Detected secrets

Tier: Free, Premium, Ultimate Offering: GitLab.com, Self-managed, GitLab Dedicated

This table lists the secrets detected by:

  • Pipeline secret detection
  • Client-side secret detection
  • Secret push protection
Description ID Pipeline secret detection Client-side secret detection Secret push protection
Adobe Client ID (Oauth Web) Adobe Client ID (Oauth Web) Yes No No
Adobe Client Secret Adobe Client Secret Yes No No
Age secret key Age secret key Yes No No
Alibaba AccessKey ID Alibaba AccessKey ID Yes No No
Alibaba Secret Key Alibaba Secret Key Yes No No
Anthropic keys anthropic_key Yes Yes No
Asana Client ID Asana Client ID Yes No No
Asana Client Secret Asana Client Secret Yes No No
Atlassian API token Atlassian API token Yes No No
AWS Access Token AWS Yes No Yes
Beamer API token Beamer API token Yes No No
Bitbucket client ID Bitbucket client ID Yes No No
Bitbucket client secret Bitbucket client secret Yes No No
CircleCI access tokens CircleCI access tokens Yes No No
Clojars API token Clojars API token Yes No No
Contentful delivery API token Contentful delivery API token Yes No No
Contentful preview API token Contentful preview API token Yes No No
Databricks API token Databricks API token Yes No No
DigitalOcean OAuth Access Token digitalocean-access-token Yes No No
DigitalOcean OAuth Refresh Token digitalocean-refresh-token Yes No No
DigitalOcean Personal Access Token digitalocean-pat Yes No No
Discord API key Discord API key Yes No No
Discord client ID Discord client ID Yes No No
Discord client secret Discord client secret Yes No No
Doppler API token Doppler API token Yes No No
Dropbox API secret/key Dropbox API secret/key Yes No No
Dropbox long lived API token Dropbox long lived API token Yes No No
Dropbox short lived API token Dropbox short lived API token Yes No No
Duffel API token Duffel API token Yes No No
Dynatrace API token Dynatrace API token Yes No No
EasyPost API token EasyPost API token Yes No No
EasyPost test API token EasyPost test API token Yes No No
Facebook token Facebook token Yes No No
Fastly API token Fastly API token Yes No No
Finicity API token Finicity API token Yes No No
Finicity client secret Finicity client secret Yes No No
Flutterwave encrypted key Flutterwave encrypted key Yes No No
Flutterwave public key Flutterwave public key Yes No No
Flutterwave secret key Flutterwave secret key Yes No No
Frame.io API token Frame.io API token Yes No No
GCP API keys GCP API key Yes No Yes
GCP OAuth client secret GCP OAuth client secret Yes No Yes
GitHub App Token GitHub App Token Yes No Yes
GitHub OAuth Access Token GitHub OAuth Access Token Yes No Yes
GitHub Personal Access Token GitHub Personal Access Token Yes No Yes
GitHub Refresh Token GitHub Refresh Token Yes No Yes
GitLab Agent for Kubernetes token gitlab_kubernetes_agent_token Yes Yes Yes
GitLab CI Build (Job) token gitlab_ci_build_token Yes Yes No
GitLab Deploy Token gitlab_deploy_token Yes Yes No
GitLab Feature Flags Client Token None No Yes No
GitLab Feed Token gitlab_feed_token Yes No No
GitLab Feed Token gitlab_feed_token_v2 Yes Yes Yes
GitLab Incoming email token gitlab_incoming_email_token Yes Yes Yes
GitLab OAuth Application Secrets gitlab_oauth_app_secret Yes Yes Yes
GitLab Personal Access Token gitlab_personal_access_token Yes Yes Yes
GitLab Pipeline Trigger Token gitlab_pipeline_trigger_token Yes Yes Yes
GitLab Runner Authentication Token gitlab_runner_auth_token Yes Yes Yes
GitLab Runner Registration Token gitlab_runner_registration_token Yes No Yes
