# GitHub now scans for leaked Doppler tokens

DevFeed: [GitHub now scans for leaked Doppler tokens](<https://devfeed.tech/articles/github-now-scans-for-leaked-doppler-tokens-74592.md>)

Original publisher: [Read original article](<https://github.blog/changelog/2020-12-07-github-now-scans-for-leaked-doppler-tokens>)

Author: phanatic

Published: 2020-12-07T17:25:37Z

Content type: release

Language: en

Sources: [GitHub Changelog](<https://devfeed.tech/sources/github-changelog.md>)

Topics: [Secret Scanning](<https://devfeed.tech/topics/secret-scanning.md>), [Secure token management](<https://devfeed.tech/topics/secure-token-management.md>), [GitHub](<https://devfeed.tech/topics/github.md>)

Tags: [github](<https://devfeed.tech/tags/github.md>), [secret-scanning](<https://devfeed.tech/tags/secret-scanning.md>), [tokens](<https://devfeed.tech/tags/tokens.md>)

## AI overview

GitHub added Doppler API tokens to its secret scanning partner coverage. When a token is found in a public repository, GitHub notifies Doppler so it can revoke the token and notify its owner. For private repositories with secret scanning enabled, GitHub notifies the repository owner.

## Source excerpt

If you commit a secret to a public repository, the whole world can see it. GitHub secret scanning helps protect you from fraud and data breaches by scanning for leaked...