--- title: Secret scanning coverage updates | daily.dev description: GitHub has expanded its secret scanning coverage with three updates: Lovable Labs joins as a new secret scanning partner (detecting lovable_api_key), four new... canonical: https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Secret scanning coverage updates | daily.dev og:description: GitHub has expanded its secret scanning coverage with three updates: Lovable Labs joins as a new secret scanning partner (detecting lovable_api_key), four new... og:url: https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt og:image: https://api.daily.dev/og/posts/28BK7Fqbt.png og:image:alt: Secret scanning coverage updates og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Secret scanning coverage updates **[GitHub Changelog](https://daily.dev/sources/github_updates)** · 2 min read · 0 upvotes · 0 comments ## Summary GitHub has expanded its secret scanning coverage with three updates: Lovable Labs joins as a new secret scanning partner (detecting lovable_api_key), four new secret types from APIclub, Mistral AI, PostHog, and Resend are now blocked by push protection by default across all repositories with secret scanning enabled, and extended metadata support has been added for secrets from Cohere, GoCardless, and Square — surfacing owner, creation/expiry dates, and associated project context directly on alerts. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Does GitHub push protection now block Mistral AI and Resend API keys by default? Yes, push protection now includes detectors for APIclub, Mistral AI, PostHog, and Resend by default. Repositories with secret scanning enabled, including free public repositories, automatically block commits containing these secret types (apiclub_api_key, mistral_ai_api_key, posthog_oauth_access_token, resend_api_key) without any extra configuration. _Track which secret types get default push protection coverage as GitHub expands them, via daily.dev._ ### What does extended metadata mean for a GitHub secret scanning alert? Extended metadata builds on secret scanning's existing validity checks by surfacing extra context on an alert, such as the secret's owner, creation and expiry dates, and associated project or organization, when the provider makes that information available. It now covers Cohere, GoCardless (live and sandbox tokens), and Square, helping teams assess ownership and impact without leaving the alert. _Developers triaging leaked-secret alerts can follow scanning metadata updates like this on daily.dev._ ### Is Lovable Labs a GitHub secret scanning partner? Yes, Lovable Labs joined GitHub's secret scanning partner program, and GitHub now automatically detects lovable_api_key secrets in repositories. When one is found in a public repo, GitHub forwards it to Lovable Labs so the key can be revoked or otherwise acted on. _Teams securing API keys across providers can keep up with new scanning partners on daily.dev._ ## Similar posts on daily.dev - [Secret scanning updates](https://daily.dev/posts/secret-scanning-updates-eedd029uo) · GitHub Changelog · 2 upvotes · 0 comments - [Secret scanning adds detectors for Lovable, Supabase, and more](https://daily.dev/posts/secret-scanning-adds-detectors-for-lovable-supabase-and-more-ighahryv7) · GitHub Changelog · 0 upvotes · 0 comments - [Secret scanning pattern updates — March 2026](https://daily.dev/posts/secret-scanning-pattern-updates-march-2026-fyhcepcml) · GitHub Changelog · 0 upvotes · 0 comments - [GitHub Secret Scanning Public Monitoring for Enterprises: Coverage and Gaps](https://daily.dev/posts/github-secret-scanning-public-monitoring-for-enterprises-coverage-and-gaps-txomrmpk3) · StepSecurity · 3 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#github](https://daily.dev/tags/github), [#appsec](https://daily.dev/tags/appsec) [View this post on daily.dev](https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Secret scanning coverage updates","url":"https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt"},"datePublished":"2026-08-07T17:31:46.245Z","dateModified":"2026-09-14T06:16:27.136Z","description":"GitHub has expanded its secret scanning coverage with three updates: Lovable Labs joins as a new secret scanning partner (detecting lovable_api_key), four new...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/603c032b9f637c8e3aa9fa337db4b22a?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/603c032b9f637c8e3aa9fa337db4b22a?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"GitHub Changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"GitHub Changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/15004b7835da4d89b02b115871f0f6dc","url":"https://daily.dev/sources/github_updates"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,github,appsec","timeRequired":"PT2M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"GitHub Changelog","item":"https://daily.dev/sources/github_updates"},{"@type":"ListItem","position":3,"name":"Secret scanning coverage updates"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/secret-scanning-coverage-updates-28bk7fqbt#faq","mainEntity":[{"@type":"Question","name":"Does GitHub push protection now block Mistral AI and Resend API keys by default?","acceptedAnswer":{"@type":"Answer","text":"Yes, push protection now includes detectors for APIclub, Mistral AI, PostHog, and Resend by default. Repositories with secret scanning enabled, including free public repositories, automatically block commits containing these secret types (apiclub_api_key, mistral_ai_api_key, posthog_oauth_access_token, resend_api_key) without any extra configuration. Track which secret types get default push protection coverage as GitHub expands them, via daily.dev."}},{"@type":"Question","name":"What does extended metadata mean for a GitHub secret scanning alert?","acceptedAnswer":{"@type":"Answer","text":"Extended metadata builds on secret scanning's existing validity checks by surfacing extra context on an alert, such as the secret's owner, creation and expiry dates, and associated project or organization, when the provider makes that information available. It now covers Cohere, GoCardless (live and sandbox tokens), and Square, helping teams assess ownership and impact without leaving the alert. Developers triaging leaked-secret alerts can follow scanning metadata updates like this on daily.dev."}},{"@type":"Question","name":"Is Lovable Labs a GitHub secret scanning partner?","acceptedAnswer":{"@type":"Answer","text":"Yes, Lovable Labs joined GitHub's secret scanning partner program, and GitHub now automatically detects lovable_api_key secrets in repositories. When one is found in a public repo, GitHub forwards it to Lovable Labs so the key can be revoked or otherwise acted on. Teams securing API keys across providers can keep up with new scanning partners on daily.dev."}}]} ```