Detected secrets

  • Tier: Free, Premium, Ultimate
  • Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated

This table lists the secrets detected by:

  • Pipeline secret detection
  • Client-side secret detection
  • Secret push protection
DescriptionIDPipeline secret detectionClient-side secret detectionSecret push protection
Adobe Client ID (OAuth Web)Adobe Client ID (OAuth Web)check-circle Yesdotted-circle Nodotted-circle No
Adobe Client SecretAdobe Client Secretcheck-circle Yesdotted-circle Nodotted-circle No
Age secret keyAge secret keycheck-circle Yesdotted-circle Nodotted-circle No
Alibaba AccessKey IDAlibaba AccessKey IDcheck-circle Yesdotted-circle Nodotted-circle No
Alibaba Secret KeyAlibaba Secret Keycheck-circle Yesdotted-circle Nodotted-circle No
Anthropic keysanthropic_keycheck-circle Yescheck-circle Yesdotted-circle No
Asana Client IDAsana Client IDcheck-circle Yesdotted-circle Nodotted-circle No
Asana Client SecretAsana Client Secretcheck-circle Yesdotted-circle Nodotted-circle No
Atlassian API tokenAtlassian API tokencheck-circle Yesdotted-circle Nodotted-circle No
AWS Access TokenAWScheck-circle Yesdotted-circle Nocheck-circle Yes
Beamer API tokenBeamer API tokencheck-circle Yesdotted-circle Nodotted-circle No
Bitbucket client IDBitbucket client IDcheck-circle Yesdotted-circle Nodotted-circle No
Bitbucket client secretBitbucket client secretcheck-circle Yesdotted-circle Nodotted-circle No
CircleCI access tokensCircleCI access tokenscheck-circle Yesdotted-circle Nodotted-circle No
Clojars API tokenClojars API tokencheck-circle Yesdotted-circle Nodotted-circle No
Contentful delivery API tokenContentful delivery API tokencheck-circle Yesdotted-circle Nodotted-circle No
Contentful preview API tokenContentful preview API tokencheck-circle Yesdotted-circle Nodotted-circle No
Databricks API tokenDatabricks API tokencheck-circle Yesdotted-circle Nodotted-circle No
DigitalOcean OAuth Access Tokendigitalocean-access-tokencheck-circle Yesdotted-circle Nodotted-circle No
DigitalOcean OAuth Refresh Tokendigitalocean-refresh-tokencheck-circle Yesdotted-circle Nodotted-circle No
DigitalOcean Personal Access Tokendigitalocean-patcheck-circle Yesdotted-circle Nodotted-circle No
Discord API keyDiscord API keycheck-circle Yesdotted-circle Nodotted-circle No
Discord client IDDiscord client IDcheck-circle Yesdotted-circle Nodotted-circle No
Discord client secretDiscord client secretcheck-circle Yesdotted-circle Nodotted-circle No
Doppler API tokenDoppler API tokencheck-circle Yesdotted-circle Nodotted-circle No
Dropbox API secret/keyDropbox API secret/keycheck-circle Yesdotted-circle Nodotted-circle No
Dropbox long lived API tokenDropbox long lived API tokencheck-circle Yesdotted-circle Nodotted-circle No
Dropbox short lived API tokenDropbox short lived API tokencheck-circle Yesdotted-circle Nodotted-circle No
Duffel API tokenDuffel API tokencheck-circle Yesdotted-circle Nodotted-circle No
Dynatrace API tokenDynatrace API tokencheck-circle Yesdotted-circle Nodotted-circle No
EasyPost API tokenEasyPost API tokencheck-circle Yesdotted-circle Nodotted-circle No
EasyPost test API tokenEasyPost test API tokencheck-circle Yesdotted-circle Nodotted-circle No
Facebook tokenFacebook tokencheck-circle Yesdotted-circle Nodotted-circle No
Fastly API tokenFastly API tokencheck-circle Yesdotted-circle Nodotted-circle No
Finicity API tokenFinicity API tokencheck-circle Yesdotted-circle Nodotted-circle No
Finicity client secretFinicity client secretcheck-circle Yesdotted-circle Nodotted-circle No
Flutterwave encrypted keyFlutterwave encrypted keycheck-circle Yesdotted-circle Nodotted-circle No
Flutterwave public keyFlutterwave public keycheck-circle Yesdotted-circle Nodotted-circle No
Flutterwave secret keyFlutterwave secret keycheck-circle Yesdotted-circle Nodotted-circle No
Frame.io API tokenFrame.io API tokencheck-circle Yesdotted-circle Nodotted-circle No
GCP API keysGCP API keycheck-circle Yesdotted-circle Nocheck-circle Yes
GCP OAuth client secretGCP OAuth client secretcheck-circle Yesdotted-circle Nocheck-circle Yes
GitHub App TokenGitHub App Tokencheck-circle Yesdotted-circle Nocheck-circle Yes
GitHub OAuth Access TokenGitHub OAuth Access Tokencheck-circle Yesdotted-circle Nocheck-circle Yes
GitHub Personal Access TokenGitHub Personal Access Tokencheck-circle Yesdotted-circle Nocheck-circle Yes
GitHub Refresh TokenGitHub Refresh Tokencheck-circle Yesdotted-circle Nocheck-circle Yes
GitLab Agent for Kubernetes tokengitlab_kubernetes_agent_tokencheck-circle Yescheck-circle Yescheck-circle Yes
GitLab CI Build (Job) tokengitlab_ci_build_tokencheck-circle Yescheck-circle Yesdotted-circle No
GitLab Deploy Tokengitlab_deploy_tokencheck-circle Yescheck-circle Yesdotted-circle No
GitLab Feature Flags Client TokenNonedotted-circle Nocheck-circle Yesdotted-circle No
GitLab Feed Tokengitlab_feed_tokencheck-circle Yesdotted-circle Nodotted-circle No
GitLab Feed Tokengitlab_feed_token_v2check-circle Yescheck-circle Yescheck-circle Yes
GitLab Incoming email tokengitlab_incoming_email_tokencheck-circle Yescheck-circle Yescheck-circle Yes
GitLab OAuth Application Secretsgitlab_oauth_app_secretcheck-circle Yescheck-circle Yescheck-circle Yes
GitLab Personal Access Tokengitlab_personal_access_tokencheck-circle Yescheck-circle Yescheck-circle Yes
GitLab Pipeline Trigger Tokengitlab_pipeline_trigger_tokencheck-circle Yescheck-circle Yescheck-circle Yes
GitLab Runner Authentication Tokengitlab_runner_auth_tokencheck-circle Yescheck-circle Yescheck-circle Yes
GitLab Runner Registration Tokengitlab_runner_registration_tokencheck-circle Yesdotted-circle Nocheck-circle Yes
GitLab SCIM tokengitlab_scim_oauth_tokencheck-circle Yesdotted-circle Nodotted-circle No
GoCardless API tokenGoCardless API tokencheck-circle Yesdotted-circle Nodotted-circle No
Google (GCP) Service-accountGoogle (GCP) Service-accountcheck-circle Yesdotted-circle Nocheck-circle Yes
Grafana API tokenGrafana API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Hashicorp Terraform user/org API tokenHashicorp Terraform user/org API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Hashicorp Vault batch tokenHashicorp Vault batch tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Heroku API KeyHeroku API Keycheck-circle Yesdotted-circle Nodotted-circle No
Hubspot API tokenHubspot API tokencheck-circle Yesdotted-circle Nodotted-circle No
Instagram access tokenInstagram access tokencheck-circle Yesdotted-circle Nodotted-circle No
Intercom API tokenIntercom API tokencheck-circle Yesdotted-circle Nodotted-circle No
Intercom client secret/IDIntercom client secret/IDcheck-circle Yesdotted-circle Nodotted-circle No
Ionic API tokenIonic API tokencheck-circle Yesdotted-circle Nodotted-circle No
Linear API tokenLinear API tokencheck-circle Yesdotted-circle Nodotted-circle No
Linear client secret/IDLinear client secret/IDcheck-circle Yesdotted-circle Nodotted-circle No
Linkedin Client IDLinkedin Client IDcheck-circle Yesdotted-circle Nodotted-circle No
Linkedin Client secretLinkedin Client secretcheck-circle Yesdotted-circle Nodotted-circle No
Lob API KeyLob API Keycheck-circle Yesdotted-circle Nodotted-circle No
Lob Publishable API KeyLob Publishable API Keycheck-circle Yesdotted-circle Nodotted-circle No
Mailchimp API keyMailchimp API keycheck-circle Yesdotted-circle Nocheck-circle Yes
Mailgun private API tokenMailgun private API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Mailgun public validation keyMailgun public validation keycheck-circle Yesdotted-circle Nodotted-circle No
Mailgun webhook signing keyMailgun webhook signing keycheck-circle Yesdotted-circle Nocheck-circle Yes
Mapbox API tokenMapbox API tokencheck-circle Yesdotted-circle Nodotted-circle No
