CYBERSECURITYTRACKER
Permanent story citation

GitHub adopts cheaper AI model to catch secrets developers leave in code

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 10222

As cited

Copy frozen at (site build).

cloud saas

GitHub adopts cheaper AI model to catch secrets developers leave in code

GitHub deployed a smaller, specialized credential classifier to detect secrets in code, replacing a large language model (LLM) pipeline. The new approach reduced scan time by 86% and model serving costs by over 98% while maintaining secret detection capability across push protection and post-push scanning stages.

Why it matters: Developers using GitHub Secret Scanning benefit from faster feedback and lower operational overhead, enabling quicker remediation of exposed credentials before they reach production.

VendorsGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary