[daily secrets] Secret Usage Analysis — 2026-07-19

[github-actions[bot]]

🔐 Daily Secrets Analysis Report

Date: 2026-07-19
Workflow Files Analyzed: 258
Run: §29697713915

📊 Executive Summary

Metric	Count
Total references	8,463
references	1,677
Unique secret types	40
Step-level secret usage	~3,996
Token cascade instances	929

🛡️ Security Posture

✅ Redaction System: 258/258 workflows have redaction steps
✅ Token Cascades: 929 instances of fallback chains
✅ Permission Blocks: 258/258 explicit permission definitions
✅ No Secrets in Job Outputs: 0 confirmed cases

i️ ** usage**: 4,620 references, all consistently assigned to named env variables — no injection risk.
i️ Note: false positive (from require paths) excluded from count.

🎯 Key Findings

1. GitHub token dominance: (4,272) and (3,654) together account for ~93% of all secret references — expected for automation-heavy workflows.
2. Observability secrets: Sentry, Grafana, and Datadog secrets appear consistently for OTEL pipeline configuration across 258 workflows.
3. AI API key diversity: 7 distinct AI provider keys in use (Anthropic, OpenAI, Codex, Gemini, Foundry, OpenRouter, Sentry-OpenAI), reflecting multi-provider agent architecture.

💡 Recommendations

1. Audit low-usage secrets: (1), (1), (1), (2) — verify these are still needed.
2. Review Azure credentials: each appear only twice — confirm those workflows are active.
3. Monitor AI key sprawl: 7 AI provider key types and growing. Consider centralizing provider selection.

🔑 Top 20 Secrets by Usage

Rank	Secret Name	Occurrences	Category
1		4,272	GitHub Token
2		3,654	GitHub Token
3		1,703	GitHub Token
4		727	GitHub Token
5		696	Observability
6		465	Observability
7		463	Observability
8		243	AI Provider
9		232	Observability
10		93	AI Provider
11		92	AI Provider
12		59	CI/CD
13		24	GitHub Token
14		15	CI/CD
15		12	AI Provider
16		10	AI Provider
17		10	Observability
18		10 each	Observability
19		8	Observability
20		6	Integration

📋 All 40 Unique Secret Types by Category

GitHub Tokens (6): , , , , ,
Observability (11): , , , , ,
AI Providers (8): , , , , , , ,
CI/CD (3): , ,
Cloud (3): , ,
Integration (3): , ,
Internal (2): ,

📖 Reference Documentation

• Secrets spec:
• Redaction system:

---

Generated: 2026-07-19T17:56:57Z
Workflow: §29697713915

Generated by 🔒 Daily Secrets Analysis Agent · 33.2 AIC · ⌖ 7.51 AIC · ⊞ 6.2K · ◷

• expires on Jul 22, 2026, 10:02 AM UTC-08:00

[github-actions[bot]]

This discussion has been marked as outdated by Daily Secrets Analysis Agent.

A newer discussion is available at Discussion #46899.