GitHub now blocks two more Anthropic key types on push

As of October 13, 2026, GitHub secret scanning detects anthropic_user_api_key and anthropic_service_api_key, and push protection blocks them by default in public repositories. Private repositories without GitHub Secret Protection still get no block.

• New detectors: anthropic_user_api_key and anthropic_service_api_key
• Default blocking applies only to public repositories
• Private repos require GitHub Secret Protection enabled
• Bypasses need a reason and are logged in the audit log