CYBERSECURITYTRACKER
Permanent story citation

GitHub adds AI to catch passwords before a code push

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9716

As cited

Copy frozen at (site build).

cloud saas

GitHub adds AI to catch passwords before a code push

GitHub introduced an artificial intelligence (AI) detector, built with Microsoft Applied Sciences, to prevent developers from inadvertently committing passwords and other credentials to code repositories. The ModernBERT-based classifier enhances GitHub's existing push protection by identifying unstructured secrets through context analysis of surrounding code, complementing format-based credential recognition.

Why it matters: Developers and organizations using GitHub are at risk of exposing database passwords and other secrets in repository history; this tool helps reduce credential leaks before they reach version control.

VendorsMicrosoftGitHub
Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary