Secret scanning coverage updates

UpdateAug 7, 2026VerifiedAdded Sep 22, 2026

This release expands secret scanning’s coverage with more secrets blocked by push protection, one new secret scanning partner, and richer metadata on alerts. Secret scanning partnership program Lovable Labs is now a GitHub secret scanning partner. Secret scanning now automatically detects the following new secret type in your repositories.

LLMs Security

Read GitHub's release notes

https://github.blog/changelog/2026-08-07-secret-scanning-coverage-updates

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More GitHub Advanced Security releases

GitHub Advanced SecurityAug 4, 2026

Customize code scanning default setup at scale

You can now apply your own configuration file to code scanning default setup, using the new github-codeql-config-file repository property. This gives you control over how CodeQL scans your code for security vulnerabilities, whether that’s on one repository or across your whole organization.

UpdateSecurityDeveloper toolsSource

GitHub Advanced SecurityAug 4, 2026

Customize Dependabot pull request branch names

You can now customize the branch names Dependabot creates for pull requests. New pull-request-branch-name options in .github/dependabot.yml let you set a prefix and maximum length, choose segment and word separators, set letter case, or define a custom template using placeholders.

UpdateObservabilitySource

GitHub Advanced SecurityAug 4, 2026

Code coverage automatic enablement in Code Quality settings

We’re making code coverage setup faster and simpler. You’ll now see a new option in your repository’s Code Quality settings that lets GitHub generate your coverage workflow automatically with AI. We’ll open a pull request so you can review the changes before you merge them. Setting up code coverage has traditionally felt disconnected and manual.

PreviewAI agentsSecurityData integrationSource

GitHub Advanced SecurityAug 4, 2026

CodeQL 2.26.2 adds Swift 6.3.3 and Kotlin 2.4.10 support

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.2, which adds support for Swift 6.3.3 and Kotlin 2.4.10, and improves the accuracy of path injection, URL redirection, and GitHub Actions queries.

UpdateSQLGovernanceSecuritySource

GitHub Advanced SecurityAug 13, 2026

License data quality improvements

GitHub now uses package registries like npmjs.org and PyPI to determine license information for software components in the dependency graph. This improves the accuracy and completeness of the licenses shown in dependency insights, software bills of materials (SBOMs), the open source license compliance feature in GitHub Advanced Security, and the dependency...

UpdateGovernanceSecuritySource

GitHub Advanced SecurityJul 31, 2026

Restricting npm bypass-2FA granular access tokens

npm granular access tokens (GATs) configured to bypass 2FA can no longer perform sensitive account, org, and package management actions. These now require an interactive 2FA challenge, closing one of the largest credential-based attack surfaces on the registry. This only impacts npm granular access tokens.

UpdateDeveloper toolsSource

GitHub Advanced SecurityJul 29, 2026

CodeQL 2.26.1 improves analysis accuracy and framework coverage

CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.26.1 , which improves framework coverage for Go, Java/Kotlin, and JavaScript/TypeScript, and reduces false positives in Rust analysis.

UpdateSQLSecurityObservabilitySource

GitHub Advanced SecurityJul 28, 2026

npm publish-time malware scanning and dual-use metadata

As part of our ongoing supply-chain security work, npm is introducing automatic scanning of packages at publish time . This changelog covers what publishers can expect and a new metadata requirement for dual-use content.

UpdateGovernanceSecurityObservabilitySource

Also shipped on Aug 7, 2026

Snowflake SnowflakeAug 7, 2026

DCM Projects (General availability)

DCM Projects are now generally available and are no longer in Preview . DCM Projects enable a declarative approach to managing Snowflake objects as code. You define the desired target state of your databases, tables, tasks, and other Snowflake objects in definition files, and Snowflake determines and applies the necessary changes to reach that state.

GASQLPricingDeveloper toolsSource

Snowflake Snowflake Cortex AIAug 7, 2026

Snowflake Native Apps: Cortex Agents and MCP servers (General availability)

Cortex Agents and MCP servers in Snowflake Native Apps are now generally available. Providers can create the following objects in an app’s setup script: Apps can also use inter-app communication so that one app’s agent calls another app’s agent or MCP server.

GAAI agentsMCPSource

Databricks Unity CatalogAug 7, 2026

Tag automations (Beta)

Tag automations are now in Beta . A tag automation assigns or removes governed tags on the Unity Catalog tables or volumes that match conditions you define, so tags stay accurate as your data and metadata change.

BetaGovernanceBIObservabilitySource

Databricks LakeflowAug 7, 2026

Change data feed on materialized views (Beta)

You can now read a change data feed from a materialized view created in a Lakeflow pipeline or in Databricks SQL, using Databricks Runtime 18 LTS or above. Use this to replicate materialized view changes to destinations outside Databricks, or to keep a history of materialized view changes for auditing and reporting.

BetaSQLData integrationDeveloper toolsSource

Databricks Databricks Data Intelligence PlatformAug 7, 2026

ai_search function (Beta)

The ai_search() SQL function retrieves information from one or more AI Search indexes configured as knowledge sources. Given a natural-language query, the function generates optimized search queries, retrieves and deduplicates results across sources, reranks them by relevance, and returns the most relevant documents.

BetaVector searchSQLData integrationSource

Google Cloud AlloyDBAug 7, 2026

AlloyDB can sync BigQuery tables in preview

BigQuery tables can be synced into AlloyDB once or on a periodic schedule, giving operational analytics low-latency transactional access to data lake data.

PreviewSQLPerformanceSource