MessageBird API client IDMessageBird API client IDcheck-circle Yesdotted-circle Nodotted-circle No
MessageBird API tokenmessagebird-api-tokencheck-circle Yesdotted-circle Nodotted-circle No
Meta access tokenMeta access tokencheck-circle Yesdotted-circle Nodotted-circle No
New Relic ingest browser API tokenNew Relic ingest browser API tokencheck-circle Yesdotted-circle Nodotted-circle No
New Relic user API IDNew Relic user API IDcheck-circle Yesdotted-circle Nocheck-circle Yes
New Relic user API KeyNew Relic user API Keycheck-circle Yesdotted-circle Nocheck-circle Yes
npm access tokennpm access tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Oculus access tokenOculus access tokencheck-circle Yesdotted-circle Nodotted-circle No
Open AI API keyopen ai tokencheck-circle Yesdotted-circle Nodotted-circle No
Password in URLPassword in URLcheck-circle Yesdotted-circle Nodotted-circle No
PGP private keyPGP private keycheck-circle Yesdotted-circle Nodotted-circle No
PKCS8 private keyPKCS8 private keycheck-circle Yesdotted-circle Nodotted-circle No
Planetscale API tokenPlanetscale API tokencheck-circle Yesdotted-circle Nodotted-circle No
Planetscale passwordPlanetscale passwordcheck-circle Yesdotted-circle Nodotted-circle No
Postman API tokenPostman API tokencheck-circle Yesdotted-circle Nodotted-circle No
Pulumi API tokenPulumi API tokencheck-circle Yesdotted-circle Nodotted-circle No
PyPI upload tokenPyPI upload tokencheck-circle Yesdotted-circle Nocheck-circle Yes
RSA private keyRSA private keycheck-circle Yesdotted-circle Nodotted-circle No
Rubygem API tokenRubygem API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Segment Public API tokenSegment Public API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Sendgrid API tokenSendgrid API tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Sendinblue API tokenSendinblue API tokencheck-circle Yesdotted-circle Nodotted-circle No
Sendinblue SMTP tokenSendinblue SMTP tokencheck-circle Yesdotted-circle Nodotted-circle No
Shippo API tokenShippo API tokencheck-circle Yesdotted-circle Nodotted-circle No
Shopify access tokenShopify access tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Shopify custom app access tokenShopify custom app access tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Shopify private app access tokenShopify private app access tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Shopify shared secretShopify shared secretcheck-circle Yesdotted-circle Nocheck-circle Yes
Slack tokenSlack tokencheck-circle Yesdotted-circle Nocheck-circle Yes
Slack WebhookSlack Webhookcheck-circle Yesdotted-circle Nodotted-circle No
SSH (DSA) private keySSH (DSA) private keycheck-circle Yesdotted-circle Nodotted-circle No
SSH (EC) private keySSH (EC) private keycheck-circle Yesdotted-circle Nodotted-circle No
SSH private keySSH private keycheck-circle Yesdotted-circle Nodotted-circle No
StripeStripecheck-circle Yesdotted-circle Nocheck-circle Yes
systemd machine-idsystemd-machine-idcheck-circle Yesdotted-circle Nodotted-circle No
Tailscale keysTailscale keycheck-circle Yesdotted-circle Nodotted-circle No
Twilio API KeyTwilio API Keycheck-circle Yesdotted-circle Nodotted-circle No
Twitch API tokenTwitch API tokencheck-circle Yesdotted-circle Nodotted-circle No
Twitter tokenTwitter tokencheck-circle Yesdotted-circle Nodotted-circle No
Typeform API tokenTypeform API tokencheck-circle Yesdotted-circle Nodotted-circle No
Yandex.Cloud AWS API compatible Access SecretYandex.Cloud AWS API compatible Access Secretcheck-circle Yesdotted-circle Nodotted-circle No
Yandex.Cloud IAM API key v1Yandex.Cloud IAM Cookie v1 - 3check-circle Yesdotted-circle Nodotted-circle No
Yandex.Cloud IAM Cookie v1Yandex.Cloud IAM Cookie v1 - 1check-circle Yesdotted-circle Nodotted-circle No
Yandex.Cloud IAM Token v1Yandex.Cloud IAM Cookie v1 - 2check-circle Yesdotted-circle Nodotted-circle No