UpdateImportance 2 of 5
GitHub secret scanning adds detector for Cloudflare service tokens
GitHub secret scanning now automatically detects Cloudflare service tokens (secret type cloudflare_access_service_token) in repositories. The detector was added to the existing set of partner secret detectors, as announced in a GitHub changelog post published 2026-11-12.
Why it matters
Repositories containing Cloudflare Access service tokens can now be flagged by GitHub secret scanning, reducing the chance that leaked credentials stay exposed in commit history or public repos.
Who should care
Developers and DevOps teams using Cloudflare Access, and maintainers of GitHub repositories that store API or service credentials.
What you can do
Enable secret scanning and push protection for your repositories, then review existing alerts for any exposed Cloudflare service tokens and rotate them.