GitHub adopts cheaper AI model to catch secrets developers leave in code

T2Covered by 1 source · first reported by Help Net Security at 14 Oct, 09:26 UTC

GitHub has trained a credential classifier to improve generic secret detection and reduce false alerts. The new pipeline cut median post-push scan execution time by 86% and model serving costs by more than 98% compared with its previous large language model (LLM) pipeline. GitHub’s secret scanning…