# Secret scanning adds detectors for Lovable, Supabase, and more

By Steven Van · 2026-10-05

Lovable joins the partner program, allowing GitHub to report exposed API keys in public repositories directly to the provider.

Five newly supported credential types expand [GitHub](<https://creatorstoolbox.com/tools/github>) secret scanning’s coverage across Lovable Labs, Pydantic Services Inc., and Supabase. Lovable Labs has also joined the secret scanning partnership program.

## New credential detectors

- Lovable Labs: lovable\_api\_key.

- Pydantic Services Inc.: logfire\_token and pydantic\_ai\_gateway\_api\_key.

- Supabase: supabase\_oauth\_access\_token and supabase\_scoped\_personal\_access\_token.

Secret scanning checks the entire Git history across all repository branches. GitHub also periodically rescans repositories when new secret types are added.

## Partner reporting and repository alerts

When a Lovable API key is found in a public repository, GitHub forwards it to Lovable Labs so the provider can revoke or rotate it. Partner secrets are reported directly to their issuer and do not appear in repository alerts. User secrets generate secret scanning alerts when found in public or private repositories.

## Availability

Secret scanning runs automatically for free in public repositories. Organization-owned private and internal repositories require GitHub Secret Protection on GitHub Team or GitHub Enterprise Cloud. User-owned repositories are supported on GitHub Enterprise Cloud with Enterprise Managed Users, and on GitHub Enterprise Server when the enterprise has GitHub Secret Protection enabled.

GitHub’s [secret scanning documentation](<https://docs.github.com/code-security/secret-scanning/introduction/about-secret-scanning>) explains detection, alerts, and partner reporting.

![GitHub](<https://github.githubassets.com/assets/GitHub-Mark-ea2971cee799.png>)

GitHub

Where the world builds software — Git hosting, pull requests, issues, Actions CI/CD, and Copilot, free for public and private repos.

[View GitHub →](<https://creatorstoolbox.com/tools/github>)

[Original source](<https://github.blog/changelog/2026-10-05-secret-scanning-adds-detectors-for-lovable-supabase-and-more>)

[Read Secret scanning adds detectors for Lovable, Supabase, and more on Creators Toolbox](<https://creatorstoolbox.com/blog/github-secret-scanning-adds-detectors-for-lovable-supabase-and-more>)

---
Canonical source: https://creatorstoolbox.com/blog/github-secret-scanning-adds-detectors-for-lovable-supabase-and-more