{"version":"1.0","generated_at":"2026-10-05T06:24:41.362710","id":1350,"slug":"secret-scanning-updates-june-2026","title":"趋势解读：Secret scanning updates – June 2026，提升开发者接入体验","summary":"GitHub秘密扫描功能更新，新增合作伙伴和检测器，默认推送保护更多模式，提供有效性检查和丰富元数据，提升开发者接入体验。","abstract":"趋势解读：Secret scanning updates – June 2026，提升开发者接入体验 GitHub秘密扫描功能更新，新增合作伙伴和检测器，默认推送保护更多模式，提供有效性检查和丰富元数据，提升开发者接入体验。 新增Cloudsmith和Meraki等合作伙伴 默认推送保护覆盖更多模式 新增有效性检查，判断凭证是否有效 扩展元数据提供更丰富上下文 提升开发者安全接入体验 自上次模式更新以来，我们与新合作伙伴扩大了秘密扫描的检测覆盖范围，默认情况下推送保护阻止了更多模式，进行了额外的有效性检查，并为泄露的秘密提供了更丰富的元数据。秘密扫描现在会自动检测存储库中的以下新秘密类型。此版本添加了两个新的合作伙伴（Cloudsmith 和 Meraki），显着扩展了 GitLab 令牌覆盖范围，并添加了 Elastic、Slack、Supabase、DataDog 和 VolcEngine 的检测器。当通过秘密扫描合作伙伴计划在公共存储库中发现合作伙伴秘密时，会自动将合作伙伴秘密报告给秘密发布者。当在公共或私人存储库中发现用户机密时，会生成秘密扫描警报。默认情况下，以下检测器现在包含在推送保护中。启用秘密扫描的存储库（包括免费公共存储库）将自动阻止包含这些秘密的提交。默认情况下尚未启用的模式仍然可以在推送保护设置中进行配置。这些模式现在支持有效性检查，因此警报会告诉您泄露的凭据是否仍然有效，并帮助您确定修复的优先级。这些模式现在包括检测到的扩展元数据，提供有关泄露秘密的更丰富的上下文。了解有关秘密扫描的更多信息，并在我们的文档中查看支持的秘密的完整列表。让我们知道您在社区…","access_level":"public","access_label":"公开","access_mode":"full","is_preview":false,"canonical_url":"https://opc.beizhux.com/content/1350/secret-scanning-updates-june-2026","html_url":"https://opc.beizhux.com/content/1350/secret-scanning-updates-june-2026","json_url":"https://opc.beizhux.com/content/1350/secret-scanning-updates-june-2026.json","published_at":"2026-06-18T03:23:42","updated_at":"2026-10-05T05:42:45","category":{"slug":"hotspots","name":"全球热点解读"},"source":{"site":"github.blog","author":"Allison","url":"https://github.blog/changelog/2026-06-17-secret-scanning-updates-june-2026"},"tags":["AI","GitHub","GitHub Changelog","安全","开发者工具","更新","秘密扫描"],"topics":[{"slug":"ai-daily","name":"AI日报","url":"https://opc.beizhux.com/topics/ai-daily","reason":"这篇内容命中「热点解读」等主题信号。"},{"slug":"ai-tools","name":"AI工具","url":"https://opc.beizhux.com/topics/ai-tools","reason":"这篇内容命中「工具」等主题信号。"},{"slug":"agent-workflow","name":"Agent工作流","url":"https://opc.beizhux.com/topics/agent-workflow","reason":"这篇内容来自该专题长期覆盖的栏目。"}],"keywords":["全球热点解读","AI日报","AI工具","Agent工作流","每日AI日报","AI信号","热点解读","BuilderPulse","工具","自动化","模型","Cursor"],"questions":[{"question":"趋势解读：Secret scanning updates – June 2026，提升开发者接入体验主要讲什么？","answer":"GitHub秘密扫描功能更新，新增合作伙伴和检测器，默认推送保护更多模式，提供有效性检查和丰富元数据，提升开发者接入体验。"},{"question":"这篇文章最值得关注的要点是什么？","answer":"GitHub秘密扫描功能更新，新增合作伙伴和检测器，默认推送保护更多模式，提供有效性检查和丰富元数据，提升开发者接入体验。；新增Cloudsmith和Meraki等合作伙伴；默认推送保护覆盖更多模式；新增有效性检查，判断凭证是否有效"},{"question":"这篇文章和哪些AI专题相关？","answer":"它适合放在AI日报、AI工具、Agent工作流专题里阅读。 关联原因：这篇内容命中「热点解读」等主题信号。；这篇内容命中「工具」等主题信号。；这篇内容来自该专题长期覆盖的栏目。"},{"question":"阅读这篇文章建议先理解哪些关键词？","answer":"建议先理解AI日报、每日AI日报、AI信号、热点解读、BuilderPulse这些关键词，再结合正文判断工具、机会或风险是否值得进入自己的工作流。"