Secret scanning supports validation checks for select AWS, Google, Microsoft, and Slack tokens

GitHub Advanced Security customers that have validity checks enabled will see the validation status for select AWS, Google, Microsoft, and Slack tokens on the alert.

The following tokens are supported:

• aws_access_key_id
• aws_secret_access_key
• aws_session_token
• aws_temporary_access_key_id
• aws_secret_access_key
• google_oauth_access_token
• google_api_key
• nuget_api_key
• slack_api_token

AWS tokens will have validation checks performed periodically in the background, with on-demand validity checks to come in the future.

View our supported secrets documentation to keep up to date as we expand validation support.

• Learn more about secret scanning
• Become a secret scanning partner
• Got feedback? Open a discussion in our code security community