GitHub Secret Scanning Vendor Patterns

Data accurate as of 2024-05-29
Taken from the official GitHub provider patterns list (raw data)

ProviderSecret nameShort nameEnterprise Server versionsVendor tipsUser alertsPush protectionValidity check on GHEC
Adafruit IOAdafruit IO Keyadafruit_io_key>=3.5✔✔✔✔
AdobeAdobe Client Secretadobe_client_secret>=3.11✔✔✔✘
AdobeAdobe Device Tokenadobe_device_token*✔✔✔✘
AdobeAdobe PAC Tokenadobe_pac_token>=3.11✔✔✔✘
AdobeAdobe Refresh Tokenadobe_refresh_token>=3.11✔✔✔✘
AdobeAdobe Service Tokenadobe_service_token*✔✔✔✘
AdobeAdobe Short-Lived Access Tokenadobe_short_lived_access_token*✔✔✔✘
AivenAiven Auth Tokenaiven_auth_token>3.9✔✔✔✘
AivenAiven Service Passwordaiven_service_password>3.9✔✔✔✘
Alibaba CloudAlibaba Cloud Access Key ID with Alibaba Cloud Access Key Secretalibaba_cloud_access_key_id </br>alibaba_cloud_access_key_secret>=3.5✔✔✔✘
Login with AmazonLogin with Amazon OAuth Client ID with Login with Amazon OAuth Client Secretamazon_oauth_client_id </br>amazon_oauth_client_secret>=3.5✔✔✔✘
Amazon Web Services (AWS)Amazon AWS Access Key ID with Amazon AWS Secret Access Keyaws_access_key_id </br>aws_secret_access_key>=3.5✔✔✔✔
Amazon Web Services (AWS)Amazon AWS Session Token with Amazon AWS Temporary Access Key ID and Amazon AWS Secret Access Keyaws_session_token </br>aws_temporary_access_key_id </br>aws_secret_access_key>=3.5✘✔✔✔
AnthropicAnthropic API Keyanthropic_api_key>=3.12✔✔✔✘
AsanaAsana Personal Access Tokenasana_personal_access_token>=3.5✘✔✔✘
AtlassianAtlassian API Tokenatlassian_api_token*✔✔✘✘
AtlassianAtlassian JSON Web Tokenatlassian_jwt*✔✔✘✘
AtlassianBitbucket Server Personal Access Tokenbitbucket_server_personal_access_token>=3.5✘✔✔✘
AuthressAuthress Service Client Access Keyauthress_service_client_access_key>=3.11✘✔✔✘
AzureMicrosoft Entra ID Secretazure_active_directory_application_secret>=3.5✔✔✔✘
AzureAzure Batch Key Identifiableazure_batch_key_identifiable>3.8✔✔✔✘
AzureAzure Cache for Redis Access Keyazure_cache_for_redis_access_key>=3.5✘✔✔✘
AzureAzure Container Registry Key Identifiableazure_container_registry_key_identifiable>=3.11✔✔✔✘
AzureAzure CosmosDB Key Identifiableazure_cosmosdb_key_identifiable>3.8✔✔✔✘
AzureAzure DevOps Personal Access Tokenazure_devops_personal_access_token>=3.5✔✔✔✘
AzureAzure Function Keyazure_function_key>=3.5✔✔✔✘
AzureAzure ML Studio (classic) Web Service Keyazure_ml_web_service_classic_identifiable_key>3.8✔✔✔✘
AzureAzure SAS Tokenazure_sas_token*✔✔✘✘
AzureAzure Search Admin Keyazure_search_admin_key>3.8✔✔✔✘
AzureAzure Search Query Keyazure_search_query_key>3.8✔✔✔✘
AzureAzure Service Management Certificateazure_management_certificate*✔✔✘✘
AzureAzure SQL Connection Stringazure_sql_connection_string*✔✔✘✘
AzureAzure SQL Passwordazure_sql_password>=3.11✔✔✔✘
AzureAzure Storage Account Keyazure_storage_account_key>3.6✔✔✔✘
