UpdateImportance 3 of 5
GitHub secret scanning now detects secrets in Actions workflow logs
GitHub secret scanning now detects secrets in GitHub Actions workflow logs, in addition to issues, wikis, discussions, and pull requests. Actions workflow log scanning is available in public preview.
Why it matters
Secrets printed to Actions workflow logs can be exposed to anyone with log access, and this feature extends automated detection to that location, which can help teams find leaked credentials earlier.
Who should care
Engineering teams and developers using GitHub Actions, security teams, and builders running CI/CD pipelines for online businesses.
What you can do
Enable secret scanning for your repositories in GitHub settings and review whether your existing workflows echo credentials to logs while the feature is in public preview.