GitHub adopts cheaper AI model to catch secrets developers leave in code

GitHub trained a credential classifier for its secret scanning pipeline that cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model pipeline, the company said. The classifier is designed to improve generic secret detection and reduce false alerts across GitHub's two scanning stages: push protection, which checks changes before a push is accepted, and post-push scanning, which examines repository content and creates alerts for potential credential leaks.

GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model LLM pipeline. GitHub’s secret scanning covers two stages of development. Push protection checks changes before a push is accepted, helping developers prevent credential leaks. Post-push scanning examines repository content and creates alerts for potential … More https://www.helpnetsecurity.com/2026/10/14/github-secret-detection-model/ The post GitHub adopts cheaper AI model to catch secrets developers leave in code https://www.helpnetsecurity.com/2026/10/14/github-secret-detection-model/ appeared first on Help Net Security https://www.helpnetsecurity.com .