth Access Token + secretType: github_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Personal Access Token + secretType: github_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub Refresh Token + secretType: github_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: true + isduplicate: true +- provider: GitHub + supportedSecret: GitHub SSH Private Key + secretType: github_ssh_private_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: true + base64Supported: false + isduplicate: false +- provider: GitHub + supportedSecret: GitHub Test Token + secretType: github_test_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GitHub Secret Scanning + supportedSecret: GitHub Secret Scanning + secretType: secret_scanning_sample_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GitLab + supportedSecret: GitLab Access Token + secretType: gitlab_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Live Access Token + secretType: gocardless_live_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: GoCardless + supportedSecret: GoCardless Sandbox Access Token + secretType: gocardless_sandbox_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google API Key + secretType: google_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Service Account Credentials + secretType: google_cloud_service_account_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.13' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage Service Account Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_service_account_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Cloud Storage User Access Key ID + secretType: google_cloud_storage_access_key_secret
google_cloud_storage_user_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: GCP API Key Bound to a Service Account + secretType: google_gcp_api_key_bound_service_account + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google Gemini API Key + secretType: google_gemini_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Access Token + secretType: google_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Client ID + secretType: google_oauth_client_id
google_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Google + supportedSecret: Google OAuth Refresh Token + secretType: google_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Key + secretType: grafana_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Cloud API Token + secretType: grafana_cloud_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project API Key + secretType: grafana_project_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Grafana + supportedSecret: Grafana Project Service Account Token + secretType: grafana_project_service_account_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Groq + supportedSecret: Groq API Key + secretType: groq_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: GuardSquare + supportedSecret: GuardSquare AppSweep API Key + secretType: guardsquare_appsweep_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GuardSquare + supportedSecret: GuardSquare CLI Access Token + secretType: guardsquare_cli_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: GuardSquare + supportedSecret: GuardSquare Maven Token + secretType: guardsquare_maven_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Batch Token + secretType: hashicorp_vault_batch_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: HashiCorp + supportedSecret: HashiCorp Vault Root Service Token + secretType: hashicorp_vault_root_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HashiCorp + supportedSecret: HashiCorp Vault Service Token + secretType: hashicorp_vault_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: HashiCorp + supportedSecret: Terraform Cloud / Enterprise API Token + secretType: terraform_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: hCaptcha + supportedSecret: hCaptcha Siteverify Secret + secretType: hcaptcha_siteverify_secret + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Platform API OAuth2 Token + secretType: heroku_platform_api_oauth2_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Heroku + supportedSecret: Heroku Postgres Connection URL + secretType: heroku_postgres_connection_url + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Live Key + secretType: highnote_rk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote RK Test Key + secretType: highnote_rk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Live Key + secretType: highnote_sk_live_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Highnote + supportedSecret: Highnote SK Test Key + secretType: highnote_sk_test_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP Bearer + secretType: hop_bearer + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PAT + secretType: hop_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: HOP + supportedSecret: HOP PTK + secretType: hop_ptk + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot API Key + secretType: hubspot_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Hubspot + supportedSecret: Hubspot Personal Access Key + secretType: hubspot_personal_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot Private Apps User Token + secretType: hubspot_private_apps_user_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hubspot + supportedSecret: Hubspot SMTP Credential + secretType: hubspot_smtp_credential + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Hugging Face + supportedSecret: Hugging Face Organization API Token + secretType: hf_org_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Hugging Face + supportedSecret: Hugging Face User Access Token + secretType: hf_user_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Intercom + supportedSecret: Intercom Access Token + secretType: intercom_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Ionic + supportedSecret: Ionic Personal Access Token + secretType: ionic_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Ionic + supportedSecret: Ionic Refresh Token + secretType: ionic_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Iterative + supportedSecret: DVC Studio Access Token + secretType: iterative_dvc_studio_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Access Token + secretType: