Secret scanning now prevents secret leaks in web commits

Organizations with GitHub Advanced Security can now prevent secrets leaked in code committed via the command line and the GitHub web editor with secret scanning’s push protection feature.

For repositories with push protection enabled, GitHub will block any pushes where a high-confidence token is detected in a commit made via the web editor. Developers can bypass the block by providing details of why the secret needs to be committed via the UI.

Push protection scans for tokens that can be detected with a very low false positive rate. If you run a service that issues tokens we’d love to work with you to make them highly identifiable and include them in push protection. We changed the format of GitHub’s own personal access tokens last year with this in mind.

For more information:

The new GitHub Issues – April 28th update

We continue to iterate and address your feedback for GitHub projects (beta) and in this week's Changelog we are including improvements to our settings and insights features.

⚙️ Create and delete fields from the Settings page

Previously, you could only create and delete fields from the Table view, but with today's update, you'll be able to add and delete fields directly from the Settings page.

settings_fields

Group by custom fields for time-based charts (alpha)

Project insights now supports the ability to Group by custom fields for time-based charts, giving you the power to analyze trends over time for the fields you care about most.

Historical-Insights

✨ Bug fixes & improvements

Other changes include:

  • Bug fix to resolve drop-down arrow illogically persisting after grouping by a field then sorting by a different field.
See more
View all changes