Detected secrets
- Tier: Free, Premium, Ultimate
- Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated
This table lists the secrets detected by:
- Pipeline secret detection
- Client-side secret detection
- Secret push protection
Description | ID | Pipeline secret detection | Client-side secret detection | Secret push protection |
---|---|---|---|---|
Adobe Client ID (OAuth Web) | Adobe Client ID (OAuth Web) | Yes | No | No |
Adobe Client Secret | Adobe Client Secret | Yes | No | No |
Age secret key | Age secret key | Yes | No | No |
Alibaba AccessKey ID | Alibaba AccessKey ID | Yes | No | No |
Alibaba Secret Key | Alibaba Secret Key | Yes | No | No |
Anthropic keys | anthropic_key | Yes | Yes | No |
Asana Client ID | Asana Client ID | Yes | No | No |
Asana Client Secret | Asana Client Secret | Yes | No | No |
Atlassian API token | Atlassian API token | Yes | No | No |
AWS Access Token | AWS | Yes | No | Yes |
Beamer API token | Beamer API token | Yes | No | No |
Bitbucket client ID | Bitbucket client ID | Yes | No | No |
Bitbucket client secret | Bitbucket client secret | Yes | No | No |
CircleCI access tokens | CircleCI access tokens | Yes | No | No |
Clojars API token | Clojars API token | Yes | No | No |
Contentful delivery API token | Contentful delivery API token | Yes | No | No |
Contentful preview API token | Contentful preview API token | Yes | No | No |
Databricks API token | Databricks API token | Yes | No | No |
DigitalOcean OAuth Access Token | digitalocean-access-token | Yes | No | No |
DigitalOcean OAuth Refresh Token | digitalocean-refresh-token | Yes | No | No |
DigitalOcean Personal Access Token | digitalocean-pat | Yes | No | No |
Discord API key | Discord API key | Yes | No | No |
Discord client ID | Discord client ID | Yes | No | No |
Discord client secret | Discord client secret | Yes | No | No |
Doppler API token | Doppler API token | Yes | No | No |
Dropbox API secret/key | Dropbox API secret/key | Yes | No | No |
Dropbox long lived API token | Dropbox long lived API token | Yes | No | No |
Dropbox short lived API token | Dropbox short lived API token | Yes | No | No |
Duffel API token | Duffel API token | Yes | No | No |
Dynatrace API token | Dynatrace API token | Yes | No | No |
EasyPost API token | EasyPost API token | Yes | No | No |
EasyPost test API token | EasyPost test API token | Yes | No | No |
Facebook token | Facebook token | Yes | No | No |
Fastly API token | Fastly API token | Yes | No | No |
Finicity API token | Finicity API token | Yes | No | No |
Finicity client secret | Finicity client secret | Yes | No | No |
Flutterwave encrypted key | Flutterwave encrypted key | Yes | No | No |
Flutterwave public key | Flutterwave public key | Yes | No | No |
Flutterwave secret key | Flutterwave secret key | Yes | No | No |
Frame.io API token | Frame.io API token | Yes | No | No |
GCP API keys | GCP API key | Yes | No | Yes |
GCP OAuth client secret | GCP OAuth client secret | Yes | No | Yes |
GitHub App Token | GitHub App Token | Yes | No | Yes |
GitHub OAuth Access Token | GitHub OAuth Access Token | Yes | No | Yes |
GitHub Personal Access Token | GitHub Personal Access Token | Yes | No | Yes |
GitHub Refresh Token | GitHub Refresh Token | Yes | No | Yes |
GitLab Agent for Kubernetes token | gitlab_kubernetes_agent_token | Yes | Yes | Yes |
GitLab CI Build (Job) token | gitlab_ci_build_token | Yes | Yes | No |
GitLab Deploy Token | gitlab_deploy_token | Yes | Yes | No |
GitLab Feature Flags Client Token | None | No | Yes | No |
GitLab Feed Token | gitlab_feed_token | Yes | No | No |
GitLab Feed Token | gitlab_feed_token_v2 | Yes | Yes | Yes |
GitLab Incoming email token | gitlab_incoming_email_token | Yes | Yes | Yes |
GitLab OAuth Application Secrets | gitlab_oauth_app_secret | Yes | Yes | Yes |
GitLab Personal Access Token | gitlab_personal_access_token | Yes | Yes | Yes |
GitLab Pipeline Trigger Token | gitlab_pipeline_trigger_token | Yes | Yes | Yes |
GitLab Runner Authentication Token | gitlab_runner_auth_token | Yes | Yes | Yes |
GitLab Runner Registration Token | gitlab_runner_registration_token | Yes | No | Yes |
GitLab SCIM token | gitlab_scim_oauth_token | Yes | No | No |
GoCardless API token | GoCardless API token | Yes | No | No |
Google (GCP) Service-account | Google (GCP) Service-account | Yes | No | Yes |
Grafana API token | Grafana API token | Yes | No | Yes |
Hashicorp Terraform user/org API token | Hashicorp Terraform user/org API token | Yes | No | Yes |
