Unverified50% confidenceFactExact time
GitHub replaced the general-purpose LLM in secret scanning with a fine-tuned ModernBERT.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
10/19/2026
First Seen
Valid until: 1/17/2027
Sources
Related Entities
Related Claims
Unverified即便开发者在发现硬编码密钥后立即删除并重新提交，密钥依然存在于Git的提交历史中，可通过git log或git show命令找回70% similarUnverifiedGitHub provides automatic secret scanning, and major cloud vendors provide credential rotation mechanisms.68% similarUnverifiedAlthough Git also has libraries such as libgit2 and JGit, its official toolchain is still mainly CLI-based, and machine invocation often requires parsing text output.66% similarVerifiedCompletely removing a key from Git history requires rewriting the entire commit history using specialized tools such as git filter-branch or BFG Repo-Cleaner.66% similarUnverifiedGitHub Secret Scanning is powerless against keys that have already been leaked to public Gists, Stack Overflow posts, or historical commits66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1067547API
curl https://kongchang.com/api/v1/knowledge/claims/1067547MCP
get_claim(id=1067547)