Help us learn about your current experience with the documentation. Take the survey.
---
stage: Application Security Testing
group: Secret Detection
info: To determine the technical writer assigned to the Stage/Group associated with this page, see https://handbook.gitlab.com/handbook/product/ux/technical-writing/#assignments
title: 检测到的密钥
---
-
Tier: Free, Premium, Ultimate
-
Offering: GitLab.com, GitLab Self-Managed, GitLab Dedicated
本表列出了通过以下方式检测到的密钥：
- Pipeline 密钥检测
- 客户端密钥检测
- 密钥推送保护
密钥检测规则在 [默认规则集](https://gitlab.com/gitlab-org/security-products/secret-detection/secret-detection-rules/-/tree/main) 中更新。
已移除或更新的模式对应的检测密钥将保持开放状态，以便您进行分类处理。
<!-- markdownlint-disable MD034 -->
<!-- markdownlint-disable MD044 -->
<!-- vale gitlab_base.SentenceSpacing = NO -->
| 描述 | ID | Pipeline 密钥检测 | 客户端密钥检测 | 密钥推送保护 |
|:----------------------------------------------|:----------------------------------------------|:--------------------------|:-----------------------------|:-----------------------|
| Adafruit IO Key | AdafruitIOKey |
Yes |
No |
Yes |
| Adobe Client ID (OAuth Web) | Adobe Client ID (Oauth Web) |
Yes |
No |
No |
| Adobe client secret | Adobe Client Secret |
Yes |
No |
Yes |
| Age secret key | Age secret key |
Yes |
No |
No |
| Aiven Service Password | AivenServicePassword |
Yes |
No |
Yes |
| Alibaba AccessKey ID | Alibaba AccessKey ID |
Yes |
No |
No |
| Alibaba Secret Key | Alibaba Secret Key |
Yes |
No |
No |
| Anthropic API key | anthropic_key |
Yes |
Yes |
Yes |
| Artifactory API Key | ArtifactoryApiKey |
Yes |
No |
Yes |
| Artifactory Identity Token | ArtifactoryIdentityToken |
Yes |
No |
Yes |
| Asana client ID | Asana Client ID |
Yes |
No |
No |
| Asana client secret | Asana Client Secret |
Yes |
No |
No |
| Asana Personal Access Token V1 | AsanaPersonalAccessTokenV1 |
Yes |
No |
Yes |
| Asana Personal Access Token V2 | AsanaPersonalAccessTokenV2 |
Yes |
No |
Yes |
| Atlassian API Key | AtlassianApiKey |
Yes |
No |
Yes |
| Atlassian API token | Atlassian API token |
Yes |
No |
No |
| Atlassian User API Token | AtlassianUserApiToken |
Yes |
No |
Yes |
| AWS access token | AWS |
Yes |
No |
Yes |
| Azure Entra Client Secret | AzureEntraClientSecret |
Yes |
No |
Yes |
| Beamer API token | Beamer API token |
Yes |
No |
No |
| Bitbucket client ID | Bitbucket client ID |
Yes |
No |
No |
| Bitbucket client secret | Bitbucket client secret |
Yes |
No |
No |
| Brevo API token | Sendinblue API token |
Yes |
No |
Yes |
| Brevo SMTP token | Sendinblue SMTP token |
Yes |
No |
Yes |
| CircleCI access token | CircleCI access tokens |
Yes |
No |
No |
| CircleCI Personal Access Token | CircleCIPersonalAccessToken |
Yes |
No |
Yes |
| Clojars deploy token | Clojars API token |
Yes |
No |
No |
| Contentful delivery API token | Contentful delivery API token |
Yes |
No |
No |
| Contentful personal access token | ContentfulPersonalAccessToken |
Yes |
No |
Yes |
| Contentful preview API token | Contentful preview API token |
Yes |
No |
No |
| Databricks API token | Databricks API token |
Yes |
No |
No |
| DigitalOcean OAuth access token | digitalocean-access-token |
Yes |
No |
No |
| DigitalOcean personal access token | digitalocean-pat |
