GitHub Secret Scanning Vendor Patterns

Data accurate as of 2024-05-29
Taken from the official GitHub provider patterns list (raw data)

ProviderSecret nameShort nameEnterprise Server versionsVendor tipsUser alertsPush protectionValidity check on GHEC
Adafruit IOAdafruit IO Keyadafruit_io_key>=3.5
AdobeAdobe Client Secretadobe_client_secret>=3.11
AdobeAdobe Device Tokenadobe_device_token*
AdobeAdobe PAC Tokenadobe_pac_token>=3.11
AdobeAdobe Refresh Tokenadobe_refresh_token>=3.11
AdobeAdobe Service Tokenadobe_service_token*
AdobeAdobe Short-Lived Access Tokenadobe_short_lived_access_token*
AivenAiven Auth Tokenaiven_auth_token>3.9
AivenAiven Service Passwordaiven_service_password>3.9
Alibaba CloudAlibaba Cloud Access Key ID with Alibaba Cloud Access Key Secretalibaba_cloud_access_key_id </br>alibaba_cloud_access_key_secret>=3.5
Login with AmazonLogin with Amazon OAuth Client ID with Login with Amazon OAuth Client Secretamazon_oauth_client_id </br>amazon_oauth_client_secret>=3.5
Amazon Web Services (AWS)Amazon AWS Access Key ID with Amazon AWS Secret Access Keyaws_access_key_id </br>aws_secret_access_key>=3.5
Amazon Web Services (AWS)Amazon AWS Session Token with Amazon AWS Temporary Access Key ID and Amazon AWS Secret Access Keyaws_session_token </br>aws_temporary_access_key_id </br>aws_secret_access_key>=3.5
AnthropicAnthropic API Keyanthropic_api_key>=3.12
AsanaAsana Personal Access Tokenasana_personal_access_token>=3.5
AtlassianAtlassian API Tokenatlassian_api_token*
AtlassianAtlassian JSON Web Tokenatlassian_jwt*
AtlassianBitbucket Server Personal Access Tokenbitbucket_server_personal_access_token>=3.5
AuthressAuthress Service Client Access Keyauthress_service_client_access_key>=3.11
AzureMicrosoft Entra ID Secretazure_active_directory_application_secret>=3.5
AzureAzure Batch Key Identifiableazure_batch_key_identifiable>3.8
AzureAzure Cache for Redis Access Keyazure_cache_for_redis_access_key>=3.5
AzureAzure Container Registry Key Identifiableazure_container_registry_key_identifiable>=3.11
AzureAzure CosmosDB Key Identifiableazure_cosmosdb_key_identifiable>3.8
AzureAzure DevOps Personal Access Tokenazure_devops_personal_access_token>=3.5
AzureAzure Function Keyazure_function_key>=3.5
AzureAzure ML Studio (classic) Web Service Keyazure_ml_web_service_classic_identifiable_key>3.8
AzureAzure SAS Tokenazure_sas_token*
AzureAzure Search Admin Keyazure_search_admin_key>3.8
AzureAzure Search Query Keyazure_search_query_key>3.8
AzureAzure Service Management Certificateazure_management_certificate*
AzureAzure SQL Connection Stringazure_sql_connection_string*
AzureAzure SQL Passwordazure_sql_password>=3.11
AzureAzure Storage Account Keyazure_storage_account_key>3.6
BaiduBaidu Cloud API Access Keybaiducloud_api_accesskey>=3.11
BeamerBeamer API Keybeamer_api_key*
Beijing Volcano Engine TechnologyVolcEngine Access Key IDvolcengine_access_key_id>=3.12
Canadian Digital ServiceCDS Canada Notify API Keycds_canada_notify_api_key>=3.9
CanvaCanva Connect API Secretcanva_connect_api_secret>=3.12
Cashfreecashfree_api_keyCashfree API Key>=3.12
Checkout.comCheckout.com Production Secret Keycheckout_production_secret_key>=3.5
