What GitHub's AI Secret Detection Changes: A Design to Stop Even 'Unstructured Passwords' Before They Are Pushed

On October 7, GitHub announced plans to expand its dedicated AI model for detecting potential secret leaks to secret scanning ...
Help Net Security

GitHub adds AI to catch passwords before a code push

GitHub's new AI detector checks code for exposed passwords and credentials, expanding push protection to prevent more secret leaks.
Help Net Security

GitHub adopts cheaper AI model to catch secrets developers leave in code

GitHub uses ModernBERT to improve secret detection, reduce false alerts and cut scanning time and model serving costs in ...
BleepingComputer

GitHub now can auto-block token and API key leaks for all repos

GitHub is now automatically blocking the leak of sensitive information like API keys and access tokens for all public code repositories. Today's announcement comes after the company introduced push ...
Hosted on MSN

GitHub’s critical flaw let anyone with push access execute code on servers holding millions of private repos

A single git push command. That is all it would have taken for someone with write access to a repository on GitHub Enterprise Server to execute arbitrary code on the underlying host machine, according ...
VentureBeat

Open-source code is everywhere; GitHub expands security tools to help secure it

Join our daily and weekly newsletters for the latest updates and exclusive content on industry-leading AI coverage. Learn More Whether directly or indirectly, nearly all organizations depend on ...
InfoQ

How GitHub Improved Code Push Processing Reliability

Unlock the full InfoQ experience by logging in! Stay updated with your favorite authors and topics, engage with content, and download exclusive resources. Lily Mara explains how to avoid high-risk ...