When you visit the GitHub Advisory Database, you can now search for any historical advisory recognized by the National Vulnerability Database. Previously, we only displayed advisories from our supported ecosystems.…
GitHub Education now provides a safe place for students to take the first step in their open source journey with the launch of Community Exchange on GitHub Global Campus. Community…
GitHub Advanced Security customers can now use sort and direction parameters in the GitHub REST API when retrieving secret scanning alerts. API users can sort based on the alert’s created…
Organization owners and repository admins can now require developers to sign off on commits made through GitHub’s web interface. Also, it is now easier for developers to complete a signoff…
It is now possible to manually select the previous release prior to generating release notes in the GitHub Releases UI. For more information on Generating Release Notes, see the Automatically…
Custom repository roles are now GA for GitHub.com and Enterprise Server 3.5. Organization admins can create custom repository roles available to all repositories in their organization. Roles can be configured…
In February 2022, we launched a new feature called community contributions to security advisories. We have made a handful of changes to the UX based on your feedback: Fixed the…
The dependency graph now supports detecting Rust (Cargo.{toml,lock}) files. These will be displayed within the dependency graph section in the Insights tab. Users will receive Dependabot alerts and updates for…
When a file is renamed or moved to a new directory but half of it’s contents remain the same, it’s commit history will now indicate that the file was renamed,…
Dependabot version updates help you keep your dependencies up-to-date by opening pull requests automatically when new versions are available. With this release, you can now more easily enable and configure…
Today’s Changelog brings you the release of project webhooks, a first exploration into templates and a host of improvements to GitHub Issues. ☁️🪝 Automate more with project webhooks The first…
Code scanning flags up potential security vulnerabilities in pull requests — well before code is merged and deployed. Starting today, such alerts will be more visible: they will appear as…
You can now sign up to be sponsored via GitHub Sponsors if you have a bank account and tax residence in Brazil. Read about the rollout on our blog and…
Users can now add a comment when dismissing a code scanning alert. It is optional to provide a dismissal comment. Dismissal comments are recorded in the alert timeline. They can…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