Checkout.comCheckout.com Test Secret Keycheckout_test_secret_key*
Chief ToolsChief Tools Tokenchief_tools_token>3.7
CircleCICircleCI Personal Access Tokencircleci-pat>=3.12
CircleCICircleCI Project Access Tokencircleci-prj>=3.12
ClojarsClojars Deploy Tokenclojars_deploy_token>=3.5
CloudBees CodeShipCloudBees CodeShip Credentialcodeship_credential*
ContentfulContentful Personal Access Tokencontentful_personal_access_token*
Contributed SystemsContributed Systems CredentialsCONTRIBUTED_SYSTEMS_CREDENTIALS
crates.io (Rust Foundation)Crates.io API Tokencratesio_api_token>=3.9
DatabricksDatabricks Access Tokendatabricks_access_token>=3.5
DatadogDatadog API KeyDATADOG_API_KEY
DefinedDefined Networking Nebula API Keydefined_networking_nebula_api_key>=3.10
DevCycleDevCycle Client API Keydevcycle_client_api_key>3.8
DevCycleDevCycle Mobile API Keydevcycle_mobile_api_key>3.8
DevCycleDevCycle Server API Keydevcycle_server_api_key>3.8
DigitalOceanDigitalOcean OAuth Tokendigitalocean_oauth_token>=3.5
DigitalOceanDigitalOcean Personal Access Tokendigitalocean_personal_access_token>=3.5
DigitalOceanDigitalOcean Refresh Tokendigitalocean_refresh_token>=3.5
DigitalOceanDigitalOcean System Tokendigitalocean_system_token>=3.5
DiscordDiscord API Token V2discord_api_token_v2>3.7
DiscordDiscord Bot Tokendiscord_bot_token>=3.5
DockerDocker Personal Access Tokendocker_personal_access_token>=3.12
DopplerDoppler Audit Tokendoppler_audit_token>=3.5
DopplerDoppler CLI Tokendoppler_cli_token>=3.5
DopplerDoppler Personal Tokendoppler_personal_token>=3.5
DopplerDoppler SCIM Tokendoppler_scim_token>=3.5
DopplerDoppler Service Tokendoppler_service_token>=3.5
DopplerDoppler Service Account Tokendoppler_service_account_token>=3.9
DropboxDropbox Access Tokendropbox_access_token*
DropboxDropbox Short Lived Access Tokendropbox_short_lived_access_token>=3.5
DuffelDuffel Live Access Tokenduffel_live_access_token>=3.5
DuffelDuffel Test Access Tokenduffel_test_access_token*
DynatraceDynatrace Access Tokendynatrace_access_token*
DynatraceDynatrace Internal Tokendynatrace_internal_token*
EasyPostEasyPost Production API Keyeasypost_production_api_key>=3.5
EasyPostEasyPost Test API Keyeasypost_test_api_key*
eBayeBay Production Client ID (App ID) with eBay Production Client Secret (Cert ID)ebay_production_client_id </br>ebay_production_client_secret>3.8
eBayeBay Sandbox Client ID (App ID) with eBay Sandbox Client Secret (Cert ID)ebay_sandbox_client_id </br>ebay_sandbox_client_secret>3.8
FastlyFastly API Tokenfastly_api_token*
FigmaFigma Personal Access Tokenfigma_pat>3.7
FinicityFinicity App Keyfinicity_app_key*
FlutterwaveFlutterwave Live API Secret Keyflutterwave_live_api_secret_key>=3.5
FlutterwaveFlutterwave Test API Secret Keyflutterwave_test_api_secret_key*
Frame.ioFrame.io Developer Tokenframeio_developer_token*
Frame.ioFrame.io JSON Web Tokenframeio_jwt*
FullStoryFullStory API Keyfullstory_api_key>=3.5
GitHubGitHub App Installation Access Tokengithub_app_installation_access_token>=3.5
GitHubGitHub OAuth Access Tokengithub_oauth_access_token>=3.5
GitHubGitHub Personal Access Tokengithub_personal_access_token>=3.5
GitHubGitHub Refresh Tokengithub_refresh_token>=3.5
