Knowledge File / AI技能杠杆
秘密扫描检测器类型名称更清晰
GitHub 更新秘密扫描检测器名称,区分提供者秘密和通用秘密,检测逻辑不变,文档和 API 无影响。
SOURCE / AI技能杠杆
MIN / 4
ACCESS / 会员
POST / 2026-07-11 04:06:10
原贴
查看原文原文
To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same. All existing product documentation links continue to work. We’ve added redirects and updated the terminology across our documentation. There are no changes to webhook events, audit log events, or the REST API. There are two kinds of secrets we detect: Provider secrets are issued by a specific service (e.g., an AWS key, a Stripe token). Generic secrets aren’t tied to any provider (e.g., private keys, connection strings, passwords). Patterns use deterministic detection (i.e., regular expressions combined with additional checks like entropy analysis). Patterns reliably catch secrets with a recognizable structure and include both provider patterns for provider secrets, as well as generic patterns like private keys and connection strings. AI-detected secrets use AI to catch generic secrets that don’t follow a predictable format (e.g., passwords). The model reads the surrounding code to find harder-to-detect unstructured secrets. Learn more about secret scanning and see the full list of supported secrets in our documentation. Let us know what you think in the community discussion .
中文翻译
为了使秘密扫描更容易理解,我们正在更新检测器类型的名称,以更好地反映每种类型如何发现秘密。这只是名称变更;检测行为完全相同。所有现有产品文档链接继续有效。我们在文档中增加了重定向并更新了术语。Webhook 事件、审计日志事件或 REST API 没有变化。我们检测两种秘密:提供者秘密由特定服务发出(例如 AWS 密钥、Stripe 令牌)。通用秘密不与任何提供者关联(例如私钥、连接字符串、密码)。模式使用确定性检测(即正则表达式结合熵分析等额外检查)。模式可靠地捕获具有可识别结构的秘密,包括针对提供者秘密的提供者模式,以及私钥和连接字符串等通用模式。AI 检测的秘密使用 AI 捕获不遵循可预测格式的通用秘密(例如密码)。模型读取周围代码以发现更难检测的非结构化秘密。了解更多关于秘密扫描的信息,并在我们的文档中查看支持的秘密完整列表。在社区讨论中告诉我们您的想法。
核心信息
GitHub 更新秘密扫描检测器名称,区分提供者秘密和通用秘密,检测逻辑不变,文档和 API 无影响。
- GitHub 更新秘密扫描检测器名称,区分提供者秘密和通用秘密,检测逻辑不变,文档和 API 无影响。
- 原贴提到:To make secret scanning easier to understand, we’re updating the names w
- 来源:github.blog
试看内容
成为会员查看完整内容
你已经看到了这篇内容的前置整理,剩余深度部分仅对会员开放。
详细解读
信息差价值
参考来源
成为会员查看完整内容