Detection Engine Updates Version 2.171

  Release Date: August 31, 2026

This release brings improved n8n instance detection for the n8n API Key and n8n MCP Access Token detectors, along with better recall for Hashicorp Vault AppRole Authentication credentials. Three checkers were fixed: Scaleway Token, Workato API Key and Open VSX Access Token. We also added new analyzers for Akamai API Credentials and Docker Credentials, and updated the GitLab Token, Figma Personal Access Token and OpenAI API Key analyzers.

Notable precision improvements (measured on internal benchmarks):

- `generic_high_entropy_secret`: reduction in false positives, from no longer reporting secrets whose assigned variable ends with `checksum`, with no loss of recall.

Detector Updates

• n8n MCP Access Token: Detect n8n hosts given as a container service name or as a scheme-less hostname, and reject unreachable private IP hosts.
• Scaleway Token: Fixed scaleway_basic_auth checker always returning INVALID.
• Workato API Key: Fixed workato_api_key checker always returning INVALID.
• Generic High Entropy Secret: The generic_high_entropy_secret no longer reports secrets whose assigned variable ends with checksum.
• Open VSX Access Token: Update ovsx_access_token checker to the new behavior of the service so that invalid secrets are not returned as failed to check.
• n8n API Key: Detect n8n hosts given as a container service name or as a scheme-less hostname, and reject unreachable private IP hosts.
• Hashicorp Vault AppRole Authentication: Improve recall.

New Analyzers

• Akamai API Credentials: Add a secret analyzer for Akamai API credentials.
• Docker Credentials: Add a new analyzer for Docker Hub personal access tokens.

Analyzer Updates

• GitLab Token: Updated GitLab secret analyzer to adapt to changes in GitLab API behavior.
• Figma Personal Access Token: Update expected response for a particular scope following changes in the Figma API.
• OpenAI API Key: Update scope checker endpoints following updates in the OpenAI API.