GitHubGitHub SSH Private Keygithub_ssh_private_key>=3.5
GitLabGitLab Access Tokengitlab_access_token*
GoCardlessGoCardless Live Access Tokengocardless_live_access_token*
GoCardlessGoCardless Sandbox Access Tokengocardless_sandbox_access_token*
GoogleFirebase Cloud Messaging Server Keyfirebase_cloud_messaging_server_key*
GoogleGoogle Cloud Storage Service Account Access Key ID with Google Cloud Storage Access Key Secretgoogle_cloud_storage_service_account_access_key_id </br>google_cloud_storage_access_key_secret>=3.5
GoogleGoogle Cloud Storage User Access Key ID with Google Cloud Storage Access Key Secretgoogle_cloud_storage_user_access_key_id </br>google_cloud_storage_access_key_secret>=3.5
GoogleGoogle OAuth Access Tokengoogle_oauth_access_token*
GoogleGoogle OAuth Client ID with Google OAuth Client Secretgoogle_oauth_client_id </br>google_oauth_client_secret>=3.5
GoogleGoogle OAuth Refresh Tokengoogle_oauth_refresh_token*
Google CloudGoogle API Keygoogle_api_key*
Google CloudGoogle Cloud Private Key IDgoogle_cloud_private_key_id<3.13
Google CloudGoogle Cloud Service Account Credentialsgoogle_cloud_service_account_credentials>=3.13
GrafanaGrafana Cloud API Keygrafana_cloud_api_key>3.7
GrafanaGrafana Cloud API Tokengrafana_cloud_api_token>3.7
GrafanaGrafana Project API Keygrafana_project_api_key>3.7
GrafanaGrafana Project Service Account Tokengrafana_project_service_account_token>3.7
HashiCorpHashiCorp Vault Batch Token (v1.10.0+)hashicorp_vault_batch_token>3.8
HashiCorpHashiCorp Vault Root Service Token (v1.10.0+)hashicorp_vault_root_service_token>3.8
HashiCorpHashiCorp Vault Service Token (v1.10.0+)hashicorp_vault_service_token>3.8
Hashicorp TerraformTerraform Cloud / Enterprise API Tokenterraform_api_token*
HighnoteHighnote RK Live Keyhighnote_rk_live_key>3.9
HighnoteHighnote RK Test Keyhighnote_rk_test_key>3.9
HighnoteHighnote SK Live Keyhighnote_sk_live_key>3.9
HighnoteHighnote SK Test Keyhighnote_sk_test_key>3.9
HopHop Bearerhop_bearer>=3.11
HopHop Personal Access Tokenhop_pat>=3.11
HopHop PTKhop_ptk>=3.11
HubspotHubspot API Keyhubspot_api_key>=3.5
HubspotHubspot API Personal Access Keyhubspot_api_personal_access_key>3.7
IntercomIntercom Access Tokenintercom_access_token>=3.5
IonicIonic Personal Access Tokenionic_personal_access_token>=3.5
IonicIonic Refresh Tokenionic_refresh_token>=3.5
JD CloudJD Cloud Access Keyjd_cloud_access_key>3.4
JFrogJFrog Platform Access Tokenjfrog_platform_access_token>3.6
JFrogJFrog Platform API Keyjfrog_platform_api_key>3.6
JFrogJFrog Platform Reference Tokenjfrog_platform_reference_token>3.10
LightspeedLightspeed X-Series Personal Access Tokenlightspeed-xs-pat>=3.12
LinearLinear API Keylinear_api_key>=3.5
LinearLinear OAuth Access Tokenlinear_oauth_access_token>=3.5
LobLob Live API Keylob_live_api_key*
LobLob Test API Keylob_test_api_key*
LocalStackLocalStack API Keylocalstack_api_key>3.7
LogicMonitorLogicMonitor Bearer Tokenlogicmonitor_bearer_token>3.8
LogicMonitorLogicMonitor LMV1 Access Keylogicmonitor_lmv1_access_key>3.8
MailchimpMailchimp API Keymailchimp_api_key*
MailchimpMandrill API KeyMANDRILL_API
MailgunMailgun API Keymailgun_api_key*
MapboxMapbox Secret Access Tokenmapbox_secret_access_token*
