Finding leaked passwords with AI: How we built Copilot secret scanning

In October 2024, GitHub announced the general availability of Copilot secret scanning, leveraging AI to detect generic passwords in users’ codebases. The approach used combines offline evaluation, testing, and model iteration to improve accuracy and decrease false positives. With a focus on precision, effective resource management, and collaborative innovation, Copilot secret scanning is now a critical component for robust application security.