4 ms·

The keys would be sniffed out by secret scanner anyway https://docs.github.com/en/code-security/secret-security/about-secret-scanning https://docs.github.com/e

by nojito 5y ago

The keys would be sniffed out by secret scanner anyway https://docs.github.com/en/code-security/secret-security/about-secret-scanning https://docs.github.com/en/code-security/secret-security/abo... Doesn’t make sense to implement fixes on CoPilot.

atraac 5y ago
The stuff you write doesn't have to be commited to GitHub(or am I missing something?) so this argument makes no sense. Copilot clearly scanned and autocompleted third party secrets, it's in no way acceptable behaviour.
- nojito 5y ago
  It's trained on public repos. Public repos are scanned by the secret scanner. Why is it CoPilot's responsibiity to also scan the keys too?
- dolmen 5y ago
  The Copilot FAQ has mentions about its training set. https://copilot.github.com/ https://copilot.github.com/