BaiduBaidu Cloud API Access Keybaiducloud_api_accesskey>=3.11✔✔✔✘
BeamerBeamer API Keybeamer_api_key*✘✔✘✘
Beijing Volcano Engine TechnologyVolcEngine Access Key IDvolcengine_access_key_id>=3.12✔✔✔✘
Canadian Digital ServiceCDS Canada Notify API Keycds_canada_notify_api_key>=3.9✔✔✔✘
CanvaCanva Connect API Secretcanva_connect_api_secret>=3.12✔✔✔✘
Cashfreecashfree_api_keyCashfree API Key>=3.12✘✔✔✘
Checkout.comCheckout.com Production Secret Keycheckout_production_secret_key>=3.5✔✔✔✘
Checkout.comCheckout.com Test Secret Keycheckout_test_secret_key*✔✔✘✘
Chief ToolsChief Tools Tokenchief_tools_token>3.7✔✔✔✘
CircleCICircleCI Personal Access Tokencircleci-pat>=3.12✔✔✔✘
CircleCICircleCI Project Access Tokencircleci-prj>=3.12✔✔✔✘
ClojarsClojars Deploy Tokenclojars_deploy_token>=3.5✔✔✔✘
CloudBees CodeShipCloudBees CodeShip Credentialcodeship_credential*✔✔✘✘
ContentfulContentful Personal Access Tokencontentful_personal_access_token*✘✔✘✘
Contributed SystemsContributed Systems CredentialsCONTRIBUTED_SYSTEMS_CREDENTIALS✘✔✘✘✘
crates.io (Rust Foundation)Crates.io API Tokencratesio_api_token>=3.9✔✔✔✘
DatabricksDatabricks Access Tokendatabricks_access_token>=3.5✔✔✔✘
DatadogDatadog API KeyDATADOG_API_KEY✘✔✘✘✘
DefinedDefined Networking Nebula API Keydefined_networking_nebula_api_key>=3.10✔✔✔✘
DevCycleDevCycle Client API Keydevcycle_client_api_key>3.8✔✔✔✘
DevCycleDevCycle Mobile API Keydevcycle_mobile_api_key>3.8✘✔✔✘
DevCycleDevCycle Server API Keydevcycle_server_api_key>3.8✔✔✔✘
DigitalOceanDigitalOcean OAuth Tokendigitalocean_oauth_token>=3.5✔✔✔✘
DigitalOceanDigitalOcean Personal Access Tokendigitalocean_personal_access_token>=3.5✔✔✔✘
DigitalOceanDigitalOcean Refresh Tokendigitalocean_refresh_token>=3.5✔✔✔✘
DigitalOceanDigitalOcean System Tokendigitalocean_system_token>=3.5✔✔✔✘
DiscordDiscord API Token V2discord_api_token_v2>3.7✘✔✔✔
DiscordDiscord Bot Tokendiscord_bot_token>=3.5✔✔✔✔
DockerDocker Personal Access Tokendocker_personal_access_token>=3.12✔✔✔✘
DopplerDoppler Audit Tokendoppler_audit_token>=3.5✔✔✔✘
DopplerDoppler CLI Tokendoppler_cli_token>=3.5✔✔✔✘
DopplerDoppler Personal Tokendoppler_personal_token>=3.5✔✔✔✘
DopplerDoppler SCIM Tokendoppler_scim_token>=3.5✔✔✔✘
DopplerDoppler Service Tokendoppler_service_token>=3.5✔✔✔✘
DopplerDoppler Service Account Tokendoppler_service_account_token>=3.9✔✔✔✘
DropboxDropbox Access Tokendropbox_access_token*✔✔✘✘
DropboxDropbox Short Lived Access Tokendropbox_short_lived_access_token>=3.5✔✔✔✔
DuffelDuffel Live Access Tokenduffel_live_access_token>=3.5✘✔✔✘
DuffelDuffel Test Access Tokenduffel_test_access_token*✘✔✘✘
DynatraceDynatrace Access Tokendynatrace_access_token*✔✔✘✘
DynatraceDynatrace Internal Tokendynatrace_internal_token*✔✔✘✘
EasyPostEasyPost Production API Keyeasypost_production_api_key>=3.5✘✔✔✘
