Security1 hOctober 1, 2026, 13:28

GitHub adds rule to block PRs that leak secrets

On September 9, 2026, GitHub introduced a repository rule that blocks pull requests introducing secret-scanning alerts. The feature is in public preview for GitHub Secret Protection and GitHub Advanced Security customers.

DEV Community

Open source

Rule blocks a PR if the latest commit is unscanned or has open secret alerts
Merge-time check complements existing push protection
Available in public preview for Secret Protection and Advanced Security
Deleting a token from code does not auto-close the alert

#GitHub

Deleting a secret from your Docker image doesn't delete it from your build history

Security

GitGuardian: AI-assisted commits leak secrets twice as often

Security

Chainguard CISO: AI agents rewrite software supply chain security rules

Security

GitHub adds rule to block PRs that leak secrets

Deleting a secret from your Docker image doesn't delete it from your build history

GitGuardian: AI-assisted commits leak secrets twice as often

Chainguard CISO: AI agents rewrite software supply chain security rules

AI agents leaked 13,000 screenshots of internal corporate systems to public GitHub