Hashicorp Vault batch token | Hashicorp Vault batch token | Yes | No | Yes |
Heroku API Key | Heroku API Key | Yes | No | No |
Hubspot API token | Hubspot API token | Yes | No | No |
Instagram access token | Instagram access token | Yes | No | No |
Intercom API token | Intercom API token | Yes | No | No |
Intercom client secret/ID | Intercom client secret/ID | Yes | No | No |
Ionic API token | Ionic API token | Yes | No | No |
Linear API token | Linear API token | Yes | No | No |
Linear client secret/ID | Linear client secret/ID | Yes | No | No |
Linkedin Client ID | Linkedin Client ID | Yes | No | No |
Linkedin Client secret | Linkedin Client secret | Yes | No | No |
Lob API Key | Lob API Key | Yes | No | No |
Lob Publishable API Key | Lob Publishable API Key | Yes | No | No |
Mailchimp API key | Mailchimp API key | Yes | No | Yes |
Mailgun private API token | Mailgun private API token | Yes | No | Yes |
Mailgun public validation key | Mailgun public validation key | Yes | No | No |
Mailgun webhook signing key | Mailgun webhook signing key | Yes | No | Yes |
Mapbox API token | Mapbox API token | Yes | No | No |
MessageBird API client ID | MessageBird API client ID | Yes | No | No |
MessageBird API token | messagebird-api-token | Yes | No | No |
Meta access token | Meta access token | Yes | No | No |
New Relic ingest browser API token | New Relic ingest browser API token | Yes | No | No |
New Relic user API ID | New Relic user API ID | Yes | No | Yes |
New Relic user API Key | New Relic user API Key | Yes | No | Yes |
npm access token | npm access token | Yes | No | Yes |
Oculus access token | Oculus access token | Yes | No | No |
Open AI API key | open ai token | Yes | No | No |
Password in URL | Password in URL | Yes | No | No |
PGP private key | PGP private key | Yes | No | No |
PKCS8 private key | PKCS8 private key | Yes | No | No |
Planetscale API token | Planetscale API token | Yes | No | No |
Planetscale password | Planetscale password | Yes | No | No |
Postman API token | Postman API token | Yes | No | No |
Pulumi API token | Pulumi API token | Yes | No | No |
PyPI upload token | PyPI upload token | Yes | No | Yes |
RSA private key | RSA private key | Yes | No | No |
Rubygem API token | Rubygem API token | Yes | No | Yes |
Segment Public API token | Segment Public API token | Yes | No | Yes |
Sendgrid API token | Sendgrid API token | Yes | No | Yes |
Sendinblue API token | Sendinblue API token | Yes | No | No |
Sendinblue SMTP token | Sendinblue SMTP token | Yes | No | No |
Shippo API token | Shippo API token | Yes | No | No |
Shopify access token | Shopify access token | Yes | No | Yes |
Shopify custom app access token | Shopify custom app access token | Yes | No | Yes |
Shopify private app access token | Shopify private app access token | Yes | No | Yes |
Shopify shared secret | Shopify shared secret | Yes | No | Yes |
Slack token | Slack token | Yes | No | Yes |
Slack Webhook | Slack Webhook | Yes | No | No |
SSH (DSA) private key | SSH (DSA) private key | Yes | No | No |
SSH (EC) private key | SSH (EC) private key | Yes | No | No |
SSH private key | SSH private key | Yes | No | No |
Stripe | Stripe | Yes | No | Yes |
systemd machine-id | systemd-machine-id | Yes | No | No |
Tailscale keys | Tailscale key | Yes | No | No |
Twilio API Key | Twilio API Key | Yes | No | No |
Twitch API token | Twitch API token | Yes | No | No |
Twitter token | Twitter token | Yes | No | No |
Typeform API token | Typeform API token | Yes | No | No |
Yandex.Cloud AWS API compatible Access Secret | Yandex.Cloud AWS API compatible Access Secret | Yes | No | No |
Yandex.Cloud IAM API key v1 | Yandex.Cloud IAM Cookie v1 - 3 | Yes | No | No |
Yandex.Cloud IAM Cookie v1 | Yandex.Cloud IAM Cookie v1 - 1 | Yes | No | No |
Yandex.Cloud IAM Token v1 | Yandex.Cloud IAM Cookie v1 - 2 | Yes | No | No |
Docs
Edit this page to fix an error or add an improvement in a merge request.
Create an issue to suggest an improvement to this page.
Product
Create an issue if there's something you don't like about this feature.
Propose functionality by submitting a feature request.
Feature availability and product trials
View pricing to see all GitLab tiers and features, or to upgrade.
Try GitLab for free with access to all features for 30 days.
Get help
If you didn't find what you were looking for, search the docs.
If you want help with something specific and could use community support, post on the GitLab forum.
For problems setting up or using this feature (depending on your GitLab subscription).
Request support