MobbleOpen in Mobble ⇢
Technology · Cybersecurity · published 2026-10-08 · via Help Net Security

GitHub rolls out AI classifier to block secrets before they reach repositories

Image via Help Net Security
Image via Help Net Security

GitHub has introduced a ModernBERT-based detector, built with Microsoft Applied Sciences, to expand its push protection for credentials. The classifier examines surrounding code to catch unstructured secrets that format-based checks miss, processing candidate secrets in under two milliseconds. GitHub says the tool could more than double the number of secrets blocked before entering repository history.

Expanded Detail

GitHub's new detector, created with Microsoft Applied Sciences, uses ModernBERT to broaden push protection beyond pattern matching. It inspects nearby code to flag credentials lacking a standard format, for instance passwords for databases, and can assess batches of candidates in less than two milliseconds. GitHub estimates this may more than double the secrets blocked before they become part of a repository's recorded history.

The feature is in private preview and is slated for October availability to Enterprise Cloud and Team organizations with GitHub Secret Protection. It will use AI credits. A public preview is planned with GitHub Enterprise Server 3.23, including air-gapped setups. The classifier is also being added to Copilot CLI and Copilot App's /security-review command.

Context

Developers, organizations, and open-source users could benefit if AI-assisted push protection blocks more credentials before exposure, potentially reducing account takeovers and downstream data breaches. Smaller teams may face new AI-credit costs or limited access, while false positives could interrupt workflows and weaken trust in warnings. Because exposed

Expanded detail and Context are AI-generated analysis; the linked article remains the authoritative source.
Read the full article at Help Net Security →
This summary is Al-enhanced to contain extended analysis and broader social context. The original is {NAME); the linked article is the authoritative source. Original headline: “GitHub adds AI to catch passwords before a code push.” Browse more stories.