GitLab SCIM token gitlab_scim_oauth_token Yes No No
GoCardless API token GoCardless API token Yes No No
Google (GCP) Service-account Google (GCP) Service-account Yes No Yes
Grafana API token Grafana API token Yes No Yes
Hashicorp Terraform user/org API token Hashicorp Terraform user/org API token Yes No Yes
Hashicorp Vault batch token Hashicorp Vault batch token Yes No Yes
Heroku API Key Heroku API Key Yes No No
Hubspot API token Hubspot API token Yes No No
Instagram access token Instagram access token Yes No No
Intercom API token Intercom API token Yes No No
Intercom client secret/ID Intercom client secret/ID Yes No No
Ionic API token Ionic API token Yes No No
Linear API token Linear API token Yes No No
Linear client secret/ID Linear client secret/ID Yes No No
Linkedin Client ID Linkedin Client ID Yes No No
Linkedin Client secret Linkedin Client secret Yes No No
Lob API Key Lob API Key Yes No No
Lob Publishable API Key Lob Publishable API Key Yes No No
Mailchimp API key Mailchimp API key Yes No Yes
Mailgun private API token Mailgun private API token Yes No Yes
Mailgun public validation key Mailgun public validation key Yes No No
Mailgun webhook signing key Mailgun webhook signing key Yes No Yes
Mapbox API token Mapbox API token Yes No No
MessageBird API client ID MessageBird API client ID Yes No No
MessageBird API token messagebird-api-token Yes No No
Meta access token Meta access token Yes No No
New Relic ingest browser API token New Relic ingest browser API token Yes No No
New Relic user API ID New Relic user API ID Yes No Yes
New Relic user API Key New Relic user API Key Yes No Yes
npm access token npm access token Yes No Yes
Oculus access token Oculus access token Yes No No
Open AI API key open ai token Yes No No
Password in URL Password in URL Yes No No
PGP private key PGP private key Yes No No
PKCS8 private key PKCS8 private key Yes No No
Planetscale API token Planetscale API token Yes No No
Planetscale password Planetscale password Yes No No
Postman API token Postman API token Yes No No
Pulumi API token Pulumi API token Yes No No
PyPI upload token PyPI upload token Yes No Yes
RSA private key RSA private key Yes No No
Rubygem API token Rubygem API token Yes No Yes
Segment Public API token Segment Public API token Yes No Yes
Sendgrid API token Sendgrid API token Yes No Yes
Sendinblue API token Sendinblue API token Yes No No
Sendinblue SMTP token Sendinblue SMTP token Yes No No
Shippo API token Shippo API token Yes No No
Shopify access token Shopify access token Yes No Yes
Shopify custom app access token Shopify custom app access token Yes No Yes
Shopify private app access token Shopify private app access token Yes No Yes
Shopify shared secret Shopify shared secret Yes No Yes
Slack token Slack token Yes No Yes
Slack Webhook Slack Webhook Yes No No
SSH (DSA) private key SSH (DSA) private key Yes No No
SSH (EC) private key SSH (EC) private key Yes No No
SSH private key SSH private key Yes No No
Stripe Stripe Yes No Yes
systemd machine-id systemd-machine-id Yes No No
Tailscale keys Tailscale key Yes No No
Twilio API Key Twilio API Key Yes No No
Twitch API token Twitch API token Yes No No
Twitter token Twitter token Yes No No
Typeform API token Typeform API token Yes No No
Yandex.Cloud AWS API compatible Access Secret Yandex.Cloud AWS API compatible Access Secret Yes No No
Yandex.Cloud IAM API key v1 Yandex.Cloud IAM Cookie v1 - 3 Yes No No
Yandex.Cloud IAM Cookie v1 Yandex.Cloud IAM Cookie v1 - 1 Yes No No
Yandex.Cloud IAM Token v1 Yandex.Cloud IAM Cookie v1 - 2 Yes No No