GitHub blocks four more secret types

GitHub added 4 secret types to push protection by default, including Mistral AI API keys, so enabled repositories now block matching credentials before a commit lands. Its secret-scanning coverage update also adds Lovable Labs as a partner and richer metadata for four token patterns. For teams hardening the agent runtime as a policy boundary, the practical move is to keep an independent CI scanner and rotation playbook: prevention coverage grew, but a detector is not proof that an exposed key stayed unused.