Skip to content

Commit 32ac81d

Browse files
authored
Merge pull request #41325 from github/repo-sync
Repo sync
2 parents f2673c5 + 0b2cfad commit 32ac81d

File tree

3 files changed

+23
-16
lines changed

3 files changed

+23
-16
lines changed

content/code-security/secret-scanning/introduction/supported-secret-scanning-patterns.md

Lines changed: 19 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -51,19 +51,25 @@ This table lists the secrets supported by {% data variables.product.prodname_sec
5151

5252
{% data reusables.secret-scanning.non-provider-patterns-beta %}
5353

54-
| Provider | Token |
55-
|----------|:--------------------|
56-
| Generic | ec_private_key |
57-
| Generic | http_basic_authentication_header |
58-
| Generic | http_bearer_authentication_header |
59-
| Generic | mongodb_connection_string |
60-
| Generic | mysql_connection_string |
61-
| Generic | openssh_private_key |
62-
| Generic | pgp_private_key |
63-
| Generic | postgres_connection_string |
64-
| Generic | rsa_private_key |
65-
66-
>[!NOTE] Validity checks are not supported for non-provider patterns.
54+
Precision levels are estimated based on the pattern type's typical false positive rates.
55+
56+
| Provider | Token | Description | Precision |
57+
|:---------|:--------------------------------------|:------------|:----------|
58+
| Generic | ec_private_key | Elliptic Curve (EC) private keys used for cryptographic operations | High |
59+
| Generic | generic_private_key | Cryptographic private keys with `-----BEGIN PRIVATE KEY-----` header | High |
60+
| Generic | http_basic_authentication_header | HTTP Basic Authentication credentials in request headers | Medium |
61+
| Generic | http_bearer_authentication_header | HTTP Bearer tokens used for API authentication | Medium |
62+
| Generic | mongodb_connection_string | Connection strings for MongoDB databases containing credentials | High |
63+
| Generic | mysql_connection_string | Connection strings for MySQL databases containing credentials | High |
64+
| Generic | openssh_private_key | OpenSSH format private keys used for SSH authentication | High |
65+
| Generic | pgp_private_key | PGP (Pretty Good Privacy) private keys used for encryption and signing | High |
66+
| Generic | postgres_connection_string | Connection strings for PostgreSQL databases containing credentials | High |
67+
| Generic | rsa_private_key | RSA private keys used for cryptographic operations | High |
68+
69+
`generic_private_key` support is only available on {% data variables.product.prodname_ghe_server %} from version 3.20.
70+
71+
>[!NOTE]
72+
> Validity checks are **not supported** for non-provider patterns.
6773
6874
{% ifversion secret-scanning-ai-generic-secret-detection %}
6975

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,6 @@
1-
# Reference: #13325
2-
# Secret Scanning Detection for GitHub Wikis [Public Beta]
1+
# Reference: #13325 and #19222
2+
# Secret Scanning Detection for GitHub Wikis
33
versions:
44
fpt: '*'
55
ghec: '*'
6+
ghes: '>3.18'
Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
{% data variables.product.prodname_secret_scanning_caps %} is a security tool that scans the entire Git history of repositories, as well as issues{% ifversion secret-scanning-enhancements-wikis %}, pull requests, discussions, and wikis{% elsif ghes > 3.13 %}, pull requests, and discussions{% endif %} in those repositories, for leaked secrets that have been accidentally committed, such as tokens or private keys.
1+
{% data variables.product.prodname_secret_scanning_caps %} is a security tool that scans the entire Git history of repositories, as well as issues{% ifversion secret-scanning-enhancements-wikis %}, pull requests, discussions, and wikis{% elsif ghes < 3.19 %}, pull requests, and discussions{% endif %} in those repositories, for leaked secrets that have been accidentally committed, such as tokens or private keys.

0 commit comments

Comments
 (0)