jfrog_platform_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform API Key + secretType: jfrog_platform_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: JFrog + supportedSecret: JFrog Platform Reference Token + secretType: jfrog_platform_reference_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Langchain + supportedSecret: Langchain API Personal Key + secretType: langchain_api_personal_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Langchain + supportedSecret: Langchain API Server Key + secretType: langchain_api_server_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LaunchDarkly + supportedSecret: LaunchDarkly API Token + secretType: launchdarkly_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess OAuth Access Token + secretType: lichess_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Lichess + supportedSecret: Lichess Personal Access Token + secretType: lichess_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Lightspeed + supportedSecret: Lightspeed Personal Access Token + secretType: lightspeed_xs_pat + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Linear + supportedSecret: Linear API Key + secretType: linear_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Linear + supportedSecret: Linear OAuth Access Token + secretType: linear_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LinkedIn + supportedSecret: LinkedIn Client Secret + secretType: linkedin_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Live API Key + secretType: lob_live_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Lob + supportedSecret: Lob Test API Key + secretType: lob_test_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Localstack + supportedSecret: Localstack API Key + secretType: localstack_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor Bearer Token + secretType: logicmonitor_bearer_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: LogicMonitor + supportedSecret: LogicMonitor LMv1 Access Key + secretType: logicmonitor_lmv1_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.8' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Login with Amazon + supportedSecret: Login with Amazon OAuth Client ID + secretType: amazon_oauth_client_id
amazon_oauth_client_secret
amazon_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mailchimp API Key + secretType: mailchimp_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Mailchimp + supportedSecret: Mandrill API Key + secretType: mandrill_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend API Token + secretType: mailersend_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Password + secretType: mailersend_smtp_password + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailersend + supportedSecret: Mailersend SMTP Username + secretType: mailersend_smtp_username + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mailgun + supportedSecret: Mailgun API Key + secretType: mailgun_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Mailgun + supportedSecret: Mailgun SMTP Credential + secretType: mailgun_smtp_credential + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Mapbox + supportedSecret: Mapbox Secret Access Token + secretType: mapbox_secret_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: MaxMind + supportedSecret: MaxMind License Key + secretType: maxmind_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Non-Production API Token + secretType: mercury_non_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Mercury + supportedSecret: Mercury Production API Token + secretType: mercury_production_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Mergify + supportedSecret: Mergify Application Key + secretType: mergify_application_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: MessageBird + supportedSecret: MessageBird API Key + secretType: messagebird_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Production Server Key + secretType: midtrans_production_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Midtrans + supportedSecret: Midtrans Sandbox Server Key + secretType: midtrans_sandbox_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Mistral AI + supportedSecret: Mistral AI API Key + secretType: mistral_ai_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Database URI with credentials + secretType: mongodb_atlas_db_uri_with_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: MongoDB + supportedSecret: MongoDB Atlas Service Account Secret + secretType: mongodb_atlas_service_account_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Access Key ID + secretType: navercloud_gov_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secret Key + secretType: navercloud_gov_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service + secretType: navercloud_gov_sts + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Gov Secure Token Service Secret + secretType: navercloud_gov_sts_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Access Key ID + secretType: navercloud_pub_access_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secret Key + secretType: navercloud_pub_access_key_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service + secretType: navercloud_pub_sts + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Naver Cloud + supportedSecret: Naver Cloud Secure Token Service Secret + secretType: navercloud_pub_sts_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Neon + supportedSecret: Neon API Key + secretType: neon_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Neon + supportedSecret: Neon Connection URI + secretType: neon_connection_uri + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Netflix + supportedSecret: Netflix NetKey + secretType: netflix_netkey + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Insights Query Key + secretType: new_relic_insights_query_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic License Key + secretType: new_relic_license_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic Personal API Key + secretType: new_relic_personal_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: New Relic + supportedSecret: New Relic REST API Key + secretType: new_relic_rest_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion API Token + secretType: notion_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion