Coding Tools
GitHub Secret Scanning: Base64 Tokens & Audit Log Changes
GitHub Changeloghigh confidence
Why it matters
- →Base64-encoded token detection closes a common evasion vector in private repos.
- →Audit log field changes require immediate updates to automated security workflows.
- →Error code standardization improves reliability for custom pattern integrations.
GitHub has updated its secret scanning capabilities to detect and revoke Base64-encoded personal access tokens, OAuth tokens, and GitHub App user access tokens within private repositories. The platform now automatically decodes these values during the scan process. In parallel, audit log events for secret scanning will transition from using enterprise display names to enterprise slugs in the 'business' field, requiring integrations to adapt to avoid disruption. Additional improvements include fixing bypass-request metadata errors and changing error codes for invalid custom pattern API requests from 500 to 422.
Read originalThe story around this
Earlier coverage that leads up to this article, and what followed. Lines connect each piece to the closest one after it, converging here.
How we got here
- 1GitHub Adds REST API for Secret Scanning Patterns
GitHub Changelog · July 13, 2026 · Same story
- 2GitHub Enhances Secret Scanning and Monitoring
GitHub Changelog · July 15, 2026 · Same story
Follow this story
Open the full story →GitHub adds audit logs for code quality findings
More in Coding Tools
Coding Toolscoding
Claude Code v2.1.316: Subagents and Gateway Budgets
Anthropic is tightening control over Claude Code's autonomous behavior with new environment variables that let you disable 'ultrathink' or cap subagent effort levels. For teams, the introduction of pooled group budgets on the gateway allows shared monthly spending limits across members, a practical fix for enterprise cost management. The release also patches critical bugs where shell commands would hang or crash on exit, stabilizing the developer experience significantly.
Claude Code Releases
Coding Toolscoding
llama.cpp b12022 adds ROCm 10 and Snapdragon support
This release quietly cements llama.cpp as the universal inference runtime by finally bringing ROCm 10.0 to Linux and Windows alongside CUDA 13.4, effectively closing the hardware gap for AMD users who were previously left behind. The inclusion of native Snapdragon support on Linux marks a significant step toward running local LLMs on ARM-based mobile chips without emulation overhead. While KleidiAI on Apple Silicon is disabled in this build, the broader expansion to diverse accelerators ensures that developers aren't locked into NVIDIA ecosystems anymore.