Secret scanning extended metadata and multipart validation

GAJul 7, 2026VerifiedAdded Sep 22, 2026

To help you understand ownership and impact of a leaked secret, GitHub secret scanning surfaces enriched metadata for supported secret types. Extended metadata checks are now generally available, including support for multipart validators with supplementary metadata. What’s new?

Security Developer tools Performance

Read GitHub's release notes

https://github.blog/changelog/2026-07-07-secret-scanning-extended-metadata-and-multipart-validation

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityJul 8, 2026

Innersource security advisories are generally available

GitHub Advanced Security enterprise customers can now publish internal security advisories. Innersource advisories work similarly to GitHub’s open source advisories, but their visibility is restricted to repositories owned by the enterprise.

GASecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 8, 2026

npm install-time security and GAT bypass2fa deprecation

npm v12 is now generally available and tagged latest . This major release turns on the install-time security defaults we announced in June , and it’s also where we begin a deprecation of the most sensitive uses of 2FA-bypass granular access tokens (GATs).

DeprecationSecuritySource

GitHub Advanced SecurityJul 9, 2026

Organization-level targeting for GitHub Code Quality

Organization owners can now target a subset of repositories when enabling or disabling GitHub Code Quality, rather than applying it to every repository at once. This gives you more granular control on where you enable or disable Code Quality across your organization.

PreviewPricingObservabilitySource

GitHub Advanced SecurityJul 10, 2026

CodeQL 2.26.0 adds Kotlin 2.4.0 support and AI prompt injection detection

CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.0 , which adds support for Kotlin 2.4.0, introduces a JavaScript and TypeScript query for system prompt injection, and improves analysis accuracy across multiple languages.

UpdateSQLStreamingSecuritySource

GitHub Advanced SecurityJul 10, 2026

Clearer names for secret scanning detector types

To make secret scanning easier to understand, we’re updating the names we use for our detector types to better reflect how each one finds secrets. This is a naming change only; detection behavior is exactly the same.

UpdateSecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 2, 2026

Secret scanning public monitoring for enterprises

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks wherever they happen. We believe every enterprise should know the moment its secrets leak in public, no matter where it happens on GitHub.

PreviewSecurityPricingObservabilitySource

GitHub Advanced SecurityJul 13, 2026

Manage secret scanning custom patterns via REST API

Starting today, security teams can create, edit, and manage secret scanning custom patterns with the REST API. What’s new The following endpoints are generally available: GET .../secret-scanning/custom-patterns list patterns POST .../secret-scanning/custom-patterns create patterns PATCH .../secret-scanning/custom-patterns/{id} update patterns DELETE...

GASecurityObservabilityDeveloper toolsSource

GitHub Advanced SecurityJul 13, 2026

GitHub Code Quality license estimate in public preview

You can now see the number of active committers on repositories using GitHub Code Quality across your enterprise, giving you an estimate of your Code Quality license cost before it becomes a paid product on July 20, 2026. Code Quality is free during the public preview, so this usage isn’t billed today.

PreviewPricingDeveloper toolsCoding agentsSource

Also shipped on Jul 7, 2026

Snowflake SnowflakeJul 7, 2026

Deep Research in Snowflake CoWork (General availability)

Deep Research in Snowflake CoWork is now generally available. Deep Research is an investigation mode for complex, open-ended questions that require multi-step reasoning across your data.

GASource

Databricks LakeflowJul 7, 2026

REPLACE WHERE flows are now generally available

REPLACE WHERE flows for pipelines and standalone streaming tables are now generally available. Use them to replace only rows matching a predicate on each refresh, without reprocessing the full table history. See Batch processing with REPLACE WHERE flows .

GAStreamingData integrationSource

Databricks Databricks SQLJul 7, 2026

Managed Iceberg materialized views are in Public Preview

You can now create a materialized view that is compatible with external Iceberg readers. This feature is in Public Preview . To enable it, reach out to your Databricks account team. See Create a materialized view compatible with external Iceberg readers .

PreviewApache IcebergSource

Microsoft Azure databases and analyticsJul 7, 2026

[Launched] Generally Available: Network Security Perimeter support for Azure Event Hubs

Azure Event Hubs now supports Network Security Perimeter (NSP), enabling organizations to define a logical network isolation boundary for PaaS resources and control public network access through perimeter-based access rules.With Network Security Perimeter

GAStreamingSecuritySource

Microsoft Azure databases and analyticsJul 7, 2026

[Launched] Generally Available: Confidential Computing support for Azure Event Hubs Dedicated

Azure Event Hubs Dedicated now supports Confidential Computing, enabling organizations to protect streaming data while it is being processed in memory. By leveraging hardware-based trusted execution environments (TEEs), customers can help safeguard sensit

GAStreamingSource

Databricks LakeflowJul 7, 2026

Excel file format support is now available by default

Excel file format support is now available by default for all workspaces. You can ingest, parse, and query .xls , .xlsx , and .xlsm files directly using built-in support, without external libraries or manual conversions. See Read and stream Excel files .

UpdateSQLStreamingData integrationSource