Integration Token + secretType: notion_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Notion + supportedSecret: Notion OAuth Client Secret + secretType: notion_oauth_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: npm + supportedSecret: npm Access Token + secretType: npm_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: NuGet + supportedSecret: NuGet API Key + secretType: nuget_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Octopus Deploy + supportedSecret: Octopus Deploy API Key + secretType: octopus_deploy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Oculus + supportedSecret: Oculus Access Token + secretType: oculus_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos API Token + secretType: onechronos_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding API Key + secretType: onechronos_eb_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Expressive Bidding Encryption Key + secretType: onechronos_eb_encryption_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos OAuth Token + secretType: onechronos_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: OneChronos + supportedSecret: OneChronos Refresh Token + secretType: onechronos_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.10' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Live API Token + secretType: onfido_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Onfido + supportedSecret: Onfido Sandbox API Token + secretType: onfido_sandbox_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: OpenAI + supportedSecret: OpenAI API Key + secretType: openai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: OpenRouter + supportedSecret: OpenRouter API Key + secretType: openrouter_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Openweather + supportedSecret: Openweather API Key + secretType: openweather_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Oracle + supportedSecret: Oracle API Key + secretType: oracle_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Orbit + supportedSecret: Orbit API Token + secretType: orbit_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Secret + secretType: pagerduty_oauth_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PagerDuty + supportedSecret: PagerDuty OAuth Token + secretType: pagerduty_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Palantir + supportedSecret: Palantir JSON Web Token + secretType: palantir_jwt + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pangea + supportedSecret: Pangea Token + secretType: pangea_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Perplexity + supportedSecret: Perplexity API Key + secretType: perplexity_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Production Api Key + secretType: persona_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Persona Identities + supportedSecret: Persona Sandbox Api Key + secretType: persona_sandbox_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Access Token + secretType: pinterest_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Pinterest + supportedSecret: Pinterest Refresh Token + secretType: pinterest_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.10' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Database Password + secretType: planetscale_database_password + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale OAuth Token + secretType: planetscale_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: PlanetScale + supportedSecret: PlanetScale Service Token + secretType: planetscale_service_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Access Token + secretType: planning_center_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center OAuth Application Secret + secretType: planning_center_oauth_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Planning Center + supportedSecret: Planning Center Personal Access Token + secretType: planning_center_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Plivo + supportedSecret: Plivo Auth ID + secretType: plivo_auth_id
plivo_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Access Token + secretType: polar_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Authorization Code + secretType: polar_authorization_code + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Client Registration Token + secretType: polar_client_registration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Client Secret + secretType: polar_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Customer Session Token + secretType: polar_customer_session_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Polar + supportedSecret: Polar Personal Access Token + secretType: polar_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar Refresh Token + secretType: polar_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Polar + supportedSecret: Polar User Session Token + secretType: polar_user_session_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Postman + supportedSecret: Postman API Key + secretType: postman_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Postman + supportedSecret: Postman Collection Key + secretType: postman_collection_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect Server API Key + secretType: prefect_server_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Prefect + supportedSecret: Prefect User API Key + secretType: prefect_user_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Consumer Key + secretType: proctorio_consumer_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Linkage Key + secretType: proctorio_linkage_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Registration Key + secretType: proctorio_registration_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Proctorio + supportedSecret: Proctorio Secret Key + secretType: proctorio_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Pulumi + supportedSecret: Pulumi Access Token + secretType: pulumi_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: PyPI + supportedSecret: PyPI API Token + secretType: pypi_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client ID + secretType: ramp_client_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Client Secret + secretType: