Detection Engine Updates Version 2.166

  Release Date: June 23, 2026

This version adds nine new detectors — Amadeus OAuth Credentials, Kinde OAuth Credentials, TomTom API Key, Datadog Personal Access Token, and five Azure services (Maps, Mixed Reality, Service Bus, Quantum, and Bot Direct Line). It also introduces validity checkers for Gemfury Deploy/Push and Full Access tokens, refreshes the LiteLLM and GitLab runner authentication checkers, extends the Artifactory token detector to match longer host names, and updates the Google Cloud and GitLab token analyzers.

New Detectors

• Amadeus OAuth Credentials: Add a new detector for Amadeus OAuth Credentials.
• Kinde OAuth Credentials: Add a new detector for Kinde OAuth Credentials.
• Azure Maps Key: Add a new detector for Azure Maps Key.
• Azure Mixed Reality Key: Add a new detector for Azure Mixed Reality Key.
• TomTom API Key: Add a new detector for TomTom API Key.
• Datadog Personal Access Token: Add a new detector for Datadog Personal Access Token.
• Azure Service Bus Key: Add a new detector for Azure Service Bus Key.
• Azure Quantum Key: Add a new detector for Azure Quantum Key.
• Azure Bot Direct Line Key: Add a new detector for Azure Bot Direct Line Key.

Detector Updates

• Gemfury Deploy Or Push Token: Add a new checker for Gemfury Deploy Or Push Token.
• Gemfury Full Access Token: Add a new checker for Gemfury Full Access Token.
• LiteLLM API Key: Use the models endpoint and validate JSON response shape.
• LiteLLM API Key: Use the models endpoint and validate JSON response shape.
• GitLab runner authentication token: Fix the validity check for GitLab runner authentication tokens
• Artifactory Token With Host: Fixed artifactory_token_with_host detector to catch longer host names.

Analyzer Updates

• Google Cloud Keys: Stop fetching project IAM members in analyzer metadata.
• GitLab Token: Fix fine-grained GitLab PAT analyzer by removing scope checkers that cannot be validated.