一句话：基于 Chrome 扩展，结合正则候选抽取与微调 CodeBERT，在提交前实时检测并警告 issue 文本中的密钥泄露。
GitHub 与 GitLab 的 issue 跟踪系统承载大量非结构化文本，如日志、代码片段和配置示例，容易意外暴露 API key、凭证等敏感信息，而平台在提交前没有任何预警机制。本文提出 IssueGuard，一个面向 issue 报告的实时密钥泄露检测与阻断工具。它实现为 Chrome 扩展，随用户输入持续分析 issue 编辑器文本，先用正则抽取候选密钥，再以微调后的 CodeBERT 模型进行上下文分类，从而有效区分真实密钥与误报。在基准数据集上，IssueGuard 取得 92.70% 的 F1 分数，优于传统基于正则的扫描器。工具直接集成到网页界面，对疑似敏感数据给出清晰的视觉警告，帮助用户在提交前避免泄露。源码与演示视频已公开。
GitHub and GitLab are widely used collaborative platforms whose issue-tracking systems contain large volumes of unstructured text, including logs, code snippets, and configuration examples. This creates a significant risk of accidental secret exposure, such as API keys and credentials, yet these platforms provide no mechanism to warn users before submission. We present IssueGuard, a tool for real-time detection and prevention of secret leaks in issue reports. Implemented as a Chrome extension, IssueGuard analyzes text as users type and combines regex-based candidate extraction with a fine-tuned CodeBERT model for contextual classification. This approach effectively separates real secrets from false positives and achieves an F1-score of 92.70% on a benchmark dataset, outperforming traditional regex-based scanners. IssueGuard integrates directly into the web interface and continuously analyzes the issue editor, presenting clear visual warnings to help users avoid submitting sensitive data. The source code is publicly available at https://github.com/disa-lab/IssueGuard, and a demonstration video is available at https://youtu.be/kvbWA8rr9cU.
DOI 原文 · arXiv · PDF（开放获取） · DBLP
@inproceedings{RahmanAWUS26,
title = {IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports},
author = {Md Nafiu Rahman and Sadif Ahmed and Zahin Wahab and Gias Uddin and Rifat Shahriyar},
booktitle = {FSE},
year = {2026},
doi = {10.1145/3803437.3806406}
}