EasyPostEasyPost Test API Keyeasypost_test_api_key*✘✔✘✘
eBayeBay Production Client ID (App ID) with eBay Production Client Secret (Cert ID)ebay_production_client_id </br>ebay_production_client_secret>3.8✘✔✘✘
eBayeBay Sandbox Client ID (App ID) with eBay Sandbox Client Secret (Cert ID)ebay_sandbox_client_id </br>ebay_sandbox_client_secret>3.8✘✔✘✘
FastlyFastly API Tokenfastly_api_token*✘✔✘✘
FigmaFigma Personal Access Tokenfigma_pat>3.7✔✔✔✘
FinicityFinicity App Keyfinicity_app_key*✔✔✘✘
FlutterwaveFlutterwave Live API Secret Keyflutterwave_live_api_secret_key>=3.5✘✔✔✘
FlutterwaveFlutterwave Test API Secret Keyflutterwave_test_api_secret_key*✘✔✘✘
Frame.ioFrame.io Developer Tokenframeio_developer_token*✔✔✘✘
Frame.ioFrame.io JSON Web Tokenframeio_jwt*✔✔✘✘
FullStoryFullStory API Keyfullstory_api_key>=3.5✔✔✔✘
GitHubGitHub App Installation Access Tokengithub_app_installation_access_token>=3.5✔✔✔✔
GitHubGitHub OAuth Access Tokengithub_oauth_access_token>=3.5✔✔✔✔
GitHubGitHub Personal Access Tokengithub_personal_access_token>=3.5✔✔✔✔
GitHubGitHub Refresh Tokengithub_refresh_token>=3.5✔✔✔✔
GitHubGitHub SSH Private Keygithub_ssh_private_key>=3.5✔✔✔✔
GitLabGitLab Access Tokengitlab_access_token*✘✔✘✘
GoCardlessGoCardless Live Access Tokengocardless_live_access_token*✔✔✘✘
GoCardlessGoCardless Sandbox Access Tokengocardless_sandbox_access_token*✔✔✘✘
GoogleFirebase Cloud Messaging Server Keyfirebase_cloud_messaging_server_key*✘✔✘✘
GoogleGoogle Cloud Storage Service Account Access Key ID with Google Cloud Storage Access Key Secretgoogle_cloud_storage_service_account_access_key_id </br>google_cloud_storage_access_key_secret>=3.5✘✔✔✘
GoogleGoogle Cloud Storage User Access Key ID with Google Cloud Storage Access Key Secretgoogle_cloud_storage_user_access_key_id </br>google_cloud_storage_access_key_secret>=3.5✘✔✔✘
GoogleGoogle OAuth Access Tokengoogle_oauth_access_token*✘✔✘✔
GoogleGoogle OAuth Client ID with Google OAuth Client Secretgoogle_oauth_client_id </br>google_oauth_client_secret>=3.5✘✔✔✘
GoogleGoogle OAuth Refresh Tokengoogle_oauth_refresh_token*✘✔✘✘
Google CloudGoogle API Keygoogle_api_key*✔✔✘✔
Google CloudGoogle Cloud Private Key IDgoogle_cloud_private_key_id<3.13✔✔✔✘
Google CloudGoogle Cloud Service Account Credentialsgoogle_cloud_service_account_credentials>=3.13✔✔✔✔
GrafanaGrafana Cloud API Keygrafana_cloud_api_key>3.7✔✔✔✘
GrafanaGrafana Cloud API Tokengrafana_cloud_api_token>3.7✔✔✔✘
GrafanaGrafana Project API Keygrafana_project_api_key>3.7✔✔✔✘
GrafanaGrafana Project Service Account Tokengrafana_project_service_account_token>3.7✔✔✔✘
HashiCorpHashiCorp Vault Batch Token (v1.10.0+)hashicorp_vault_batch_token>3.8✘✔✔✘
HashiCorpHashiCorp Vault Root Service Token (v1.10.0+)hashicorp_vault_root_service_token>3.8✘✔✔✘
HashiCorpHashiCorp Vault Service Token (v1.10.0+)hashicorp_vault_service_token>3.8✘✔✔✘
