Secret redaction now catches more Slack token shapes and private key blocks of any length.
What's wrong with this entry?
Slack user-token matching widened from xox[pe] to xox[a-z], a new slack-rotation-token rule catches xoxe refresh tokens, and private keys are now found by pairing BEGIN and END markers rather than one regex, so a key block of any length is redacted rather than only bodies long enough to match.
- Applies wherever secret redaction runs; no gate.
slack-rotation-token
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.232
GitLab token detection grows from 2 patterns to 11
Both mention secret redaction
-
v2.1.232
GitLab tokens are now stripped from logs and error output
Both mention secret redaction
-
v2.1.232
Nine more GitLab token types are caught by the secret scanner
Both mention secret redaction