Yes |
No |
No |
| DigitalOcean refresh token | digitalocean-refresh-token |
Yes |
No |
No |
| Discord API key | Discord API key |
Yes |
No |
No |
| Discord client ID | Discord client ID |
Yes |
No |
No |
| Discord client secret | Discord client secret |
Yes |
No |
No |
| Docker Personal Access Token | DockerPersonalAccessToken |
Yes |
No |
Yes |
| Doppler API token | Doppler API token |
Yes |
No |
Yes |
| Doppler Service token | Doppler Service token |
Yes |
No |
Yes |
| Dropbox API secret/key | Dropbox API secret/key |
Yes |
No |
No |
| Dropbox long lived API token | Dropbox long lived API token |
Yes |
No |
No |
| Dropbox short lived API token | Dropbox short lived API token |
Yes |
No |
Yes |
| Duffel API token | Duffel API token |
Yes |
No |
No |
| Dynatrace Platform Token | DynatracePlatformToken |
Yes |
No |
No |
| EasyPost production API key | EasyPost API token |
Yes |
No |
No |
| EasyPost test API key | EasyPost test API token |
Yes |
No |
No |
| Facebook token | Facebook token |
Yes |
No |
No |
| Fastly API user or automation token | Fastly API token |
Yes |
No |
No |
| Figma Personal Access Token | FigmaPersonalAccessToken |
Yes |
No |
Yes |
| Finicity API token | Finicity API token |
Yes |
No |
No |
| Finicity client secret | Finicity client secret |
Yes |
No |
No |
| Flutterwave test encrypted key | Flutterwave encrypted key |
Yes |
No |
No |
| Flutterwave test public key | Flutterwave public key |
Yes |
No |
No |
| Flutterwave test secret key | Flutterwave secret key |
Yes |
No |
No |
| Frame.io API token | Frame.io API token |
Yes |
No |
No |
| GCP API key | GCP API key |
Yes |
No |
No |
| GCP OAuth client secret | GCP OAuth client secret |
Yes |
No |
Yes |
| GitHub app token | Github App Token |
Yes |
No |
Yes |
| GitHub App Installation Token | GithubAppInstallationToken |
Yes |
No |
Yes |
| GitHub Fine Grained Personal Access Token | GithubFineGrainedPersonalAccessToken |
Yes |
No |
Yes |
| GitHub OAuth Access Token | Github OAuth Access Token |
Yes |
No |
Yes |
| GitHub personal access token (classic) | Github Personal Access Token |
Yes |
No |
Yes |
| GitHub refresh token | Github Refresh Token |
Yes |
No |
Yes |
| GitLab CI/CD job token | gitlab_ci_build_token |
Yes |
Yes |
No |
| GitLab deploy token | gitlab_deploy_token |
Yes |
Yes |
No |
| GitLab Feature Flags Client Token | None |
No |
Yes |
No |
| GitLab feed token | gitlab_feed_token |
Yes |
Yes |
No |
| GitLab feed token v2 | gitlab_feed_token_v2 |
Yes |
Yes |
Yes |
| GitLab incoming email token | gitlab_incoming_email_token |
Yes |
Yes |
Yes |
| GitLab Kubernetes agent token | gitlab_kubernetes_agent_token |
Yes |
Yes |
Yes |
| GitLab OAuth application secret | gitlab_oauth_app_secret |
Yes |
Yes |
Yes |
| GitLab personal access token | gitlab_personal_access_token |
Yes |
Yes |
Yes |
| GitLab Personal Access Token (routable) | gitlab_personal_access_token_routable |
Yes |
Yes |
Yes |
| GitLab pipeline trigger token | gitlab_pipeline_trigger_token |
Yes |
Yes |
Yes |
| GitLab runner authentication token | gitlab_runner_auth_token |
Yes |
Yes |
Yes |
| GitLab runner registration token | gitlab_runner_registration_token |
Yes |
No |