Hashicorp TerraformTerraform Cloud / Enterprise API Tokenterraform_api_token*✔✔✔✘
HighnoteHighnote RK Live Keyhighnote_rk_live_key>3.9✔✔✔✘
HighnoteHighnote RK Test Keyhighnote_rk_test_key>3.9✔✔✔✘
HighnoteHighnote SK Live Keyhighnote_sk_live_key>3.9✔✔✔✘
HighnoteHighnote SK Test Keyhighnote_sk_test_key>3.9✔✔✔✘
HopHop Bearerhop_bearer>=3.11✔✔✔✘
HopHop Personal Access Tokenhop_pat>=3.11✔✔✔✘
HopHop PTKhop_ptk>=3.11✔✔✔✘
HubspotHubspot API Keyhubspot_api_key>=3.5✔✔✔✘
HubspotHubspot API Personal Access Keyhubspot_api_personal_access_key>3.7✔✔✔✘
IntercomIntercom Access Tokenintercom_access_token>=3.5✘✔✔✘
IonicIonic Personal Access Tokenionic_personal_access_token>=3.5✔✔✔✘
IonicIonic Refresh Tokenionic_refresh_token>=3.5✔✔✔✘
JD CloudJD Cloud Access Keyjd_cloud_access_key>3.4✔✔✘✘
JFrogJFrog Platform Access Tokenjfrog_platform_access_token>3.6✘✔✔✘
JFrogJFrog Platform API Keyjfrog_platform_api_key>3.6✘✔✔✘
JFrogJFrog Platform Reference Tokenjfrog_platform_reference_token>3.10✘✔✔✘
LightspeedLightspeed X-Series Personal Access Tokenlightspeed-xs-pat>=3.12✘✔✘✘
LinearLinear API Keylinear_api_key>=3.5✔✔✔✘
LinearLinear OAuth Access Tokenlinear_oauth_access_token>=3.5✔✔✔✘
LobLob Live API Keylob_live_api_key*✘✔✘✘
LobLob Test API Keylob_test_api_key*✘✔✘✘
LocalStackLocalStack API Keylocalstack_api_key>3.7✔✔✘✘
LogicMonitorLogicMonitor Bearer Tokenlogicmonitor_bearer_token>3.8✔✔✔✘
LogicMonitorLogicMonitor LMV1 Access Keylogicmonitor_lmv1_access_key>3.8✔✔✔✘
MailchimpMailchimp API Keymailchimp_api_key*✔✔✘✔
MailchimpMandrill API KeyMANDRILL_API✘✔✘✘✘
MailgunMailgun API Keymailgun_api_key*✔✔✘✔
MapboxMapbox Secret Access Tokenmapbox_secret_access_token*✘✔✘✘
MaxmindMaxmind License Keymaxmind_license_key>=3.11✔✔✔✘
MercuryMercury Non-Production API Tokenmercury_non_production_api_token>=3.10✘✔✘✘
MercuryMercury Production API Tokenmercury_production_api_token>=3.10✘✔✘✘
MergifyMergify Application Keymergify_application_key>=3.12✔✔✔✘
MessageBirdMessageBird API Keymessagebird_api_key*✔✔✘✘
MetaFacebook Access Tokenfacebook_access_token*✔✔✘✘
MidtransMidtrans Production Server Keymidtrans_production_server_key>=3.5✘✔✔✘
MidtransMidtrans Sandbox Server Keymidtrans_sandbox_server_key*✘✔✘✘
New RelicNew Relic Insights Query Keynew_relic_insights_query_key>=3.5✘✔✔✘
New RelicNew Relic License Keynew_relic_license_key*✘✔✘✘
New RelicNew Relic Personal API Keynew_relic_personal_api_key>=3.5✘✔✔✘
New RelicNew Relic REST API Keynew_relic_rest_api_key>=3.5✘✔✔✘
NotionNotion Integration Tokennotion_integration_token*✘✔✘✔
NotionNotion OAuth Client Secretnotion_oauth_client_secret*✘✔✘✘
npmnpm Access Tokennpm_access_token>=3.5✔✔✔✘
NuGetNuGet API Keynuget_api_key>=3.5✔✔✔✔
Octopus DeployOctopus Deploy API Keyoctopus_deploy_api_key*✔✔✘✘
OculusOculus Very Tiny Encrypted Sessionoculus_very_tiny_encrypted_session>3.9✘✔✘✘
