Gotcha: GitHub Custom Properties are public

· Jamie Tanna · Oct. 8, 2026, 8:08 a.m.
Summary
The blog post discusses the visibility of GitHub Custom Properties, specifically that they are publicly accessible to anyone with read access to a repository, revealing important security information like 'security_level'. The author shares insights from their experience at Elastic regarding the implications of this feature, emphasizing that many developers may not be aware of this functionality.
AUTHOR