IssueGuard: GitHub问题报告中的实时秘密泄露预防工具
IssueGuard: Real-Time Secret Leak Prevention Tool for GitHub Issue Reports
AI总结：
IssueGuard通过实时检测和防止在GitHub问题报告中泄露敏感信息，利用正则表达式和CodeBERT模型实现高准确率的分类，有效识别真实秘密并避免误报。
摘要：
GitHub和GitLab等协作平台的问题跟踪系统包含大量未结构化文本，如日志、代码片段和配置示例，存在意外泄露API密钥等敏感信息的风险。本文提出IssueGuard工具，作为Chrome扩展实时检测和防止问题报告中的秘密泄露。该工具结合正则表达式候选提取与微调的CodeBERT模型进行上下文分类，实现了92.70%的F1分数，优于传统正则表达式扫描器。IssueGuard直接集成到网页界面，持续分析问题编辑器，通过清晰的视觉警告帮助用户避免提交敏感数据。源代码可在https://github.com/disa-lab/IssueGuard获取，演示视频见https://youtu.be/kvbWA8rr9cU。
英文摘要：
GitHub and GitLab are widely used collaborative platforms whose issue-tracking systems contain large volumes of unstructured text, including logs, code snippets, and configuration examples. This creates a significant risk of accidental secret exposure, such as API keys and credentials, yet these platforms provide no mechanism to warn users before submission. We present \textsc{IssueGuard}, a tool for real-time detection and prevention of secret leaks in issue reports. Implemented as a Chrome extension, \textsc{IssueGuard} analyzes text as users type and combines regex-based candidate extraction with a fine-tuned CodeBERT model for contextual classification. This approach effectively separates real secrets from false positives and achieves an F1-score of 92.70\% on a benchmark dataset, outperforming traditional regex-based scanners. \textsc{IssueGuard} integrates directly into the web interface and continuously analyzes the issue editor, presenting clear visual warnings to help users avoid submitting sensitive data. The source code is publicly available at \href{https://github.com/disa-lab/IssueGuard}{https://github.com/disa-lab/IssueGuard} , and a demonstration video is available at \href{https://youtu.be/kvbWA8rr9cU}{https://youtu.be/kvbWA8rr9cU} .
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
