Detected secrets

Tier: Free, Premium, Ultimate
Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated

This table lists the secrets detected by:

Pipeline secret detection
Client-side secret detection
Secret push protection

Description	ID	Pipeline secret detection	Client-side secret detection	Secret push protection
Adobe Client ID (OAuth Web)	Adobe Client ID (OAuth Web)	Yes	No	No
Adobe Client Secret	Adobe Client Secret	Yes	No	No
Age secret key	Age secret key	Yes	No	No
Alibaba AccessKey ID	Alibaba AccessKey ID	Yes	No	No
Alibaba Secret Key	Alibaba Secret Key	Yes	No	No
Anthropic keys	anthropic_key	Yes	Yes	No
Asana Client ID	Asana Client ID	Yes	No	No
Asana Client Secret	Asana Client Secret	Yes	No	No
Atlassian API token	Atlassian API token	Yes	No	No
AWS Access Token	AWS	Yes	No	Yes
Beamer API token	Beamer API token	Yes	No	No
Bitbucket client ID	Bitbucket client ID	Yes	No	No
Bitbucket client secret	Bitbucket client secret	Yes	No	No
CircleCI access tokens	CircleCI access tokens	Yes	No	No
Clojars API token	Clojars API token	Yes	No	No
Contentful delivery API token	Contentful delivery API token	Yes	No	No
Contentful preview API token	Contentful preview API token	Yes	No	No
Databricks API token	Databricks API token	Yes	No	No
DigitalOcean OAuth Access Token	digitalocean-access-token	Yes	No	No
DigitalOcean OAuth Refresh Token	digitalocean-refresh-token	Yes	No	No
DigitalOcean Personal Access Token	digitalocean-pat	Yes	No	No
Discord API key	Discord API key	Yes	No	No
Discord client ID	Discord client ID	Yes	No	No
Discord client secret	Discord client secret	Yes	No	No
Doppler API token	Doppler API token	Yes	No	No
Dropbox API secret/key	Dropbox API secret/key	Yes	No	No
Dropbox long lived API token	Dropbox long lived API token	Yes	No	No
Dropbox short lived API token	Dropbox short lived API token	Yes	No	No
Duffel API token	Duffel API token	Yes	No	No
Dynatrace API token	Dynatrace API token	Yes	No	No
EasyPost API token	EasyPost API token	Yes	No	No
EasyPost test API token	EasyPost test API token	Yes	No	No
Facebook token	Facebook token	Yes	No	No
Fastly API token	Fastly API token	Yes	No	No
Finicity API token	Finicity API token	Yes	No	No
Finicity client secret	Finicity client secret	Yes	No	No
Flutterwave encrypted key	Flutterwave encrypted key	Yes	No	No
Flutterwave public key	Flutterwave public key	Yes	No	No
Flutterwave secret key	Flutterwave secret key	Yes	No	No
Frame.io API token	Frame.io API token	Yes	No	No
GCP API keys	GCP API key	Yes	No	Yes
GCP OAuth client secret	GCP OAuth client secret	Yes	No	Yes
GitHub App Token	GitHub App Token	Yes	No	Yes
GitHub OAuth Access Token	GitHub OAuth Access Token	Yes	No	Yes
GitHub Personal Access Token	GitHub Personal Access Token	Yes	No	Yes
GitHub Refresh Token	GitHub Refresh Token	Yes	No	Yes
GitLab Agent for Kubernetes token	gitlab_kubernetes_agent_token	Yes	Yes	Yes
GitLab CI Build (Job) token	gitlab_ci_build_token	Yes	Yes	No
GitLab Deploy Token	gitlab_deploy_token	Yes	Yes	No
GitLab Feature Flags Client Token	None	No	Yes	No
GitLab Feed Token	gitlab_feed_token	Yes	No	No
GitLab Feed Token	gitlab_feed_token_v2	Yes	Yes	Yes
GitLab Incoming email token	gitlab_incoming_email_token	Yes	Yes	Yes
GitLab OAuth Application Secrets	gitlab_oauth_app_secret	Yes	Yes	Yes
GitLab Personal Access Token	gitlab_personal_access_token	Yes	Yes	Yes
GitLab Pipeline Trigger Token	gitlab_pipeline_trigger_token	Yes	Yes	Yes
GitLab Runner Authentication Token	gitlab_runner_auth_token	Yes	Yes	Yes
GitLab Runner Registration Token	gitlab_runner_registration_token	Yes	No	Yes
GitLab SCIM token	gitlab_scim_oauth_token	Yes	No	No
GoCardless API token	GoCardless API token	Yes	No	No
Google (GCP) Service-account	Google (GCP) Service-account	Yes	No	Yes
Grafana API token	Grafana API token	Yes	No	Yes
Hashicorp Terraform user/org API token	Hashicorp Terraform user/org API token	Yes	No	Yes
Hashicorp Vault batch token	Hashicorp Vault batch token	Yes	No	Yes
Heroku API Key	Heroku API Key	Yes	No	No