OneChronosOneChronos API Tokenonechronos_api_key>=3.10✘✔✔✘
OneChronosOneChronos Expressive Bidding API Keyonechronos_eb_api_key>=3.10✘✔✔✘
OneChronosOneChronos Expressive Bidding Encryption Keyonechronos_eb_encryption_key>=3.10✘✔✔✘
OneChronosOneChronos OAuth Tokenonechronos_oauth_token>=3.10✘✔✔✘
OneChronosOneChronos Refresh Tokenonechronos_refresh_token>=3.10✘✔✔✘
OnfidoOnfido Live API Tokenonfido_live_api_token>=3.5✔✔✔✘
OnfidoOnfido Sandbox API Tokenonfido_sandbox_api_token*✔✔✘✘
OpenAIOpenAI API Keyopenai_api_key>=3.5✔✔✔✔
OpenAIOpenAI API Key V2openai_api_key_v2>=3.5✔✔✔✔
PalantirPalantir JSON Web Tokenpalantir_jwt*✔✔✔✘
PersonaPersona Production API Keypersona_production_api_key>3.7✘✔✘✘
PersonaPersona Sandbox API Keypersona_sandbox_api_key>3.7✘✔✘✘
PinterestPinterest Access Tokenpinterest_access_token>3.10✔✔✔✘
PinterestPinterest Refresh Tokenpinterest_refresh_token>3.10✔✔✔✘
PlanetScalePlanetScale Database Passwordplanetscale_database_password>=3.5✔✔✔✘
PlanetScalePlanetScale OAuth Tokenplanetscale_oauth_token>=3.5✔✔✔✘
PlanetScalePlanetScale Service Tokenplanetscale_service_token>=3.5✔✔✔✘
PlivoPlivo Auth ID with Plivo Auth Tokenplivo_auth_id </br>plivo_auth_token*✔✔✔✘
PostmanPostman API Keypostman_api_key>=3.5✔✔✔✘
PostmanPostman Collection Keypostman_collection_key>3.9✘✔✔✘
PrefectPrefect Server API Keyprefect_server_api_key>3.6✔✔✔✘
PrefectPrefect User API Keyprefect_user_api_key>3.6✘✔✔✘
PrefectPrefect User API TokenPREFECT_USER_API_TOKEN✘✔✘✘✘
ProctorioProctorio Consumer Keyproctorio_consumer_key*✔✔✘✘
ProctorioProctorio Linkage Keyproctorio_linkage_key*✔✔✘✘
ProctorioProctorio Registration Keyproctorio_registration_key*✔✔✘✘
ProctorioProctorio Secret Keyproctorio_secret_key>=3.5✔✔✔✘
PulumiPulumi Access Tokenpulumi_access_token*✔✔✘✘
PyPIPyPI API Tokenpypi_api_token*✔✔✘✘
ReadMeReadMe API Access Keyreadmeio_api_access_token>3.6✔✔✔✘
redirect.pizzaredirect.pizza API Tokenredirect_pizza_api_token>3.5✔✔✔✘
RootlyRootly API Keyrootly_api_key>3.9✔✔✔✘
RubyGemsRubyGems API Keyrubygems_api_key*✔✔✘✘
SamsaraSamsara API Tokensamsara_api_token>=3.5✔✔✔✘
SamsaraSamsara OAuth Access Tokensamsara_oauth_access_token>=3.5✔✔✔✘
SegmentSegment Public API Tokensegment_public_api_token>3.9✔✔✔✘
SendGridSendGrid API Keysendgrid_api_key>=3.5✔✔✔✔
SendinblueSendinblue API Keysendinblue_api_key>=3.5✔✔✔✘
SendinblueSendinblue SMTP Keysendinblue_smtp_key>=3.5✔✔✔✘
ShippoShippo Live API Tokenshippo_live_api_token>=3.5✘✔✔✘
ShippoShippo Test API Tokenshippo_test_api_token*✘✔✘✘
ShopifyShopify Access Tokenshopify_access_token>=3.5✔✔✔✘
ShopifyShopify App Client Credentialsshopify_app_client_credentials>3.4✘✔✘✘
ShopifyShopify App Client Secretshopify_app_client_secret>3.4✘✔✘✘
ShopifyShopify App Shared Secretshopify_app_shared_secret>=3.5✔✔✔✘
ShopifyShopify Custom App Access Tokenshopify_custom_app_access_token*✔✔✘✘
