GitHub adds AI to catch passwords before a code push

GitHub announced an AI classifier built with Microsoft Applied Sciences that detects unstructured secrets, such as database passwords, before code is pushed. The ModernBERT-based model evaluates batches of possible secrets in under two milliseconds and could more than double the secrets push protection blocks. It is in private preview and will reach Enterprise Cloud and Team plans in late October, consuming AI credits.

• ModernBERT classifier scans surrounding code for secrets with no recognizable format
• It evaluates batches of possible secrets in under two milliseconds
• Push protection currently blocks only about 30% of new secrets before they enter history
• Public preview ships with GitHub Enterprise Server 3.23