GitHub adds fine‑tuned classifier to extend push protection for unstructured secrets
GitHub reports that AI agents now appear in roughly one in three pull requests and says secret exposures are doubling yearly; to scale prevention it introduced a fine‑tuned classifier (built with Microsoft Applied Sciences) that evaluates candidate secrets in under two milliseconds to extend push protection to unstructured secrets. GitHub also published operational metrics: a public secret appears about once every two seconds, push protection prevents roughly 30% of newly detected secrets before they enter repo history, screened pushes grew 2.84× while pushes carrying credentials grew 2.59× between Q2 2024 and Q2 2026, and mean manual revocation time remains around 40 days.