Release
Access, Cloudflare One - GitHub automatically detects leaked Access service tokens
The Brief
- GitHub secret scanning now automatically detects Cloudflare Access service token secrets exposed in public repositories.
- GitHub reports detected tokens to Cloudflare, and Access then disables the affected token.
- Access emails account administrators when a token is disabled. Other secret scanning tools can also identify Access service tokens.
Why it matters
Developers who commit Access service tokens to public repositories will have those tokens disabled automatically, which can break services that rely on them and means the token should be rotated or replaced.
Who’s affected
- Teams using Cloudflare Access service tokens
- Developers who publish code to public GitHub repositories
- #cloudflare
- #github
- #secret-scanning
- #access
- #service-tokens
GitHub secret scanning automatically detects Cloudflare Access service token secrets exposed in public repositories and reports them to Cloudflare. Access then disables the affected token and emails account administrators. Other secret scanning tools can identify Access service…
Timeline
Cloudflare changelog announces GitHub automatic detection of leaked Access service tokens
Cloudflare changelogs
Access, Cloudflare One - GitHub automatically detects leaked Access service tokens