Docs updates with secret scanning partners and patterns (#42568)

nattywombat · marzvrover · am-stead · web-flow · commit 282a2d10a3e5 · 2023-09-20T19:33:08.000Z
Co-authored-by: marz &lt;marzvrover@github.com&gt;
Co-authored-by: Anne-Marie &lt;102995847+am-stead@users.noreply.github.com&gt;
diff --git a/data/secret-scanning.yml b/data/secret-scanning.yml
@@ -9,6 +9,19 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
+
+- provider: 'Adobe'
+  supportedSecret: 'Adobe Client Secret'
+  secretType: 'adobe_client_secret'
+  versions:
+    fpt: '*'
+    ghec: '*'
+    ghes: '>=3.11'
+    ghae: '>=3.11'
+  isPublic: true
+  isPrivateWithGhas: true
+  hasPushProtection: true
   hasValidityCheck: false
 
 - provider: 'Adobe'
@@ -21,20 +34,33 @@
     ghae: '*'
   isPublic: true
   isPrivateWithGhas: true
-  hasPushProtection: false
+  hasPushProtection: true
   hasValidityCheck: false
 
 - provider: 'Adobe'
-  supportedSecret: 'Adobe JSON Web Token'
-  secretType: 'adobe_jwt'
+  supportedSecret: 'Adobe PAC Token'
+  secretType: 'adobe_pac_token'
   versions:
     fpt: '*'
     ghec: '*'
-    ghes: '*'
-    ghae: '*'
+    ghes: '>=3.11'
+    ghae: '>=3.11'
   isPublic: true
   isPrivateWithGhas: true
-  hasPushProtection: false
+  hasPushProtection: true
+  hasValidityCheck: false
+
+- provider: 'Adobe'
+  supportedSecret: 'Adobe Refresh Token'
+  secretType: 'adobe_refresh_token'
+  versions:
+    fpt: '*'
+    ghec: '*'
+    ghes: '>=3.11'
+    ghae: '>=3.11'
+  isPublic: true
+  isPrivateWithGhas: true
+  hasPushProtection: true
   hasValidityCheck: false
 
 - provider: 'Adobe'
@@ -47,7 +73,7 @@
     ghae: '*'
   isPublic: true
   isPrivateWithGhas: true
-  hasPushProtection: false
+  hasPushProtection: true
   hasValidityCheck: false
 
 - provider: 'Adobe'
@@ -60,7 +86,7 @@
     ghae: '*'
   isPublic: true
   isPrivateWithGhas: true
-  hasPushProtection: false
+  hasPushProtection: true
   hasValidityCheck: false
 
 - provider: 'Aiven'
@@ -1136,7 +1162,7 @@
   isPublic: false
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
 
 - provider: 'Google'
   supportedSecret: 'Google OAuth Client ID with Google OAuth Client Secret'
@@ -1175,7 +1201,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: false
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
 
 - provider: 'Google Cloud'
   supportedSecret: 'Google Cloud Private Key ID'
@@ -1604,6 +1630,19 @@
   hasPushProtection: false
   hasValidityCheck: false
 
+- provider: 'Maxmind'
+  supportedSecret: 'Maxmind License Key'
+  secretType: 'maxmind_license_key'
+  versions:
+    fpt: '*'
+    ghec: '*'
+    ghes: '>=3.11'
+    ghae: '>=3.11'
+  isPublic: false
+  isPrivateWithGhas: true
+  hasPushProtection: true
+  hasValidityCheck: false
+
 - provider: 'Mercury'
   supportedSecret: 'Mercury Non-Production API Token'
   secretType: 'mercury_non_production_api_token'
@@ -1784,7 +1823,7 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
 
 - provider: 'Octopus Deploy'
   supportedSecret: 'Octopus Deploy API Key'
@@ -1914,7 +1953,20 @@
   isPublic: true
   isPrivateWithGhas: true
   hasPushProtection: true
-  hasValidityCheck: false
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
+
+- provider: 'OpenAI'
+  supportedSecret: 'OpenAI API Key V2'
+  secretType: 'openai_api_key_v2'
+  versions:
+    fpt: '*'
+    ghec: '*'
+    ghes: '>=3.5'
+    ghae: '>= 3.5'
+  isPublic: true
+  isPrivateWithGhas: true
+  hasPushProtection: true
+  hasValidityCheck: '{% ifversion fpt or ghes < 3.12 %}false{% else %}true{% endif %}'
 
 - provider: 'Palantir'
   supportedSecret: 'Palantir JSON Web Token'
