FINDING LEAKED PASSWORDS WITH AI: HOW WE BUILT COPILOT SECRET SCANNING

Summary from the TLDR Web Dev newsletter

GitHub Copilot secret scanning uses AI to detect generic passwords in codebases. The development team faced challenges with unconventional file types and the need for resource-efficient scaling, leading to improvements in offline evaluation, prompt engineering, and workload-aware request management. Mirror testing was necessary for high precision and a low false positives rate.