ramp_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Ramp + supportedSecret: Ramp OAuth Access or Refresh Token + secretType: ramp_oauth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: ReadMe + supportedSecret: ReadMe API Key + secretType: readmeio_api_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: redirect.pizza + supportedSecret: redirect.pizza API Token + secretType: redirect_pizza_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Replicate + supportedSecret: Replicate API Token + secretType: replicate_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Rootly + supportedSecret: Rootly API Key + secretType: rootly_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: RubyGems + supportedSecret: RubyGems API Key + secretType: rubygems_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: RunPod + supportedSecret: RunPod API Key + secretType: runpod_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce Access Token + secretType: salesforce_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce OAuth2 Consumer Key + secretType: salesforce_oauth2_consumer_key
salesforce_oauth2_consumer_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Salesforce + supportedSecret: Salesforce Refresh Token + secretType: salesforce_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara API Token + secretType: samsara_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Samsara + supportedSecret: Samsara OAuth Access Token + secretType: samsara_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Scalr + supportedSecret: Scalr API Token + secretType: scalr_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Segment + supportedSecret: Segment Public API Token + secretType: segment_public_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: SendGrid + supportedSecret: SendGrid API Key + secretType: sendgrid_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Integration Token + secretType: sentry_integration_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry Org Auth Token + secretType: sentry_org_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User App Auth Token + secretType: sentry_user_app_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sentry + supportedSecret: Sentry User Auth Token + secretType: sentry_user_auth_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Live API Token + secretType: shippo_live_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shippo + supportedSecret: Shippo Test API Token + secretType: shippo_test_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopee + supportedSecret: Shopee Open Platform Partner Key + secretType: shopee_open_platform_partner_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Access Token + secretType: shopify_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Credentials + secretType: shopify_app_client_credentials + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Client Secret + secretType: shopify_app_client_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify App Shared Secret + secretType: shopify_app_shared_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Custom App Access Token + secretType: shopify_custom_app_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Marketplace Token + secretType: shopify_marketplace_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Merchant Token + secretType: shopify_merchant_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Partner API Token + secretType: shopify_partner_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.4' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Shopify + supportedSecret: Shopify Private App Password + secretType: shopify_private_app_password + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens API Token + secretType: siemens_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Siemens + supportedSecret: Siemens Code Token + secretType: siemens_code_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: false + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sindri + supportedSecret: Sindri API Key + secretType: sindri_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Slack + supportedSecret: Slack API Token + secretType: slack_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Slack + supportedSecret: Slack Incoming Webhook URL + secretType: slack_incoming_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Slack + supportedSecret: Slack Workflow Webhook URL + secretType: slack_workflow_webhook_url + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Snowflake + supportedSecret: Snowflake Programmatic Access Token + secretType: snowflake_programmatic_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token + secretType: sourcegraph_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Dotcom User Gateway Access Token + secretType: sourcegraph_dotcom_user_gateway + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Access Token with Instance Identifier + secretType: sourcegraph_instance_identifier_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph License Key Token + secretType: sourcegraph_license_key_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Sourcegraph + supportedSecret: Sourcegraph Product Subscription Token + secretType: sourcegraph_product_subscription_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Square + supportedSecret: Square Access Token + secretType: square_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: Square + supportedSecret: Square Production Application Secret + secretType: square_production_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Square + supportedSecret: Square Sandbox Application Secret + secretType: square_sandbox_application_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: SSLMate + supportedSecret: SSLMate API Key + secretType: sslmate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: SSLMate + supportedSecret: SSLMate Cluster Secret + secretType: sslmate_cluster_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe API Key + secretType: stripe_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Legacy API Key + secretType: stripe_legacy_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Live API Restricted Key + secretType: stripe_live_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Restricted Key + secretType: