GitHub adds AI to catch passwords before a code push

What happened

GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can block a push before a credential enters repository history.

The new classifier examines surrounding code to identify unstructured secrets, such as database passwords with … More → The post GitHub adds AI to catch passwords before a code push appeared first on Help Net Security . How the detector works Existing checks recognize many credentials by their formats.

Key facts

• GitHub has — announced: an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories