Detected secrets
DETAILS: Tier: Ultimate Offering: GitLab.com, GitLab Dedicated Status: Beta
This table lists the secrets detected by secret push protection.
Description | ID | Keywords |
---|---|---|
AWS Access Token | AWS | AKIA |
GCP API keys can be misused to gain API quota from billed projects | GCP API key | AIza |
GCP OAuth client secrets can be misused to spoof your application | GCP OAuth client secret | GOCSPX- |
GitLab Agent for Kubernetes token | gitlab_kubernetes_agent_token | glagent |
GitLab Feed Token | gitlab_feed_token_v2 | glft |
GitLab Incoming email token | gitlab_incoming_email_token | glimt |
GitLab OAuth Application Secrets | gitlab_oauth_app_secret | gloas |
GitLab Personal Access Token | gitlab_personal_access_token | glpat |
GitLab Pipeline Trigger Token | gitlab_pipeline_trigger_token | glptt |
GitLab Runner Authentication Token | gitlab_runner_auth_token | glrt |
GitLab Runner Registration Token | gitlab_runner_registration_token | GR1348941 |
GitHub App Token | GitHub App Token | ghu_, ghs_ |
GitHub OAuth Access Token | GitHub OAuth Access Token | gho_ |
GitHub Personal Access Token | GitHub Personal Access Token | ghp_ |
GitHub Refresh Token | GitHub Refresh Token | ghr_ |
Google (GCP) Service-account | Google (GCP) Service-account | service_account |
Grafana API token | Grafana API token | grafana |
Hashicorp Terraform user/org API token | Hashicorp Terraform user/org API token | atlasv1, hashicorp, terraform |
Hashicorp Vault batch token | Hashicorp Vault batch token | hashicorp, AAAAAQ, vault |
Mailchimp API key | Mailchimp API key | mailchimp |
Mailgun private API token | Mailgun private API token | mailgun |
Mailgun webhook signing key | Mailgun webhook signing key | mailgun |
New Relic user API ID | New Relic user API ID | newrelic |
New Relic user API Key | New Relic user API Key | NRAK |
npm access token | npm access token | npm_ |
PyPI upload token | PyPI upload token | pypi-AgEIcHlwaS5vcmc |
Rubygem API token | Rubygem API token | rubygems_ |
Segment Public API token | Segment Public API token | sgp_ |
Sendgrid API token | Sendgrid API token | sendgrid |
Shopify access token | Shopify access token | shpat_ |
Shopify custom app access token | Shopify custom app access token | shpca_ |
Shopify private app access token | Shopify private app access token | shppa_ |
Shopify shared secret | Shopify shared secret | shpss_ |
Slack token | Slack token | xoxb, xoxa, xoxp, xoxr, xoxs |
Stripe | Stripe | sk_test, pk_test, sk_live, pk_live |