GitHub describes an improvement to secret scanning that uses context-aware LLM reasoning during verification, after candidate secrets are detected. Instead of sending whole files or repositories to a model, the system extracts focused usage signals, such as whether a value flows into authentication, API, database, or cloud SDK code. In tests on customer-confirmed false positives, GitHub reports a 75.76% reduction, above its 65% target, while preserving detection coverage.
GitHub reported a widespread service outage affecting core platform functionalities. The incident has disrupted repository access, CI/CD pipelines (GitHub Actions), and related developer APIs. GitHub's engineering team is actively investigating the root cause to restore services.