# Access, Cloudflare One - GitHub automatically detects leaked Access service tokens

Source: [Cloudflare changelogs](https://developers.cloudflare.com/changelog/post/2026-11-11-leaked-service-token-recovery/) · 2026-11-11 · Cloud & DevOps
Page: https://themorning.dev/story/access-cloudflare-one-github-automatically-detects-leaked-access-service-tokens-490d505ecda293b2
Kind: release · Impact: medium

## In brief

- GitHub secret scanning now automatically detects Cloudflare Access service token secrets exposed in public repositories.
- GitHub reports detected tokens to Cloudflare, and Access then disables the affected token.
- Access emails account administrators when a token is disabled. Other secret scanning tools can also identify Access service tokens.

## Why it matters

Developers who commit Access service tokens to public repositories will have those tokens disabled automatically, which can break services that rely on them and means the token should be rotated or replaced.

## Timeline

- 2026-11-11: Cloudflare changelog announces GitHub automatic detection of leaked Access service tokens

## Coverage

- [Access, Cloudflare One - GitHub automatically detects leaked Access service tokens](https://developers.cloudflare.com/changelog/post/2026-11-11-leaked-service-token-recovery/) — Cloudflare changelogs, 2026-11-11

Tags: cloudflare, github, secret-scanning, access, service-tokens

---

Brief generated by AI (claude-haiku-5-5) from the reporting listed under Coverage. Headlines belong to their publishers. The Morning Dev – https://themorning.dev