# IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports

arXiv: https://arxiv.org/abs/2602.08072 · HTML: https://mlsanity.com/paper/2602.08072/

## Key facts

- Cited by 1 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 8 Feb 2026.

## Built on by (most cited first, 1 of 1)

- [Separating Secrets from Placeholders: A Hybrid CNN-CodeBERT Framework for Three-Class Credential Leakage Detection](https://mlsanity.com/paper/2605.31520/) (2026)

## Abstract (arXiv)

GitHub and GitLab are widely used collaborative platforms whose issue-tracking systems contain large volumes of unstructured text, including logs, code snippets, and configuration examples. This creates a significant risk of accidental secret exposure, such as API keys and credentials, yet these platforms provide no mechanism to warn users before submission. We present textscIssueGuard, a tool for real-time detection and prevention of secret leaks in issue reports. Implemented as a Chrome extension, textscIssueGuard analyzes text as users type and combines regex-based candidate extraction with a fine-tuned CodeBERT model for contextual classification. This approach effectively separates real secrets from false positives and achieves an F1-score of 92.70% on a benchmark dataset, outperforming traditional regex-based scanners. textscIssueGuard integrates directly into the web interface and continuously analyzes the issue editor, presenting clear visual warnings to help users avoid submitting sensitive data. The source code is publicly available at hrefhttps://github.com/disa-lab/IssueGuardhttps://github.com/disa-lab/IssueGuard , and a demonstration video is available at hrefhttps://youtu.be/kvbWA8rr9cUhttps://youtu.be/kvbWA8rr9cU .