# GitHub adds AI detector to catch passwords before code push

Digest AI · Enterprise & Industry · published 2026-10-08T02:02:00Z

Canonical: https://digestai.news/story/github-adds-ai-detector-to-catch-passwords-before-code-push

## Summary

github has announced a new ai detector, built with microsoft applied sciences, to help developers avoid uploading passwords and other credentials to code repositories. the modernbert‑based classifier evaluates batches of possible secrets in under two milliseconds and could more than double the number of secrets that push protection can prevent. a new secret appears in publicly visible code roughly every two seconds. from the second quarter of 2024 to the second quarter of 2026, the number of public code pushes screened increased by a factor of 2.84, while pushes containing credentials increased by a factor of 2.59. push protection blocks about 30 % of newly detected secrets before they enter repository history, leaving 70 % detected after exposure. manual revocation takes around 40 days on average, with one in five exposed secrets taking more than 90 days. the feature is in private preview and will be available later in october to organizations with github secret protection on enterprise cloud and team plans; it will consume ai credits and remain included in secret scanning purchases at no additional cost.

## Key points

- modernbert‑based classifier evaluates batches in under two milliseconds
- push protection blocks about 30 % of newly detected secrets before history
- public code pushes screened rose 2.84× from q2 2024 to q2 2026

## Why it matters

the feature strengthens code security for developers and enterprises, reducing the risk of credential leaks and the long manual revocation process.

## Sources

1. [GitHub adds AI to catch passwords before a code push](https://helpnetsecurity.com/2026/10/08/github-push-protection-modernbert) (helpnetsecurity.com, 2026-10-08)

## Cite

Digest AI, "GitHub adds AI detector to catch passwords before code push", 8 October 2026, https://digestai.news/story/github-adds-ai-detector-to-catch-passwords-before-code-push

---

Written by Digest AI's editorial model from the linked sources; the sources are the record. Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse
JSON: https://digestai.news/story/github-adds-ai-detector-to-catch-passwords-before-code-push.json