{
  "$schema": "https://themachinepress.com/schemas/story-v1.schema.json",
  "schema_version": "1.0.0",
  "document_type": "machine_press_story",
  "story": {
    "story_id": "mp-2026-07-16-027",
    "source_story_id": "tmp-story-github-secret-scanning-monitoring-improvements",
    "edition_id": "mp-2026-07-16-morning-0007",
    "edition_url": "https://themachinepress.com/edition/2026-07-16",
    "position": 16,
    "story_type": "dispatch",
    "section": "safety",
    "editorial_classification": "editorial",
    "headline": "Secret Scanning Adds Context Before the Alert Queue",
    "slug": "secret-scanning-adds-context-before-the-alert-queue",
    "dek": "GitHub added new token detectors, a webhook category field, expanded push protection, and enterprise-level public-leak summaries.",
    "summary": "GitHub added new token detectors, a webhook category field, expanded push protection, and enterprise-level public-leak summaries.",
    "body_text": "GitHub's July 15 secret-scanning update added detectors for APIclub and Resend tokens and made VolcEngine keys blocked by push protection by default where secret scanning is enabled. A new secret_category field distinguishes provider and custom patterns from generic and AI-detected secrets in webhook payloads. Public-monitoring alert lists now summarize leak attribution, enterprise member counts, and verified domains before teams open individual alerts. The changes improve routing and situational context; they do not remove the need to revoke exposed credentials or investigate the underlying repository history.",
    "why_it_matters": "GitHub added new token detectors, a webhook category field, expanded push protection, and enterprise-level public-leak summaries.",
    "limitations": [
      "The changes improve routing and situational context; they do not remove the need to revoke exposed credentials or investigate the underlying repository history."
    ],
    "importance": 8,
    "canonical_url": "https://themachinepress.com/story/mp-2026-07-16-027/secret-scanning-adds-context-before-the-alert-queue",
    "json_url": "https://themachinepress.com/story/mp-2026-07-16-027.json",
    "first_published_at": "2026-07-16T09:00:00.000-04:00",
    "modified_at": "2026-07-16T09:00:00.000-04:00",
    "content_status": "new",
    "is_carryover": false,
    "carryover_reason": null,
    "key_claims": [
      {
        "claim_id": "claim-mp-2026-07-16-027-001",
        "text": "GitHub added new token detectors, a webhook category field, expanded push protection, and enterprise-level public-leak summaries.",
        "source_ids": [
          "source-2026-07-16-016"
        ],
        "qualification": "The changes improve routing and situational context; they do not remove the need to revoke exposed credentials or investigate the underlying repository history."
      }
    ],
    "source_ids": [
      "source-2026-07-16-016"
    ],
    "tags": [
      "secret scanning",
      "GitHub",
      "push protection",
      "security"
    ],
    "image_url": null,
    "corrections": []
  },
  "sources": [
    {
      "source_id": "source-2026-07-16-016",
      "title": "GitHub Changelog: Improvements to secret scanning and public monitoring",
      "publisher": "GitHub",
      "url": "https://github.blog/changelog/2026-07-15-improvements-to-secret-scanning-and-public-monitoring/",
      "canonical_url": "https://github.blog/changelog/2026-07-15-improvements-to-secret-scanning-and-public-monitoring/",
      "source_type": "secondary_reporting",
      "is_primary_source": false,
      "published_at": "2026-07-15T12:00:00.000-04:00",
      "accessed_at": "2026-07-16T08:21:29.993-04:00",
      "supports_claim_ids": [
        "claim-mp-2026-07-16-027-001"
      ]
    }
  ],
  "corrections": [],
  "publisher": {
    "name": "The Machine Press",
    "url": "https://themachinepress.com",
    "description": "A daily newspaper for the age of artificial intelligence."
  },
  "cite_this_report": {
    "title": "Secret Scanning Adds Context Before the Alert Queue",
    "publisher": "The Machine Press",
    "published_at": "2026-07-16T09:00:00.000-04:00",
    "canonical_url": "https://themachinepress.com/story/mp-2026-07-16-027/secret-scanning-adds-context-before-the-alert-queue"
  }
}