Secret scanning public monitoring for enterprises

PreviewJul 2, 2026VerifiedAdded Sep 22, 2026

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks wherever they happen. We believe every enterprise should know the moment its secrets leak in public, no matter where it happens on GitHub.

Security Pricing Observability

Read GitHub's release notes

https://github.blog/changelog/2026-07-01-secret-scanning-public-monitoring-for-enterprises

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityJul 1, 2026

Secret scanning adds validators for Asana, IBM, and MessageBird

Secret scanning now runs validity checks on Asana, IBM, and MessageBird secrets so you can tell whether a leaked credential is still active. Validity checks added These patterns now support validity checks.

UpdateSecurityObservabilitySource

GitHub Advanced SecurityJun 30, 2026

GitHub code coverage merge protection for pull requests

You can now use branch rulesets to block pull requests from merging when test coverage drops below thresholds you set. You can set a minimum coverage percentage, a maximum allowed drop from the default branch, or both. You can start in evaluate mode to understand impact first, then switch to active mode when you’re ready to enforce merge protection.

PreviewObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Open source license compliance is in public preview

Enterprises can now manage their dependencies’ licenses at scale with sophisticated, ruleset-based checks that enforce a centralized policy. Open source license compliance is in public preview, letting you block noncompliant dependencies before they reach production.

PreviewGovernanceDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Dependabot no longer infers .npmrc

Dependabot will no longer attempt to infer .npmrc configuration for npm private registries. Previously, Dependabot tried to reconstruct .npmrc contents from lockfile resolved URLs, but incorrect lockfile URLs, lockfile format differences across npm, Yarn v1, Yarn Berry, and pnpm, and other edge cases regularly caused registry authentication failures.

UpdateObservabilitySource

GitHub Advanced SecurityJun 30, 2026

Upcoming cloud data retention policy for closed security alerts

Starting September 25, 2026, GitHub will introduce a data retention policy for closed Dependabot security alerts. This policy gives you a clear commitment for how long your alert data stays accessible and where you can find it. It applies to Dependabot security alerts on github.com, including GitHub Enterprise Cloud (GHEC).

UpdateGovernanceSecurityDeveloper toolsSource

GitHub Advanced SecurityJun 30, 2026

Upcoming access restrictions to public API endpoints and UI views

As part of our ongoing commitment to protect our users and ensure responsible use of our platform, the Notifications team will soon introduce access restrictions to several public API endpoints and related UI views.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityJul 7, 2026

Secret scanning extended metadata and multipart validation

To help you understand ownership and impact of a leaked secret, GitHub secret scanning surfaces enriched metadata for supported secret types. Extended metadata checks are now generally available, including support for multipart validators with supplementary metadata. What’s new?

GASecurityDeveloper toolsPerformanceSource

GitHub Advanced SecurityJul 8, 2026

Innersource security advisories are generally available

GitHub Advanced Security enterprise customers can now publish internal security advisories. Innersource advisories work similarly to GitHub’s open source advisories, but their visibility is restricted to repositories owned by the enterprise.

GASecurityObservabilityDeveloper toolsSource

Also shipped on Jul 2, 2026

Snowflake SnowflakeJul 2, 2026

VARIANT data type on Delta Direct tables (General availability)

With this release, Snowflake supports the VARIANT data type on Iceberg tables created from Delta table files in object storage (Delta Direct). When your Delta tables include variant columns, Snowflake maps them to the Snowflake VARIANT data type. You can query semi-structured data using VARIANT functions and dot or bracket notation.

GASQLApache IcebergSource

Snowflake Snowflake Horizon CatalogJul 2, 2026

Metadata-based sensitive data classification recommendations (Public Preview)

Snowflake is rolling out metadata-based sensitive data classification recommendations in Snowsight to help you identify databases that are likely to contain sensitive data and enable classification with one click.

PreviewGovernanceSecuritySource

Databricks LakeflowJul 2, 2026

Lakeflow Connect row filtering is now generally available

Row filtering in Lakeflow Connect is now generally available. Row filtering allows you to ingest only the rows you need by applying conditions similar to a SQL WHERE clause, improving performance and minimizing data duplication.

GASQLData integrationPerformanceSource

Databricks AI/BI and GenieJul 2, 2026

Genie One enhancements and bug fixes

- Ontology snippets (Public Preview) : Genie One now supports ontology snippets. This feature is in Public Preview. Contact your Databricks account team to sign up. See Genie Ontology . Document edit timestamps : Documents now show the date and time they were last edited. See Documents in Genie One . Links in documents : Documents now support links.

PreviewBISource

Databricks AI/BI and GenieJul 2, 2026

Genie Agent (formerly Genie Space) enhancements

- Agent mode is generally available : Agent mode in Genie Agents (formerly Genie Spaces) is now generally available. Agent mode uses multi-step reasoning to answer complex, exploratory questions with a report that includes citations, visualizations, and supporting tables. See Genie Agents concepts .

GAAI agentsSecurityBISource

Microsoft Azure databases and analyticsJul 2, 2026

[Launched] Generally available: Anthropic Claude Sonnet 5 on Azure Databricks

Azure Databricks now supports Anthropic Claude Sonnet 5 through Azure Databricks AI Model Serving. Claude Sonnet 5 is Anthropic's most agentic Sonnet model to date, delivering near-Opus-level intelligence with Sonnet's cost efficiency and speed. Designed

GAAI agentsLLMsPricingSource