GitHub secret scanning adds Salesforce, Anthropic and Cloudsmith patterns; Anthropic keys blocked by default
GitHub expanded secret scanning to detect new secret types from Salesforce, Anthropic, and Cloudsmith. The new Anthropic secret types are blocked by push protection by default, and Salesforce was added as a secret scanning partner.
Why it matters
Builders pushing code with Anthropic or Salesforce credentials to GitHub repositories will have commits blocked by push protection by default, which can interrupt existing workflows and CI pipelines that previously pushed such keys without issue.
Who should care
Developers and engineering teams using GitHub with Anthropic API keys, Salesforce credentials, or Cloudsmith tokens, including ecommerce and SaaS builders.
What you can do
Audit your repositories for hardcoded Anthropic, Salesforce, or Cloudsmith credentials and move them into environment variables or a secrets manager before your next push.