Hubspot API token	Hubspot API token	Yes	No	No
Instagram access token	Instagram access token	Yes	No	No
Intercom API token	Intercom API token	Yes	No	No
Intercom client secret/ID	Intercom client secret/ID	Yes	No	No
Ionic API token	Ionic API token	Yes	No	No
Linear API token	Linear API token	Yes	No	No
Linear client secret/ID	Linear client secret/ID	Yes	No	No
Linkedin Client ID	Linkedin Client ID	Yes	No	No
Linkedin Client secret	Linkedin Client secret	Yes	No	No
Lob API Key	Lob API Key	Yes	No	No
Lob Publishable API Key	Lob Publishable API Key	Yes	No	No
Mailchimp API key	Mailchimp API key	Yes	No	Yes
Mailgun private API token	Mailgun private API token	Yes	No	Yes
Mailgun public validation key	Mailgun public validation key	Yes	No	No
Mailgun webhook signing key	Mailgun webhook signing key	Yes	No	Yes
Mapbox API token	Mapbox API token	Yes	No	No
MessageBird API client ID	MessageBird API client ID	Yes	No	No
MessageBird API token	messagebird-api-token	Yes	No	No
Meta access token	Meta access token	Yes	No	No
New Relic ingest browser API token	New Relic ingest browser API token	Yes	No	No
New Relic user API ID	New Relic user API ID	Yes	No	Yes
New Relic user API Key	New Relic user API Key	Yes	No	Yes
npm access token	npm access token	Yes	No	Yes
Oculus access token	Oculus access token	Yes	No	No
Open AI API key	open ai token	Yes	No	No
Password in URL	Password in URL	Yes	No	No
PGP private key	PGP private key	Yes	No	No
PKCS8 private key	PKCS8 private key	Yes	No	No
Planetscale API token	Planetscale API token	Yes	No	No
Planetscale password	Planetscale password	Yes	No	No
Postman API token	Postman API token	Yes	No	No
Pulumi API token	Pulumi API token	Yes	No	No
PyPI upload token	PyPI upload token	Yes	No	Yes
RSA private key	RSA private key	Yes	No	No
Rubygem API token	Rubygem API token	Yes	No	Yes
Segment Public API token	Segment Public API token	Yes	No	Yes
Sendgrid API token	Sendgrid API token	Yes	No	Yes
Sendinblue API token	Sendinblue API token	Yes	No	No
Sendinblue SMTP token	Sendinblue SMTP token	Yes	No	No
Shippo API token	Shippo API token	Yes	No	No
Shopify access token	Shopify access token	Yes	No	Yes
Shopify custom app access token	Shopify custom app access token	Yes	No	Yes
Shopify private app access token	Shopify private app access token	Yes	No	Yes
Shopify shared secret	Shopify shared secret	Yes	No	Yes
Slack token	Slack token	Yes	No	Yes
Slack Webhook	Slack Webhook	Yes	No	No
SSH (DSA) private key	SSH (DSA) private key	Yes	No	No
SSH (EC) private key	SSH (EC) private key	Yes	No	No
SSH private key	SSH private key	Yes	No	No
Stripe	Stripe	Yes	No	Yes
systemd machine-id	systemd-machine-id	Yes	No	No
Tailscale keys	Tailscale key	Yes	No	No
Twilio API Key	Twilio API Key	Yes	No	No
Twitch API token	Twitch API token	Yes	No	No
Twitter token	Twitter token	Yes	No	No
Typeform API token	Typeform API token	Yes	No	No
Yandex.Cloud AWS API compatible Access Secret	Yandex.Cloud AWS API compatible Access Secret	Yes	No	No
Yandex.Cloud IAM API key v1	Yandex.Cloud IAM Cookie v1 - 3	Yes	No	No
Yandex.Cloud IAM Cookie v1	Yandex.Cloud IAM Cookie v1 - 1	Yes	No	No
Yandex.Cloud IAM Token v1	Yandex.Cloud IAM Cookie v1 - 2	Yes	No	No

Docs

Edit this page to fix an error or add an improvement in a merge request.

Create an issue to suggest an improvement to this page.

Product

Create an issue if there's something you don't like about this feature.

Propose functionality by submitting a feature request.

Feature availability and product trials

View pricing to see all GitLab tiers and features, or to upgrade.

Try GitLab for free with access to all features for 30 days.

Get help

If you didn't find what you were looking for, search the docs.

If you want help with something specific and could use community support, post on the GitLab forum.

For problems setting up or using this feature (depending on your GitLab subscription).

Request support

Detected secrets

Help & feedback

Docs

Product

Feature availability and product trials

Get help