INCIDENT

MCP - GitHub MCP Server now scans code changes for

GitHub MCP Server now scans code changes for exposed secrets before commits or PRs, in public preview for repos with GitHub Secret Protection enabled.

Updated: 3/19/2026
high Severity
Status: active

Description

The GitHub MCP Server now scans code changes for exposed secrets before commits or PRs. ā€¢ This feature is in public preview for repos with GitHub Secret Protection enabled. https://t.co/lv3RJWNrU0

Impact

GitHub MCP Server now scans code changes for exposed secrets before commits or PRs, in public preview for repos with GitHub Secret Protection enabled.

Attack Vectors

  • code scanning
  • secret protection

Mitigation

    Sources