MaxmindMaxmind License Keymaxmind_license_key>=3.11
MercuryMercury Non-Production API Tokenmercury_non_production_api_token>=3.10
MercuryMercury Production API Tokenmercury_production_api_token>=3.10
MergifyMergify Application Keymergify_application_key>=3.12
MessageBirdMessageBird API Keymessagebird_api_key*
MetaFacebook Access Tokenfacebook_access_token*
MidtransMidtrans Production Server Keymidtrans_production_server_key>=3.5
MidtransMidtrans Sandbox Server Keymidtrans_sandbox_server_key*
New RelicNew Relic Insights Query Keynew_relic_insights_query_key>=3.5
New RelicNew Relic License Keynew_relic_license_key*
New RelicNew Relic Personal API Keynew_relic_personal_api_key>=3.5
New RelicNew Relic REST API Keynew_relic_rest_api_key>=3.5
NotionNotion Integration Tokennotion_integration_token*
NotionNotion OAuth Client Secretnotion_oauth_client_secret*
npmnpm Access Tokennpm_access_token>=3.5
NuGetNuGet API Keynuget_api_key>=3.5
Octopus DeployOctopus Deploy API Keyoctopus_deploy_api_key*
OculusOculus Very Tiny Encrypted Sessionoculus_very_tiny_encrypted_session>3.9
OneChronosOneChronos API Tokenonechronos_api_key>=3.10
OneChronosOneChronos Expressive Bidding API Keyonechronos_eb_api_key>=3.10
OneChronosOneChronos Expressive Bidding Encryption Keyonechronos_eb_encryption_key>=3.10
OneChronosOneChronos OAuth Tokenonechronos_oauth_token>=3.10
OneChronosOneChronos Refresh Tokenonechronos_refresh_token>=3.10
OnfidoOnfido Live API Tokenonfido_live_api_token>=3.5
OnfidoOnfido Sandbox API Tokenonfido_sandbox_api_token*
OpenAIOpenAI API Keyopenai_api_key>=3.5
OpenAIOpenAI API Key V2openai_api_key_v2>=3.5
PalantirPalantir JSON Web Tokenpalantir_jwt*
PersonaPersona Production API Keypersona_production_api_key>3.7
PersonaPersona Sandbox API Keypersona_sandbox_api_key>3.7
PinterestPinterest Access Tokenpinterest_access_token>3.10
PinterestPinterest Refresh Tokenpinterest_refresh_token>3.10
PlanetScalePlanetScale Database Passwordplanetscale_database_password>=3.5
PlanetScalePlanetScale OAuth Tokenplanetscale_oauth_token>=3.5
PlanetScalePlanetScale Service Tokenplanetscale_service_token>=3.5
PlivoPlivo Auth ID with Plivo Auth Tokenplivo_auth_id </br>plivo_auth_token*
PostmanPostman API Keypostman_api_key>=3.5
PostmanPostman Collection Keypostman_collection_key>3.9
PrefectPrefect Server API Keyprefect_server_api_key>3.6
PrefectPrefect User API Keyprefect_user_api_key>3.6
PrefectPrefect User API TokenPREFECT_USER_API_TOKEN
ProctorioProctorio Consumer Keyproctorio_consumer_key*
ProctorioProctorio Linkage Keyproctorio_linkage_key*
ProctorioProctorio Registration Keyproctorio_registration_key*
ProctorioProctorio Secret Keyproctorio_secret_key>=3.5
PulumiPulumi Access Tokenpulumi_access_token*
PyPIPyPI API Tokenpypi_api_token*
ReadMeReadMe API Access Keyreadmeio_api_access_token>3.6
redirect.pizzaredirect.pizza API Tokenredirect_pizza_api_token>3.5
RootlyRootly API Keyrootly_api_key>3.9
RubyGemsRubyGems API Keyrubygems_api_key*
SamsaraSamsara API Tokensamsara_api_token>=3.5
SamsaraSamsara OAuth Access Tokensamsara_oauth_access_token>=3.5
SegmentSegment Public API Tokensegment_public_api_token>3.9
SendGridSendGrid API Keysendgrid_api_key>=3.5
