2025

Strategies to quickly get up to speed, whether you’re a seasoned engineer or a newcomer to the field.

Critical authentication bypass vulnerabilities (CVE-2025-25291 + CVE-2025-25292) were discovered in ruby-saml up to version 1.17.0. In this blog post, we’ll shed light on how these vulnerabilities that rely on a parser differential were uncovered.

In February, we experienced two incidents that resulted in degraded performance across GitHub services.

For 30 years, Java has been a cornerstone of enterprise software development. Here’s why—and how to learn Java.

Treating exposures as full and complete can help you respond more effectively to focus on what truly matters: securing systems, protecting sensitive data, and maintaining the trust of stakeholders.

Three maintainers talk about how they fostered their open source communities.

GitHub Copilot isn’t just for developers! Discover how product managers, security professionals, scrum masters, and more use GitHub Copilot to streamline tasks, automate workflows, and boost productivity across teams.

Passwords are notoriously difficult to detect with conventional programming approaches. AI can help us find passwords better because it understands context. This blog post will explore the technical challenges we faced with building the feature and the novel and creative ways we solved them.

Get started with GitHub Copilot and navigate features like Copilot Chat in this installment of the GitHub for Beginners series.

GitHub’s Digital Public Goods Open Source Community Manager Program just wrapped up a second successful year, helping Community Managers gain experience in using open source for good.

GitHub Copilot can streamline your debugging process by troubleshooting in your IDE, analyzing pull requests, and more, helping you tackle issues faster and more robustly.

We share the full year 2024 data update on our Transparency Center and highlight how developers can engage with us on our site policies and content moderation.

Show your appreciation to the open source projects you love. You can help provide much-needed support to the critical but often underfunded projects that keep your infrastructure running smoothly. And remember—every day is a perfect day to support open source! 💖

In January, we experienced two incidents that resulted in degraded performance across GitHub services.