---
id: "gitguardian"
category: "detector"
url: "https://registry.apicrafter.io/tool/gitguardian"
---

# GitGuardian (`gitguardian`)

Commercial secrets detection platform with the open-source ggshield command-line client. It scans git history, CI pipelines, containers and collaboration tools. Specific detectors target the credential format of one service, and many of them can check whether a found secret is still valid; generic detectors find passwords, high-entropy strings, authentication headers and JSON Web Tokens without knowing the issuer. The list of supported credentials had about 650 specific and 19 generic detectors in November 2026; the supported types cover only the registry datatypes that match one of them.

Website: <https://docs.gitguardian.com/secrets-detection/secrets-detection-engine/detectors/supported_credentials>

## Supported datatypes (87)

- `anthropic_api_key`
- `aws_access_key_id`
- `aws_secret_access_key`
- `azure_ai_services_key`
- `azure_cache_redis_key`
- `azure_cosmosdb_key`
- `azure_devops_pat`
- `azure_entra_client_secret`
- `azure_function_key`
- `azure_storage_account_key`
- `clojars_deploy_token`
- `cloudflare_api_token`
- `cloudflare_origin_ca_key`
- `connection_string`
- `databricks_access_token`
- `digitalocean_token`
- `discord_bot_token`
- `discord_webhook_url`
- `doppler_token`
- `dropbox_short_lived_token`
- `dynatrace_token`
- `facebook_access_token`
- `flutterwave_secret_key`
- `github_fine_grained_pat`
- `github_token`
- `gitlab_agent_token`
- `gitlab_cicd_job_token`
- `gitlab_deploy_token`
- `gitlab_feature_flags_client_token`
- `gitlab_feed_token`
- `gitlab_incoming_mail_token`
- `gitlab_pat`
- `gitlab_runner_token`
- `gitlab_scim_token`
- `gitlab_trigger_token`
- `google_api_key`
- `grafana_service_account_token`
- `hashicorp_vault_token`
- `http_authorization_header`
- `huggingface_access_token`
- `jfrog_reference_token`
- `jwt`
- `linear_api_key`
- `mailchimp_api_key`
- `mailgun_api_key`
- `mapbox_access_token`
- `new_relic_insights_key`
- `new_relic_license_key`
- `notion_integration_token`
- `npm_access_token`
- `onepassword_service_account_token`
- `openai_api_key`
- `openrouter_api_key`
- `openssh_private_key`
- `password`
- `pgp_private_key_block`
- `planetscale_password`
- `planetscale_token`
- `polar_organization_access_token`
- `posthog_personal_api_key`
- `postman_api_key`
- `prefect_api_key`
- `pulumi_access_token`
- `pypi_token`
- `replicate_api_token`
- `rubygems_api_key`
- `sendgrid_api_key`
- `sendinblue_api_key`
- `sentry_auth_token`
- `shared_access_signature`
- `shippo_api_token`
- `shopify_access_token`
- `slack_token`
- `slack_webhook_url`
- `sonarqube_token`
- `square_access_token`
- `stripe_api_key`
- `stripe_webhook_secret`
- `symmetric_key`
- `telegram_bot_token`
- `terraform_cloud_api_token`
- `twilio_api_key_sid`
- `typeform_personal_access_token`
- `uri_with_password`
- `user_credentials`
- `vercel_token`
- `x509_private_key`