Release
Secret scanning detects secrets in GitHub Actions workflow logs
GitHub Changelog · By Allison ·
The Brief
- GitHub secret scanning now detects secrets in GitHub Actions workflow logs, in addition to issues, wikis, discussions, and pull requests.
- Actions workflow log scanning is available in public preview.
- Scanning runs when a workflow run completes.
Why it matters
Secrets accidentally printed in CI logs can be exposed to anyone with log access; this feature helps teams detect such leaks in workflow output.
Who’s affected
- Teams using GitHub Actions
- #github
- #secret-scanning
- #github-actions
- #ci-cd
- #security
GitHub secret scanning now detects secrets in GitHub Actions workflow logs, in addition to issues, wikis, discussions, and pull requests . Actions workflow log scanning is available in public preview. How does Actions workflow log scanning work? When a workflow run completes…