GitHub extends push protection to detect unstructured secrets
What happened
On 8 October 2026, GitHub announced on its official blog a ModernBERT-based secret detection model that extends push protection from structured secrets to unstructured secrets. The model, a classifier jointly fine-tuned by GitHub and Microsoft Applied Sciences, uses code context to identify unstructured secrets in database URLs, Kubernetes Secret manifests and Dockerfiles. GitHub says the model can evaluate a batch of candidate secrets in 2 milliseconds and more than double the number of secrets it can block. The current status is that the model has been released and applied to extend push protection.
Written by AI from the reports · updated 8 d ago
Timeline
Follow the reports to see the event from each side.
- GitHub Blog · AI & MLSecret protection must scale with software
Developers aren’t becoming more careless; they’re being outpaced. The tools that let developers create more software should also take on more of the work of protecting it.
Heat of this event
Current heat 3·Peak in the comparable range 3（Oct 9 17:00）·Change over 24 hours in the comparable range –
The trend compares only the same accounts observed without a break, so its range can be narrower than the current heat count. Move the pointer or tap the chart to see each hour; with a keyboard, use the left and right arrow keys.