}],"terms":[{"slug":"ai-daily-term","name":"AI日报","definition":"在AI觉醒星球里，「AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-daily-term","path":"/glossary/ai-daily-term","json_url":"https://opc.beizhux.com/glossary/ai-daily-term.json"},{"slug":"daily-ai-briefing","name":"每日AI日报","definition":"在AI觉醒星球里，「每日AI日报」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/daily-ai-briefing","path":"/glossary/daily-ai-briefing","json_url":"https://opc.beizhux.com/glossary/daily-ai-briefing.json"},{"slug":"ai-signal","name":"AI信号","definition":"在AI觉醒星球里，「AI信号」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-signal","path":"/glossary/ai-signal","json_url":"https://opc.beizhux.com/glossary/ai-signal.json"},{"slug":"ai-news-analysis","name":"热点解读","definition":"在AI觉醒星球里，「热点解读」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/ai-news-analysis","path":"/glossary/ai-news-analysis","json_url":"https://opc.beizhux.com/glossary/ai-news-analysis.json"},{"slug":"builderpulse","name":"BuilderPulse","definition":"在AI觉醒星球里，「BuilderPulse」属于「AI日报」方向。持续整理每日AI日报、模型更新、工具变化和行业信号，帮你快速判断哪些信息值得收藏、验证和行动。 每天先看趋势，再决定今天该试什么。","topic_slug":"ai-daily","topic_name":"AI日报","topic_title":"AI日报：每日AI信号、工具动态与行动判断","topic_url":"https://opc.beizhux.com/topics/ai-daily","topic_path":"/topics/ai-daily","url":"https://opc.beizhux.com/glossary/builderpulse","path":"/glossary/builderpulse","json_url":"https://opc.beizhux.com/glossary/builderpulse.json"},{"slug":"ai-tools-term","name":"AI工具","definition":"在AI觉醒星球里，「AI工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/ai-tools-term","path":"/glossary/ai-tools-term","json_url":"https://opc.beizhux.com/glossary/ai-tools-term.json"},{"slug":"tools","name":"工具","definition":"在AI觉醒星球里，「工具」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/tools","path":"/glossary/tools","json_url":"https://opc.beizhux.com/glossary/tools.json"},{"slug":"automation","name":"自动化","definition":"在AI觉醒星球里，「自动化」属于「AI工具」方向。围绕AI工具、模型能力、自动化流程和真实使用场景做整理，优先关注能提升效率、降低成本和创造新交付的工具。 不只看工具热度，更看它能不能进入真实流程。","topic_slug":"ai-tools","topic_name":"AI工具","topic_title":"AI工具：模型、插件、自动化与实战场景","topic_url":"https://opc.beizhux.com/topics/ai-tools","topic_path":"/topics/ai-tools","url":"https://opc.beizhux.com/glossary/automation","path":"/glossary/automation","json_url":"https://opc.beizhux.com/glossary/automation.json"}],"preview_hidden_sections":[],"related_items":[{"id":3215,"title":"LMSYS 发布开源聊天模型 Vicuna-13B，用 ShareGPT 对话微调 LLaMA，训练成本约 $300","url":"https://opc.beizhux.com/content/3215/lmsys-vicuna-13b-sharegpt-llama-300","summary":"LMSYS 发布 Vicuna-13B，用约 70K ShareGPT 对话微调 LLaMA，训练成本约 $300，代码、权重和 demo 以非商业许可公开。GPT-4 初步评审称其达到 ChatGPT/Bard 90% 以上质量，45% 问题不逊于 ChatGPT，但评测尚非严谨方法。","access_level":"public"},{"id":3222,"title":"Mo Gawdat 谈 AI 与人类未来","url":"https://opc.beizhux.com/content/3222/mo-gawdat-ai","summary":"前 Google 高管 Mo Gawdat 认为，AI 不是人类的终结，反而可能是救赎；人类的问题不是太聪明，而是智能有限，有限智能已足以制造大量麻烦。","access_level":"public"},{"id":3231,"title":"【必读】每日AI日报 2026-10-04","url":"https://opc.beizhux.com/content/3231/aihot-daily-2026-10-04","summary":"AIHOT 每日 AI 日报：模型发布/更新： - LMSYS 发布开源聊天模型 Vicuna-13B，用 ShareGPT 对话微调 LLaMA，训练成本约 $300：LMSYS 团队发布 Vicuna-13B，通过约 70K ShareGPT 用户共享对话微调 LLaMA，训练成本约 $300，代码、权重和在线…","access_level":"public"}],"usage_policy":{"summarizable":true,"preferred_url":"https://opc.beizhux.com/content/1350/secret-scanning-updates-june-2026","private_fields_excluded":true}}