GitHub previews repository-wide AI Scan, AI-app checks and generic-secret blocking
GitHub added whole-repository AI Scan, pull-request scanning for AI-application risks and context-aware push protection for secrets without predefined patterns. The controls feed code-scanning or push-protection workflows but have separate enablement, plan and credit requirements.
Why it matters: The launches extend AI-assisted security beyond changed lines and known secret formats, while also adding probabilistic results to alert, push and review gates that need independent triage and false-positive measurement.