Skip to content
ENTITY PROFILE / KNOWLEDGE GRAPH

GitHub Secret Protection

RSS

ModernBERT classifier is used in GitHub Secret Protection GitHub Secret Protection will be available to organizations using GitHub Enterprise Cloud GitHub Secret Protection will be available to organizations using GitHub Teams GitHub Secret Protection notifies OpenAI API keys to revoke when exposed GitHub Secret Protection notifies Google Cloud account credentials to revoke when exposed GitHub Secret Protection notifies Slack webhooks to revoke when exposed GitHub Secret Protection notifies Hugging Face user tokens to revoke when exposed GitHub Secret Protection notifies SendGrid keys to revoke when exposed The article describes GitHub secret scanning and its push‑protection and post‑push‑scanning modes. The companion article describes the challenges of scaling secret protection for GitHub secret scanning. GitHub secret scanning is enforced by GitHub’s repository protection mechanisms. GitHub secret scanning uses ModernBERT for context‑aware classification of candidate secrets. The model improves secret scanning by increasing weighted acceptance by 11.5 % and reducing median scan execution time by 86 %.· Entity summary generated by Graphiti

RELATIONS
13Relations
CURRENT
13Current
EVENTS
1Events
REPORTS
2Source reports
KNOWLEDGE ATLAS0 entities · 0 relations
No public neighbors yet
Explore all published links of a node; previously discovered relations remain visible.

Relation timeline

BY VALID-FROM DATE
  1. Secret protection must scale with softwareDESCRIBESGitHub Secret Protection

    The companion article describes the challenges of scaling secret protection for GitHub secret scanning.

  2. GitHub’s model for secret detection: Finding more secrets with less noiseDESCRIBESGitHub Secret Protection

    The article describes GitHub secret scanning and its push‑protection and post‑push‑scanning modes.

  3. GitHub’s model for secret detection: Finding more secrets with less noiseIMPROVEDGitHub Secret Protection

    The model improves secret scanning by increasing weighted acceptance by 11.5 % and reducing median scan execution time by 86 %.

  4. GitHub Secret ProtectionUSESModernBERT classifier

    GitHub secret scanning uses ModernBERT for context‑aware classification of candidate secrets.

    Current1 sourceModernBERT classifier
  5. GitHub Secret ProtectionENFORCED BYGitHub

    GitHub secret scanning is enforced by GitHub’s repository protection mechanisms.

    Current1 sourceGitHub
  6. GitHub Secret ProtectionNOTIFIESGitHub Security Lab Taskflow Agent

    GitHub Secret Protection notifies OpenAI API keys to revoke when exposed

  7. GitHub Secret ProtectionNOTIFIESGitHub Copilot’s built-in Rubber Duck agent

    GitHub Secret Protection notifies SendGrid keys to revoke when exposed

  8. GitHub Secret ProtectionNOTIFIESGoogle Cloud account credentials

    GitHub Secret Protection notifies Google Cloud account credentials to revoke when exposed

  9. ModernBERT classifierUSED INGitHub Secret Protection

    ModernBERT classifier is used in GitHub Secret Protection

    Current1 sourceModernBERT classifier
  10. GitHub Secret ProtectionNOTIFIESHugging Face user tokens

    GitHub Secret Protection notifies Hugging Face user tokens to revoke when exposed

  11. GitHub Secret ProtectionAVAILABLE INGitHub Teams

    GitHub Secret Protection will be available to organizations using GitHub Teams

    Current1 sourceGitHub Teams
  12. GitHub Secret ProtectionNOTIFIESSlack webhooks

    GitHub Secret Protection notifies Slack webhooks to revoke when exposed

    Current1 sourceSlack webhooks
  13. GitHub Secret ProtectionAVAILABLE INGitHub Enterprise Cloud

    GitHub Secret Protection will be available to organizations using GitHub Enterprise Cloud

Relations are facts Graphiti extracted from reports, not verbatim quotes. An end date means later reporting showed the relation no longer holds.