ShopifyShopify Marketplace Tokenshopify_marketplace_token>3.4✘✔✘✘
ShopifyShopify Merchant Tokenshopify_merchant_token>3.4✘✔✘✘
ShopifyShopify Partner API Tokenshopify_partner_api_token>3.4✘✔✘✘
ShopifyShopify Private App Passwordshopify_private_app_password*✔✔✘✘
SiemensSiemens Code Access Tokencode_siemens_com_token>=3.12✔✔✔✘
SlackSlack API Tokenslack_api_token>=3.5✔✔✔✔
SlackSlack Incoming Webhook URLslack_incoming_webhook_url*✔✔✘✔
SlackSlack Workflow Webhook URLslack_workflow_webhook_url*✔✔✘✘
SquareSquare Access Tokensquare_access_token*✘✔✘✘
SquareSquare Production Application Secretsquare_production_application_secret*✘✔✘✘
SquareSquare Sandbox Application Secretsquare_sandbox_application_secret*✘✔✘✘
SSLMateSSLMate API Keysslmate_api_key*✔✔✘✘
SSLMateSSLMate Cluster Secretsslmate_cluster_secret*✔✔✘✘
StripeStripe Live API Restricted Keystripe_live_restricted_key*✔✔✘✘
StripeStripe API Keystripe_api_key*✔✔✔✔
StripeStripe Legacy API Secret Keystripe_legacy_api_key>=3.5✔✔✘✘
StripeStripe Test API Restricted Keystripe_test_restricted_key*✔✔✘✘
StripeStripe Test API Secret Keystripe_test_secret_key*✔✔✘✔
StripeStripe Webhook Signing Secretstripe_webhook_signing_secret*✘✔✘✘
SupabaseSupabase Service Keysupabase_service_key*✔✔✘✘
TableauTableau Personal Access Tokentableau_personal_access_token*✘✔✘✘
TelegramTelegram Bot Tokentelegram_bot_token*✘✔✘✔
TelnyxTelnyx API V2 Keytelnyx_api_v2_key>3.7✔✔✔✘
Tencent CloudTencent Cloud Secret IDtencent_cloud_secret_id>=3.5✔✔✔✘
Tencent WeChatTencent WeChat API App IDtencent_wechat_api_app_id>3.7✔✔✘✘
TwilioTwilio Access Tokentwilio_access_token*✘✔✔✘
TwilioTwilio Account String Identifiertwilio_account_sid*✔✔✔✘
TwilioTwilio API Keytwilio_api_key*✔✔✔✘
TypeformTypeform Personal Access Tokentypeform_personal_access_token>=3.5✔✔✔✘
UniwiseWISEflow API Keywiseflow_api_key>3.6✔✔✔✘
WakaTimeWakaTime App Secretwakatime_pp_secret>3.9✔✔✔✘
WakaTimeWakaTime OAuth Access Tokenwakatime_oauth_access_token>3.9✔✔✔✘
WakaTimeWakaTime OAuth Refresh Tokenwakatime_oauth_refresh_token>3.9✔✔✔✘
WorkatoWorkato Developer API Tokenworkato_developer_api_token>3.11✔✔✔✘
WorkOSWorkOS Production API Keyworkos_production_api_key>=3.12✘✔✔✘
WorkOSWorkOS Staging API Keyworkos_staging_api_key>=3.12✘✔✘✘
YandexYandex.Cloud Access Secretyandex_iam_access_secret>3.4✔✔✘✘
YandexYandex.Cloud API Keyyandex_cloud_api_key*✔✔✘✘
YandexYandex.Cloud IAM Cookieyandex_cloud_iam_cookie*✔✔✘✘
YandexYandex.Cloud IAM Tokenyandex_cloud_iam_token*✔✔✘✘
YandexYandex Cloud Smartcaptcha Server Keyyandex_cloud_smartcaptcha_server_key>=3.11✔✔✔✘
YandexYandex.Dictionary API Keyyandex_dictionary_api_key*✘✔✘✘
YandexYandex.Passport OAuth TokenYANDEX_PASSPORT_OAUTH_TOKEN✘✔✘✘✘
YandexYandex.Predictor API Keyyandex_predictor_api_key*✘✔✘✘
YandexYandex.Translate API Keyyandex_translate_api_key*✘✔✘✘
ZuploZuplo Consumer API Keyzuplo_consumer_api_key>3.6✔✔✔✘