Detection Engine Updates Version 2.155

  Release Date: January 12, 2026

This release introduces 18+ new detectors covering cloud platforms, databases, and DevOps tools.

New Detectors and Checkers

• Oracle Credentials: Added a detector and checker for Oracle JDBC connection string.
• Azure Entra App Secret: Added a detector and checker for Azure Entra App Secret.
• Azure Entra Access Token: Added a detector and checker for Azure Entra Access Token.
• GitLab SCIM Token: Added a detector and checker for GitLab SCIM Token.
• GitLab Agent Kubernetes Token: Added a detector and checker for GitLab Agent Kubernetes Token.
• ASI:One API Key: Added a detector and checker for ASI:One API keys.
• Azure IoT Device Connection String: Added a detector and checker for Azure IoT Device Connection String.
• Xendit Secret API Key: Added a detector and checker for Xendit Secret API Key.
• Supabase API Key: Added a detector and checker for Supabase API Key.
• Neoload Web Access Token: Added a detector and checker for Neoload Web Access Token.
• MongoDB Credentials: Added a new detector and checker for MongoDB assignment that does not match port.
• Azure Cache for Redis Access Key: Added a detector and checker for Azure Cache for Redis Access Key.

New Detectors

• GitLab Feed Token: Added a new detector for GitLab feed token.
• Clerk Webhook Token: Added a new detector for Clerk Webhook Token.
• Better Auth Secret: Added a new detector for Better Auth Secret.
• Elastic Search API Key: Added a new detector for Elastic Search API Key.
• Redis Credentials: Added a new detector for Redis assignment that does not match port.
• Azure Relay Key: Added a new detector for Azure Relay Key.

Detector Improvements

• Doppler API Key: Improved the Doppler API Key detector by widening the regex.
• Databricks Token With Hostname: Improved the Databricks Token With Hostname detector by adding support for GCP Databricks.
• JetBrains TeamCity Config Value: Fixed crash in detector that can happen with some false positives.
• Scraper API Key: Improved precision of detector.
• Slack Webhook URL: Improved the Slack Webhook URL detector to increase precision and reduce false positives.
• MongoDB Credentials: Enhanced the precision of MongoDB Assignment detector by removing the assignment prefix and adding post validators to ban other databases.
• Okta Keys: Do not match ReCAPTCHA site keys.
• Tailscale Pre-Authentication Key: Upgraded the Tailscale Pre-Authentication Key detector by widening the regex.

Analyzer Upgrades

• Auth0 Keys: The auth0_keys analyzer now surfaces a wider range of error messages.
• Auth0 Keys: Report 404 status code as invalid for auth0_keys checker.
• Cohere API Key: Updated cohere_apikey checker to call a valid endpoint. The previous endpoint has been deprecated and removed.