GitHub launched a purpose-built AI model for leaked secret detection. Existing AI-detected secret alert scans now use the new model at no extra cost. AI push protection for unstructured secrets is in private preview. GitHub Copilot’s /security-review will add AI secret checks soon in private preview. These new checks consume GitHub AI Credits. AI-detected alerts will come to GitHub Enterprise Server 3.23 in public preview. Push protection requires GHSP or GHAS on GitHub Enterprise Cloud or Teams. /security-review secret checks do not require GHSP or GHAS. Admins can disable new features and set AI Credit budgets. Billing starts once features are opted into and enabled.
What changed
AI-detected secret alerts used an earlier model and were included in GHSP and GHAS.
What it unlocks
Detecting unstructured secrets like plain passwords in code using context-aware AI checks.
- AI-detected alerts remain free for GHSP and GHAS
- AI push protection and /security-review consume GitHub AI Credits
- GHES 3.23 gets AI-detected alerts in public preview
What you need to act on it
- GHSP or GHAS license for AI push protection
- Copilot CLI or Copilot App for /security-review
- Administrator enablement for push protection
- Opt-in for /security-review secret checks
Sources