Skip to content

Commit 81fc20b

Browse files
authored
Secret scanning adds new detector for generic private keys [GA] (#58297)
1 parent e08d204 commit 81fc20b

File tree

1 file changed

+19
-13
lines changed

1 file changed

+19
-13
lines changed

content/code-security/secret-scanning/introduction/supported-secret-scanning-patterns.md

Lines changed: 19 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -51,19 +51,25 @@ This table lists the secrets supported by {% data variables.product.prodname_sec
5151

5252
{% data reusables.secret-scanning.non-provider-patterns-beta %}
5353

54-
| Provider | Token |
55-
|----------|:--------------------|
56-
| Generic | ec_private_key |
57-
| Generic | http_basic_authentication_header |
58-
| Generic | http_bearer_authentication_header |
59-
| Generic | mongodb_connection_string |
60-
| Generic | mysql_connection_string |
61-
| Generic | openssh_private_key |
62-
| Generic | pgp_private_key |
63-
| Generic | postgres_connection_string |
64-
| Generic | rsa_private_key |
65-
66-
>[!NOTE] Validity checks are not supported for non-provider patterns.
54+
Precision levels are estimated based on the pattern type's typical false positive rates.
55+
56+
| Provider | Token | Description | Precision |
57+
|:---------|:--------------------------------------|:------------|:----------|
58+
| Generic | ec_private_key | Elliptic Curve (EC) private keys used for cryptographic operations | High |
59+
| Generic | generic_private_key | Cryptographic private keys with `-----BEGIN PRIVATE KEY-----` header | High |
60+
| Generic | http_basic_authentication_header | HTTP Basic Authentication credentials in request headers | Medium |
61+
| Generic | http_bearer_authentication_header | HTTP Bearer tokens used for API authentication | Medium |
62+
| Generic | mongodb_connection_string | Connection strings for MongoDB databases containing credentials | High |
63+
| Generic | mysql_connection_string | Connection strings for MySQL databases containing credentials | High |
64+
| Generic | openssh_private_key | OpenSSH format private keys used for SSH authentication | High |
65+
| Generic | pgp_private_key | PGP (Pretty Good Privacy) private keys used for encryption and signing | High |
66+
| Generic | postgres_connection_string | Connection strings for PostgreSQL databases containing credentials | High |
67+
| Generic | rsa_private_key | RSA private keys used for cryptographic operations | High |
68+
69+
`generic_private_key` support is only available on {% data variables.product.prodname_ghe_server %} from version 3.20.
70+
71+
>[!NOTE]
72+
> Validity checks are **not supported** for non-provider patterns.
6773
6874
{% ifversion secret-scanning-ai-generic-secret-detection %}
6975

0 commit comments

Comments
 (0)