Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -23,7 +23,7 @@ Secrets, such as API keys, tokens and credentials, can pose significant security

You should consider any leaked secret to be immediately compromised and it is essential that you undertake proper remediation steps, such as revoking the secret. Simply removing the secret from the codebase, pushing a new commit, or deleting and recreating the repository do not prevent the secret from being exploited.

This how-to walks you through what to do if you've accidentally committed a secret to your repository, or if you've been alerted to a secret leak in your repository.
This tutorial walks you through what to do if you've accidentally committed a secret to your repository, or if you've been alerted to a secret leak in your repository.

### Prerequisites

Expand Down
1 change: 1 addition & 0 deletions data/reusables/dependabot/supported-package-managers.md
Original file line number Diff line number Diff line change
Expand Up @@ -124,6 +124,7 @@ For more information about using {% data variables.product.prodname_dependabot_v
* `build.gradle`, `build.gradle.kts` (for Kotlin projects)
* `gradle/libs.versions.toml` (for projects using a standard Gradle version catalog)
* `gradle.lockfile` (for projects using Gradle dependency locking)
* `gradle/wrapper/gradle-wrapper.properties` (for the Gradle Wrapper)
* Files included via the `apply` declaration that have `dependencies` in the filename. Note that `apply` does not support `apply to`, recursion, or advanced syntaxes (for example, Kotlin's `apply` with `mapOf`, filenames defined by property).

{% data variables.product.prodname_dependabot %} uses information from the `pom.xml` file of dependencies to add links to release information in update pull requests. If the information is omitted from the `pom.xml` file, then it cannot be included in {% data variables.product.prodname_dependabot %} pull requests, see [AUTOTITLE](/code-security/dependabot/ecosystems-supported-by-dependabot/optimizing-java-packages-dependabot).
Expand Down
18 changes: 9 additions & 9 deletions src/secret-scanning/data/pattern-docs/fpt/public-docs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@
secretType: airtable_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -147,7 +147,7 @@
secretType: aws_api_key
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1060,7 +1060,7 @@
secretType: block_protocol_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: true
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1321,7 +1321,7 @@
secretType: cohere_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1474,7 +1474,7 @@
secretType: databricks_scoped_internal_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand All @@ -1492,7 +1492,7 @@
secretType: databricks_workspace_session_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -2495,7 +2495,7 @@
secretType: limbar_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -2846,7 +2846,7 @@
secretType: netflix_netkey
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -3458,7 +3458,7 @@
secretType: rainforest_sandbox_api_key
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down
18 changes: 9 additions & 9 deletions src/secret-scanning/data/pattern-docs/ghec/public-docs.yml
Original file line number Diff line number Diff line change
Expand Up @@ -93,7 +93,7 @@
secretType: airtable_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -147,7 +147,7 @@
secretType: aws_api_key
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1060,7 +1060,7 @@
secretType: block_protocol_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: true
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1321,7 +1321,7 @@
secretType: cohere_api_key
isPublic: false
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -1474,7 +1474,7 @@
secretType: databricks_scoped_internal_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand All @@ -1492,7 +1492,7 @@
secretType: databricks_workspace_session_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -2495,7 +2495,7 @@
secretType: limbar_token
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -2846,7 +2846,7 @@
secretType: netflix_netkey
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down Expand Up @@ -3458,7 +3458,7 @@
secretType: rainforest_sandbox_api_key
isPublic: true
isPrivateWithGhas: true
hasPushProtection: false
hasPushProtection: true
hasValidityCheck: false
base64Supported: false
isduplicate: false
Expand Down