AIWHYS

Products

GitHub Secret Protection

2 synchronized stories carry this tag.

Agents & toolsPreview

GitHub previews repository-wide AI Scan, AI-app checks and generic-secret blocking

GitHub added whole-repository AI Scan, pull-request scanning for AI-application risks and context-aware push protection for secrets without predefined patterns. The controls feed code-scanning or push-protection workflows but have separate enablement, plan and credit requirements.

Why it matters: The launches extend AI-assisted security beyond changed lines and known secret formats, while also adding probabilistic results to alert, push and review gates that need independent triage and false-positive measurement.

Read storyOriginal source · github.blog
ReliabilityShipped

GitHub adds context-aware detection for password-like secrets

GitHub deployed a fine-tuned model that reads surrounding code to identify likely credentials, including passwords without a recognizable token format. Existing AI-detected Password alerts were upgraded automatically; push protection is private preview and Copilot /security-review support is still forthcoming.

Why it matters: Context can catch unstructured credentials that pattern matching misses, but the model also creates a new probabilistic control whose recall, false positives, rollout and billing need separate treatment across alerting, push blocking and agent review.

Read storyOriginal source · github.blog