I never authorized an integration that scans my secrets
A GitHub user raised privacy concerns regarding an automated secret-scanning feature in Home Assistant, fearing unauthorized data transmission. The project maintainer clarified that the feature is a long-standing local security check that hashes data before processing and can be disabled by users.
Why it matters
This highlights the ongoing tension between automated security features in software and user expectations regarding privacy and transparency.
Code Issues 75 ( 75 ) Pull requests 385 ( 385 ) Actions Projects Security and quality Insights More items i never authorized an integration that scans my secrets #49314 New issue Copy link New issue Copy link Closed Closed i never authorized an integration that scans my secrets #49314 Copy link Labels more-info Description Viss opened on Oct 16, 2026 Issue body actions Type of issue Other (issue in content formatting, broken link or image, non-working widget)
This is a pretty severe invasion of privacy. I never authorized any integrations or plugins for scanning secrets and sending them up the line, even if they are hashed or not. This mechanism could be abused by a malicious threat actor with access to the home assistant github repos in a variety of ways.
Get smarter about the news
Sign up free for a feed built around what you actually care about, Dive Deeper research on any story, and the full text of every article.
Create free accountAlready have an account? Sign in