GitHub’s Secret Scanning Uses AI to Reduce False Positives
2026-10-31 · GitHub improved secret detection by combining regex with a context-aware AI classifier, cutting false positives and scan times while scaling to push protection.
Security, explained.
Short defensive explanations with primary sources.
Prompt injection is also a permission problem
2026-10-31 · A model can mistake outside content for instructions. The damage depends on what the surrounding application lets it do.
A scan is not a remediation programme
2026-10-31 · Finding a weakness, changing a system and proving the change worked are different jobs. Scope them separately.