{"version":"2.1.227","anchor":"wider-detection-of-secret-shaped-environment-variables","canonical_anchor":"wider-detection-of-secret-shaped-environment-variables","heading":"Wider detection of secret-shaped environment variables","tier":"notice","area":"Permissions","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227\/e\/wider-detection-of-secret-shaped-environment-variables","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227","markdown":"### Wider detection of secret-shaped environment variables\n\nMany more environment variable names are now treated as secrets and protected.\n\n**What**\n\nEnvironment variables are now treated as sensitive when their name contains TOKEN, SECRET, PASSWORD, PASSPHRASE, KEY, AUTH, COOKIE, PAT, DSN or CREDENTIAL(S) as a whole word, plus `CLOUDSDK_PROXY_PASSWORD` and the numbered `GIT_CONFIG_KEY_` variables specifically.\n\n**Evidence**\n\n`\"CLOUDSDK_PROXY_PASSWORD\", \"GIT_CONFIG_KEY_[0-9]*\"`\n\n- Area: Permissions\n- Tier: You'll notice\n- Useful: 4\/5\n- Signal: 3\/5"}