Apiiro has expanded its secrets detection engine with new pattern types and broader coverage for existing ones. Starting with this release, new risk findings may appear in your codebase — even in files that haven’t changed.
Newly detected secret types include: Azure Storage SAS tokens, Azure Logic Apps SAS URLs, Azure Log Analytics shared keys, GCP service account credentials, PuTTY private keys, Twilio Account SIDs, and Samsara API tokens. Detection was also improved for Slack incoming webhooks, high-entropy KEY=value pairs, and passwords in IaC template defaults. Additionally, values stored in encrypted-at-rest format ([[CIPHER=...]]) are no longer incorrectly flagged as live secrets.