GitHub adds context-aware detection for password-like secrets
GitHub deployed a fine-tuned model that reads surrounding code to identify likely credentials, including passwords without a recognizable token format. Existing AI-detected Password alerts were upgraded automatically; push protection is private preview and Copilot /security-review support is still forthcoming.
Why it matters: Context can catch unstructured credentials that pattern matching misses, but the model also creates a new probabilistic control whose recall, false positives, rollout and billing need separate treatment across alerting, push blocking and agent review.