From the article

> It has no public equivalent of the platform-vendor secret-scanning partnerships that have become standard on GitHub.