GitHub launches ModernBERT-based secret detection model and expands push protection
GitHub released a ModernBERT classifier fine-tuned with Microsoft Applied Sciences that uses code context to identify secrets without a fixed format. It can assess a batch of candidate secrets in 2 milliseconds and is said to more than double the number it can block.
Why it matters: GitHub uses nine quarters of data to show the imbalance between secret leaks and manual remediation, and describes a model that moves detection earlier to the push stage.