Yes |
| GitLab SCIM OAuth token | gitlab_scim_oauth_token |
Yes |
Yes |
No |
| GoCardless API token | GoCardless API token |
Yes |
No |
No |
| Google (GCP) service account | Google (GCP) Service-account |
Yes |
No |
Yes |
| Grafana API token | Grafana API token |
Yes |
No |
Yes |
| HashiCorp Terraform API token | Hashicorp Terraform user/org API token |
Yes |
No |
Yes |
| HashiCorp Vault batch token | Hashicorp Vault batch token |
Yes |
No |
Yes |
| Heroku API key or application authorization token | Heroku API Key |
Yes |
No |
No |
| Highnote Live Secret Key | HighnoteLiveSecretKey |
Yes |
No |
Yes |
| Highnote Test Secret Key | HighnoteTestSecretKey |
Yes |
No |
Yes |
| HubSpot private app API token | Hubspot API token |
Yes |
No |
Yes |
| Hugging Face User Access Token | HuggingFaceUserAccessToken |
Yes |
No |
Yes |
| Instagram access token | Instagram access token |
Yes |
No |
No |
| Intercom API token | Intercom API token |
Yes |
No |
No |
| Intercom client secret or client ID | Intercom client secret/ID |
Yes |
No |
No |
| Ionic personal access token | Ionic API token |
Yes |
No |
No |
| Linear API token | Linear API token |
Yes |
No |
Yes |
| Linear client secret or ID (OAuth 2.0) | Linear client secret/ID |
Yes |
No |
No |
| LinkedIn client ID | Linkedin Client ID |
Yes |
No |
No |
| LinkedIn client secret | Linkedin Client secret |
Yes |
No |
No |
| Lob API key | Lob API Key |
Yes |
No |
No |
| Lob publishable API key | Lob Publishable API Key |
Yes |
No |
No |
| Mailchimp API key | Mailchimp API key |
Yes |
No |
Yes |
| Mailgun private API token | Mailgun private API token |
Yes |
No |
Yes |
| Mailgun public verification key | Mailgun public validation key |
Yes |
No |
No |
| Mailgun webhook signing key | Mailgun webhook signing key |
Yes |
No |
Yes |
| Mapbox API token | Mapbox API token |
Yes |
No |
No |
| MaxMind License Key | MaxMind License Key |
Yes |
No |
Yes |
| MessageBird access key | messagebird-api-token |
Yes |
No |
No |
| MessageBird API client ID | MessageBird API client ID |
Yes |
No |
No |
| Meta access token | Meta access token |
Yes |
No |
No |
| New Relic ingest browser API token | New Relic ingest browser API token |
Yes |
No |
No |
| New Relic ingest browser API token v2 | New Relic ingest browser API token v2 |
Yes |
No |
Yes |
| New Relic REST API Key | New Relic REST API Key |
Yes |
No |
Yes |
| New Relic user API ID | New Relic user API ID |
Yes |
No |
Yes |
| New Relic user API key | New Relic user API Key |
Yes |
No |
Yes |
| npm access token | npm access token |
Yes |
No |
Yes |
| Oculus access token | Oculus access token |
Yes |
No |
No |
| Onfido Live API Token | Onfido Live API Token |
Yes |
No |
Yes |
| OpenAI API key | open ai token |
Yes |
No |
No |
| Password in URL | Password in URL |
Yes |
No |
No |
| PGP private key | PGP private key |
Yes |
No |
No |
| PKCS8 private key | PKCS8 private key |
Yes |
No |
No |
| PlanetScale API token | Planetscale API token |
Yes |
No |
Yes |
| PlanetScale App Secret | PlanetscaleAppSecret |
Yes |
No |
Yes |
| PlanetScale OAuth Secret | PlanetscaleOAuthSecret |
Yes |
No |
Yes |
| PlanetScale password | Planetscale password |
Yes |
No |
Yes |
