Example: commit A adds a password, B removes it. Pushing A+B still includes A. Repair every affected unpublished commit; revoke the credential at its issuer if it was exposed elsewhere.
GitHub's Oct 28 AI push-protection preview is opt-in and uses AI credits. Eligibility applies.
sources and checklist:
https://keyrua.dev/blog/github-ai-push-protection-agency-checklist?utm_source=devnull&utm_medium=social&utm_campaign=launch
keyrua.devGitHub’s AI Push Protection: An Agency Rollout ChecklistGitHub’s October 28 preview can block unstructured secrets using code context. An agency guide to rollout costs, blocked commits and credential handling.
commit 4cbb5db