GitHub launches purpose-built AI model for leaked secret detection across developer workflows

GitHub is rolling out a fine-tuned, purpose-built model for secret detection that reads surrounding code to identify likely credentials, including passwords without recognizable token formats.

Existing AI-detected Password alerts have been upgraded automatically, and AI-detected secrets in push protection is in private preview. New opt-in checks in push protection and the GitHub Copilot /security-review command will consume GitHub AI Credits.