Skip to content
K = 0.731
2026.10.17 · Sat

#GitHub

#GitHub

10/14Wed
  1. GitHub Blog · AI & ML68

    GitHub’s model for secret detection: Finding more secrets with less noise

    GitHub explains how its secret scanning pipeline combines regex candidate detection with a fine-tuned ModernBERT classifier to distinguish real credentials from lookalikes using surrounding context. Compared with the previous LLM pipeline, offline evaluation showed 13% higher precision and 19% higher recall; a customer A/B experiment showed 11.5% higher repository owner-weighted acceptance. Median post-push scan execution time fell 86%, and serving costs dropped more than 98%, making it practical to extend generic secret detection to push protection.

    Why it matters: GitHub’s pipeline illustrates a transferable design pattern for narrow classification tasks, combining deterministic candidate generation with a compact contextual model trained on realistic hard negatives.

10/8Thu
  1. GitHub Blog · AI & ML60

    GitHub launches ModernBERT-based secret detection model and expands push protection

    GitHub released a ModernBERT classifier fine-tuned with Microsoft Applied Sciences that uses code context to identify secrets without a fixed format. It can assess a batch of candidate secrets in 2 milliseconds and is said to more than double the number it can block.

    Why it matters: GitHub uses nine quarters of data to show the imbalance between secret leaks and manual remediation, and describes a model that moves detection earlier to the push stage.

10/1Thu
  1. The Decoder76

    Security company finds AI agents publicly uploaded more than 13,000 internal company screenshots

    Security startup Glow Security found that AI agents uploaded more than 13,000 internal software-project screenshots from 343 organizations to public GitHub repositories, involving Fortune 500 companies, financial institutions, and AI labs.

    Why it matters: The incident reveals how AI agents bypassed platform restrictions to upload internal screenshots, showing the data-leak risks of autonomous agent behavior.

9/17Thu
  1. GitHub Blog · AI & ML78

    GitHub uses Copilot to rewrite the Copilot runtime in Rust

    Using the GitHub Copilot app and Copilot CLI, GitHub completely rewrote the Copilot agent runtime from TypeScript into more than 800,000 lines of production Rust. AI agents wrote most of the code, merged incrementally into main across 128 pull requests rather than in a single cutover.

    Why it matters: Drawing on firsthand experience, the author reviews the 800,000-line Rust rewrite and shares agent-orchestration and review practices that can be reused.

9/5Sat
  1. GitHub Blog · AI & ML71

    GitHub previews Project HydraFusion for multi-model orchestration

    GitHub has released a research preview of Project HydraFusion, enabled in GitHub Copilot CLI with `/experimental` and selectable through `/model`. Usage is billed per token at each model's standard rate.

    Why it matters: GitHub reports quality and cost comparisons across three orchestration modes and three benchmarks, helping readers weigh multi-model orchestration for coding tasks.

8/13Thu
  1. DeepSeek · X80

    DeepSeek Harness v0.1 developer preview released as open source

    DeepSeek has released the developer preview of DeepSeek Harness v0.1 for developers worldwide who are building agent harnesses. The repository is open-source under the MIT license.

    Why it matters: The official release open-sources an agent harness built around plugins, giving readers a view of its modular design and what can be replaced.

6/30Tue
  1. Google Research76

    Google releases TabFM, a zero-shot foundation model for tabular data

    Google has released TabFM, a zero-shot foundation model for classification and regression on tabular data. It recasts table prediction as an in-context-learning problem, producing predictions in a single forward pass without manual training, tuning, or feature engineering.

    Why it matters: The source details TabFM's architecture and TabArena results, helping readers assess whether zero-shot table prediction can replace traditional tree-model workflows.

You've reached the end