{"version":"2.1.234","anchor":"more-slack-secret-patterns-and-the-new-slack-tag-token-is-ke","canonical_anchor":"more-slack-secret-patterns-and-the-new-slack-tag-token-is-ke","heading":"More Slack secret patterns, and the new Slack tag token is kept out of child processes","tier":"notice","area":"Secret Detection","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.234\/e\/more-slack-secret-patterns-and-the-new-slack-tag-token-is-ke","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.234","markdown":"### More Slack secret patterns, and the new Slack tag token is kept out of child processes\n\nMore Slack tokens and webhook URLs are detected and redacted, and one token is hidden from child processes.\n\n**What**\n\nTwo high-confidence detections were added, `slack-workflow-token` for `xwfp-` values and `slack-webhook-url` for hooks.slack.com service, workflow and trigger URLs. Log redaction also gained `xapp-`, `xwfp-`, a bot-token form allowing the dotted `xoxb.xoxb-` shape, and webhook URLs. Separately `CLAUDE_CODE_SLACK_TAG_TOKEN` is deleted from the environment handed to child processes.\n\n**Details**\n\n- The pattern tables are unconditional.\n- The token is also listed among the environment variables Claude Code tracks.\n\n**Evidence**\n\n`slack-workflow-token`\n\n- Area: Secret Detection\n- Names: `CLAUDE_CODE_SLACK_TAG_TOKEN`\n- Tier: You'll notice\n- Useful: 3\/5\n- Signal: 3\/5"}