GitHub’s model for secret detection: Finding more secrets with less noise
GitHub has introduced a context-aware secret classifier that distinguishes real credentials from similar false positives via a two-stage pipeline (regex candidate generation plus fine-tuned ModernBERT classification). Compared with its previous LLM-based pipeline, weighted alert precision improved 11.5%, median post-push scan execution time dropped 86%, and service costs were cut by more than 98%.