stripe_test_restricted_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Test API Secret Key + secretType: stripe_test_secret_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Stripe + supportedSecret: Stripe Webhook Signing Secret + secretType: stripe_webhook_signing_secret + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Supabase + supportedSecret: Supabase Service Key + secretType: supabase_service_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: Tableau + supportedSecret: Tableau Personal Access Token + secretType: tableau_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tailscale + supportedSecret: Tailscale API Key + secretType: tailscale_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.17' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Telegram + supportedSecret: Telegram Bot Token + secretType: telegram_bot_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Telnyx + supportedSecret: Telnyx API V2 Key + secretType: telnyx_api_v2_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Temporal + supportedSecret: Temporal Cloud API Key + secretType: temporal_cloud_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud International Access Token + secretType: tencent_cloud_intl_access_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent Cloud Secret ID + secretType: tencent_cloud_secret_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat API App ID + secretType: tencent_wechat_api_app_id + versions: + fpt: '*' + ghec: '*' + ghes: '>3.7' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Tencent + supportedSecret: Tencent WeChat Pay Token + secretType: tencent_wechat_pay_token + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Thunderstore + supportedSecret: Thunderstore IO API Token + secretType: thunderstore_io_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.16' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Access Token + secretType: twilio_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio Account String Identifier + secretType: twilio_account_sid + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Twilio + supportedSecret: Twilio API Key + secretType: twilio_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Typeform + supportedSecret: Typeform Personal Access Token + secretType: typeform_personal_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.5' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Uniwise + supportedSecret: WISEflow API Key + secretType: wiseflow_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Unkey + supportedSecret: Unkey Root Key + secretType: unkey_root_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Val Town + supportedSecret: Val Town API Token + secretType: val_town_api_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: VolcEngine + supportedSecret: VolcEngine Access Key ID + secretType: volcengine_access_key_id + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime API Key + secretType: wakatime_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime App Secret + secretType: wakatime_app_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Access Token + secretType: wakatime_oauth_access_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Wakatime + supportedSecret: WakaTime OAuth Refresh Token + secretType: wakatime_oauth_refresh_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.9' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Weights & Biases + supportedSecret: Weights & Biases API Key + secretType: wandb_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Workato + supportedSecret: Workato Developer API Token + secretType: workato_developer_api_token + versions: + fpt: '*' + ghec: '*' + ghes: '>3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Production API Key + secretType: workos_production_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: WorkOS + supportedSecret: WorkOS Staging API Key + secretType: workos_staging_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.12' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: true +- provider: xAI + supportedSecret: xAI API Key + secretType: xai_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.18' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud API Key + secretType: yandex_cloud_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Access Secret + secretType: yandex_cloud_iam_access_secret + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.14' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Cookie + secretType: yandex_cloud_iam_cookie + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud IAM Token + secretType: yandex_cloud_iam_token + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Cloud Smartchapta Server Key + secretType: yandex_cloud_smartcaptcha_server_key + versions: + fpt: '*' + ghec: '*' + ghes: '>=3.11' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Dictionary API Key + secretType: yandex_dictionary_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Passport OAuth Token + secretType: yandex_passport_oauth_token + versions: + fpt: '*' + ghec: '*' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Predictor API Key + secretType: yandex_predictor_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Yandex + supportedSecret: Yandex.Translate API Key + secretType: yandex_translate_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: false + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false +- provider: ZenHub + supportedSecret: ZenHub Personal API Key + secretType: zenhub_personal_api_key + versions: + fpt: '*' + ghec: '*' + isPublic: false + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: false + base64Supported: false + isduplicate: false +- provider: Zuplo + supportedSecret: Zuplo Consumer API Key + secretType: zuplo_consumer_api_key + versions: + fpt: '*' + ghec: '*' + ghes: '>3.6' + isPublic: true + isPrivateWithGhas: true + hasPushProtection: true + hasValidityCheck: '{% ifversion fpt or ghes %}false{% else %}true{% endif %}' + base64Supported: false + isduplicate: false diff --git a/src/secret-scanning/data/public-docs-schema.ts b/src/secret-scanning/data/public-docs-schema.ts index aad969f32f..0a5d686f7c 100644 --- a/src/secret-scanning/data/public-docs-schema.ts +++ b/src/secret-scanning/data/public-docs-schema.ts @@ -50,8 +50,6 @@ export default { 'isPrivateWithGhas', 'hasPushProtection', 'hasValidityCheck', - 'base64Supported', - 'isduplicate', ], properties: { provider: { diff --git a/src/secret-scanning/middleware/secret-scanning.ts b/src/secret-scanning/middleware/secret-scanning.ts index f04a6f76d2..9cf6adcacb 100644 --- a/src/secret-scanning/middleware/secret-scanning.ts +++ b/src/secret-scanning/middleware/secret-scanning.ts @@ -6,8 +6,10 @@ import type { NextFunction, Response } from 'express' import getApplicableVersions from '@/versions/lib/get-applicable-versions' import { liquid } from '@/content-render/index' import { ExtendedRequest, SecretScanningData } from '@/types' +import { allVersions } from '@/versions/lib/all-versions' +import { getVersionInfo } from '@/app/lib/constants' -const secretScanningPath = 'src/secret-scanning/data/public-docs.yml' +const secretScanningDir = 'src/secret-scanning/data/pattern-docs' // This is the path to the file that contains the secret scanning data. // Currently it's: @@ -23,12 +25,20 @@ export default async function secretScanning( ) { if (!req.pagePath!.endsWith(targetFilename)) return next() - const secretScanningData = yaml.load( - fs.readFileSync(secretScanningPath, 'utf-8'), - ) as SecretScanningData[] - if (!req.context) throw new Error('request not contextualized') const { currentVersion } = req.context + if (!currentVersion) throw new Error('currentVersion not set in context') + + const { isEnterpriseCloud, isEnterpriseServer } = getVersionInfo(currentVersion) + + const versionPath = isEnterpriseCloud + ? 'ghec' + : isEnterpriseServer + ? `ghes-${allVersions[currentVersion].currentRelease}` + : 'fpt' + const filepath = `${secretScanningDir}/${versionPath}/public-docs.yml` + + const secretScanningData = yaml.load(fs.readFileSync(filepath, 'utf-8')) as SecretScanningData[] req.context.secretScanningData = secretScanningData.filter((entry) => currentVersion ? getApplicableVersions(entry.versions).includes(currentVersion) : false, diff --git a/src/secret-scanning/scripts/sync.ts b/src/secret-scanning/scripts/sync.ts index 99edc4f824..ea3ff4add4 100755 --- a/src/secret-scanning/scripts/sync.ts +++ b/src/secret-scanning/scripts/sync.ts @@ -4,22 +4,20 @@ * GITHUB_TOKEN * * Syncs the - * https://github.com/github/token-scanning-service/blob/main/docs/public-docs.yml - * file to src/secret-scanning/data/public-docs.yml + * https://github.com/github/token-scanning-service/blob/main/docs/public-docs + * directory to src/secret-scanning/data/pattern-docs */ -import { readFile, writeFile } from 'fs/promises' -import core from '@actions/core' +import { writeFile } from 'fs/promises' import yaml from 'js-yaml' -import { getContentAndData, getCommitSha } from '@/workflows/git-utils' +import { getDirectoryContents } from '@/workflows/git-utils' import schema from '@/secret-scanning/data/public-docs-schema' // This is temporarily being imported until the subsequent modules // have been converted to TypeScript. import { validateJson } from '@/tests/lib/validate-json-schema' import { formatAjvErrors } from '@/tests/helpers/schemas' -const SECRET_SCANNING_FILEPATH = 'src/secret-scanning/data/public-docs.yml' -type PipelineConfig = { sha: string; 'blob-sha': string } +const SECRET_SCANNING_DIR = 'src/secret-scanning/data/pattern-docs' async function main() { if (!process.env.GITHUB_TOKEN) { @@ -29,44 +27,33 @@ async function main() { const owner = 'github' const repo = 'token-scanning-service' const ref = 'main' - const filepath = 'docs/public-docs.yml' + const directory = 'docs/public-docs' - const { content, blobSha } = await getContentAndData(owner, repo, ref, filepath) + const files = await getDirectoryContents(owner, repo, ref, directory) - const configFilepath = 'src/secret-scanning/lib/config.json' - const pipelineConfig: PipelineConfig = JSON.parse(await readFile(configFilepath, 'utf8')) - if (pipelineConfig['blob-sha'] === blobSha) { - console.log('No changes detected in the public-docs.yml file') - return + for (const file of files) { + // ensure yaml can be parsed + let yamlData + try { + yamlData = yaml.load(file.content) + } catch (error) { + console.error('The public-docs.yml file being synced is not valid yaml') + throw error + } + + // ensure yaml is valid against the schema + const { isValid, errors } = validateJson(schema, yamlData) + + if (!isValid && errors) { + console.error(formatAjvErrors(errors)) + throw new Error('The public-docs.yml file being synced does not have a valid schema') + } + + const filePath = file.path.replace(`${directory}/`, '') + const localFilePath = `${SECRET_SCANNING_DIR}/${filePath}` + + await writeFile(localFilePath, yaml.dump(yamlData)) } - - // ensure yaml can be parsed - let yamlData - try { - yamlData = yaml.load(content) - } catch (error) { - console.error('The public-docs.yml file being synced is not valid yaml') - throw error - } - - // ensure yaml is valid against the schema - const { isValid, errors } = validateJson(schema, yamlData) - - if (!isValid && errors) { - console.error(formatAjvErrors(errors)) - throw new Error('The public-docs.yml file being synced does not have a valid schema') - } - - await writeFile(SECRET_SCANNING_FILEPATH, yaml.dump(yamlData)) - - // update the config file with the latest sha - pipelineConfig.sha = await getCommitSha(owner, repo, `heads/${ref}`) - pipelineConfig['blob-sha'] = blobSha - await writeFile(configFilepath, JSON.stringify(pipelineConfig, null, 2)) - - // the workflow that runs this script needs the synced sha to use - // when creating the PR. - core.setOutput('sha', pipelineConfig.sha) } main() diff --git a/src/workflows/git-utils.ts b/src/workflows/git-utils.ts index d5ac998628..4e9144b656 100644 --- a/src/workflows/git-utils.ts +++ b/src/workflows/git-utils.ts @@ -295,11 +295,11 @@ export async function getDirectoryContents( } else if (blob.type === 'file') { if (!data.content) { const blobContents = await getContentsForBlob(owner, repo, blob.sha) - files.push(blobContents) + files.push({ path: blob.path, content: blobContents }) } else { // decode Base64 encoded contents const decodedContent = Buffer.from(blob.content, 'base64').toString() - files.push(decodedContent) + files.push({ path: blob.path, content: decodedContent }) } } }