GitHub adds AI to catch passwords before a code push

GitHub announced an AI detector built with Microsoft Applied Sciences that expands its push protection to catch unstructured secrets, such as database passwords, before they enter repository history. The ModernBERT-based classifier examines surrounding code rather than relying only on credential formats, and can block a push before a credential is committed.

GitHub has announced an AI detector, developed with Microsoft Applied Sciences, to help prevent developers from uploading passwords and other credentials to code repositories. The ModernBERT-based classifier will expand GitHub’s push protection, which checks code for secrets and can block a push before a credential enters repository history. How the detector works Existing checks recognize many credentials by their formats. The new classifier examines surrounding code to identify unstructured secrets, such as database passwords with … More https://www.helpnetsecurity.com/2026/10/08/github-push-protection-modernbert/ The post GitHub adds AI to catch passwords before a code push https://www.helpnetsecurity.com/2026/10/08/github-push-protection-modernbert/ appeared first on Help Net Security https://www.helpnetsecurity.com .