| PostHog Personal API key | PostHogPersonalAPIkey |
Yes |
No |
Yes |
| PostHog Project API key | PostHogProjectAPIkey |
Yes |
No |
Yes |
| Postman API token | Postman API token |
Yes |
No |
No |
| Pulumi API token | Pulumi API token |
Yes |
No |
No |
| PyPi upload token | PyPI upload token |
Yes |
No |
Yes |
| RSA private key | RSA private key |
Yes |
No |
No |
| RubyGems API token | Rubygem API token |
Yes |
No |
Yes |
| Segment public API token | Segment Public API token |
Yes |
No |
Yes |
| SendGrid API token | Sendgrid API token |
Yes |
No |
Yes |
| Shippo API token | Shippo API token |
Yes |
No |
Yes |
| Shippo Test API token | Shippo Test API token |
Yes |
No |
No |
| Shopify custom app access token | Shopify custom app access token |
Yes |
No |
Yes |
| Shopify personal access token | Shopify access token |
Yes |
No |
Yes |
| Shopify private app access token | Shopify private app access token |
Yes |
No |
Yes |
| Shopify shared secret | Shopify shared secret |
Yes |
No |
Yes |
| Slack app level token | SlackAppLevelToken |
Yes |
No |
Yes |
| Slack bot user OAuth token | Slack token |
Yes |
No |
Yes |
| Slack webhook | Slack Webhook |
Yes |
No |
No |
| SonarQube Global Analysis Token | SonarQubeGlobalAnalysisToken |
Yes |
No |
Yes |
| SonarQube Project Analysis Token | SonarQubeProjectAnalysisToken |
Yes |
No |
Yes |
| SonarQube User Token | SonarQubeUserToken |
Yes |
No |
Yes |
| SSH (DSA) private key | SSH (DSA) private key |
Yes |
No |
No |
| SSH (EC) private key | SSH (EC) private key |
Yes |
No |
No |
| SSH private key | SSH private key |
Yes |
No |
No |
| Stripe live restricted key | StripeLiveRestrictedKey |
Yes |
No |
Yes |
| Stripe live secret key | StripeLiveSecretKey |
Yes |
No |
Yes |
| Stripe Live Short Secret Key | StripeLiveShortSecretKey |
Yes |
No |
Yes |
| Stripe publishable live key | StripeLivePublishableKey |
Yes |
No |
No |
| Stripe publishable test key | StripeTestPublishableKey |
Yes |
No |
No |
| Stripe restricted test key | StripeTestRestrictedKey |
Yes |
No |
No |
| Stripe secret test key | StripeTestSecretKey |
Yes |
No |
No |
| Stripe Test Short Secret Key | StripeTestShortSecretKey |
Yes |
No |
Yes |
| Tailscale key | Tailscale key |
Yes |
No |
No |
| Tencent Cloud Secret ID | TencentCloudSecretID |
Yes |
No |
Yes |
| Twilio Account SID | Twilio Account SID |
Yes |
No |
Yes |
| Twilio API key | Twilio API Key |
Yes |
No |
Yes |
| Twitch OAuth client secret | Twitch API token |
Yes |
No |
No |
| Typeform personal access token | Typeform API token |
Yes |
No |
No |
| Volcengine Access Key ID | VolcengineAccessKeyID |
Yes |
No |
Yes |
| WakaTime API Key | WakaTimeAPIKey |
Yes |
No |
Yes |
| X token | Twitter token |
Yes |
No |
No |
| Yandex.Cloud AWS API compatible access secret | Yandex.Cloud AWS API compatible Access Secret |
Yes |
No |
No |
| Yandex.Cloud API Key | Yandex.Cloud API Key |
Yes |
No |
No |
| Yandex.Cloud IAM cookie v1-1 | Yandex.Cloud IAM Cookie v1 - 1 |
Yes |
No |
No |
| Yandex.Cloud IAM cookie v1-3 | Yandex.Cloud IAM Cookie v1 - 3 |
Yes |
No |
No |
<!-- vale gitlab_base.SentenceSpacing = YES -->
<!-- markdownlint-enable MD034 -->
<!-- markdownlint-enable MD044 -->