Wiz: GitHub Threat Detections
Timeline of updates
- resolved
Today, some Wiz Defend customers saw Threats generated by two GitHub threat-detection rules due to a false-positive condition. We identified the root cause and fixed both rules. You can safely ignore these Threats and bulk-resolve them as false positives in the Wiz portal.
Affected rules
Mass Clone Operations Of Private Repositories Performed By User
Rule ID: cer-github-data-massPrivateRepoCloneOperationsByUserMass Clone Operations Performed By User
Rule ID: cer-github-data-massCloneOperationsByUserNo other rules or services were impacted.
Archive proof
Rewindex commits each version of an incident it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
First version captured
In the 2026-10-17 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
4b5c2b8f7af45993…
Impact, status and times are the vendor’s own, as last archived. View on stspg.io (opens in new tab).
Cite this
Status incident (vendor impact label: none) posted by Wiz, started 2025-09-18 15:07 UTC, resolved after 0 min, 1 update(s).
- Title
- GitHub Threat Detections
- Vendor
- Wiz
- Date
- URL
- https://rewindex.com/company/wiz/incidents/jbz76572t1ml
Wiz profileRecent Wiz incidentsAll outages on September 18, 2025Wiz in September 2025MarkdownJSON