SendinblueSendinblue API Keysendinblue_api_key>=3.5
SendinblueSendinblue SMTP Keysendinblue_smtp_key>=3.5
ShippoShippo Live API Tokenshippo_live_api_token>=3.5
ShippoShippo Test API Tokenshippo_test_api_token*
ShopifyShopify Access Tokenshopify_access_token>=3.5
ShopifyShopify App Client Credentialsshopify_app_client_credentials>3.4
ShopifyShopify App Client Secretshopify_app_client_secret>3.4
ShopifyShopify App Shared Secretshopify_app_shared_secret>=3.5
ShopifyShopify Custom App Access Tokenshopify_custom_app_access_token*
ShopifyShopify Marketplace Tokenshopify_marketplace_token>3.4
ShopifyShopify Merchant Tokenshopify_merchant_token>3.4
ShopifyShopify Partner API Tokenshopify_partner_api_token>3.4
ShopifyShopify Private App Passwordshopify_private_app_password*
SiemensSiemens Code Access Tokencode_siemens_com_token>=3.12
SlackSlack API Tokenslack_api_token>=3.5
SlackSlack Incoming Webhook URLslack_incoming_webhook_url*
SlackSlack Workflow Webhook URLslack_workflow_webhook_url*
SquareSquare Access Tokensquare_access_token*
SquareSquare Production Application Secretsquare_production_application_secret*
SquareSquare Sandbox Application Secretsquare_sandbox_application_secret*
SSLMateSSLMate API Keysslmate_api_key*
SSLMateSSLMate Cluster Secretsslmate_cluster_secret*
StripeStripe Live API Restricted Keystripe_live_restricted_key*
StripeStripe API Keystripe_api_key*
StripeStripe Legacy API Secret Keystripe_legacy_api_key>=3.5
StripeStripe Test API Restricted Keystripe_test_restricted_key*
StripeStripe Test API Secret Keystripe_test_secret_key*
StripeStripe Webhook Signing Secretstripe_webhook_signing_secret*
SupabaseSupabase Service Keysupabase_service_key*
TableauTableau Personal Access Tokentableau_personal_access_token*
TelegramTelegram Bot Tokentelegram_bot_token*
TelnyxTelnyx API V2 Keytelnyx_api_v2_key>3.7
Tencent CloudTencent Cloud Secret IDtencent_cloud_secret_id>=3.5
Tencent WeChatTencent WeChat API App IDtencent_wechat_api_app_id>3.7
TwilioTwilio Access Tokentwilio_access_token*
TwilioTwilio Account String Identifiertwilio_account_sid*
TwilioTwilio API Keytwilio_api_key*
TypeformTypeform Personal Access Tokentypeform_personal_access_token>=3.5
UniwiseWISEflow API Keywiseflow_api_key>3.6
WakaTimeWakaTime App Secretwakatime_pp_secret>3.9
WakaTimeWakaTime OAuth Access Tokenwakatime_oauth_access_token>3.9
WakaTimeWakaTime OAuth Refresh Tokenwakatime_oauth_refresh_token>3.9
WorkatoWorkato Developer API Tokenworkato_developer_api_token>3.11
WorkOSWorkOS Production API Keyworkos_production_api_key>=3.12
WorkOSWorkOS Staging API Keyworkos_staging_api_key>=3.12
YandexYandex.Cloud Access Secretyandex_iam_access_secret>3.4
YandexYandex.Cloud API Keyyandex_cloud_api_key*
YandexYandex.Cloud IAM Cookieyandex_cloud_iam_cookie*
YandexYandex.Cloud IAM Tokenyandex_cloud_iam_token*
YandexYandex Cloud Smartcaptcha Server Keyyandex_cloud_smartcaptcha_server_key>=3.11
YandexYandex.Dictionary API Keyyandex_dictionary_api_key*
YandexYandex.Passport OAuth TokenYANDEX_PASSPORT_OAUTH_TOKEN
YandexYandex.Predictor API Keyyandex_predictor_api_key*
YandexYandex.Translate API Keyyandex_translate_api_key*
ZuploZuplo Consumer API Keyzuplo_consumer_api_key>3.6