Detection Engine Updates Version 2.141
Release Date: June 16, 2025
This release introduces several new detectors for Kubernetes user certificates, NVIDIA API keys, and various other services such as Alchemy, OpenRouter, and Duffel. We've also made improvements to existing detectors for enhanced detection accuracy and reduced false positives.
New Detectors
- Kubernetes User Certificate with Port – Extracts port numbers for Kubernetes user certificates.
- NVIDIA API Key – Detects API keys for NVIDIA services.
- Alchemy API Key v2 – Identifies API keys for Alchemy services.
- OpenRouter API Key – Detects API keys for OpenRouter services.
- Duffel API Key – Recognizes API keys for Duffel services.
- Apify Token – Captures tokens for Apify services.
- Jina API Key – Detects API keys for Jina services.
- Deno Account Token – Identifies tokens for Deno accounts.
- Segment Workspace Key v2 – Detects workspace keys for Segment services.
- Resend API Key – Recognizes API keys for Resend services.
- VKontakte Access Token – Detects access tokens for VKontakte services.
- Fireworks AI API Key – Captures API keys for Fireworks AI services.
New Checkers These checkers are implemented to verify the detected secrets, adding another layer of security and ensuring their validity and correct application:
- Kubernetes User Certificate with Port
- Alchemy API Key v2
- OpenRouter API Key
- Duffel API Key
- Apify Token
- Jina API Key
- Deno Account Token
- Resend API Key
- VKontakte Access Token
- Fireworks AI API Key
Detector Improvements
- Generic High Entropy Secret – Removed AWS ECR images that were misclassified as secrets.
- Google OAuth2 Keys – Improved regex for better detection accuracy.
- Checkout Secret Key – Updated endpoint to avoid deprecated usage.
- Checkout Sandbox Secret Key – Enhanced pattern and updated endpoint for improved accuracy.
- Bunny.net API Key – Fixed checker for better validation.
- Dify API Key – Updated checker endpoint for enhanced detection.
