07/2024

Enhance your pull request workflow: Copilot pull request text completion now in beta Copilot text completion for pull request descriptions is now available to all Copilot Enterprise customers. After typing…

GitHub Advanced Security customers using secret scanning can now use the REST API to enable or disable support for non-provider patterns at the repository level. Non-provider patterns scans for token…

Code security configurations were made generally available on July 10th, 2024. This experience replaces our old settings experience and its API. If you are currently using the REST API endpoint…

Today, we’re excited to announce the general availability of our new organization and enterprise-level security overview dashboards, alongside enhanced secret scanning metrics and the enablement trends reports. These features are…

GitHub Enterprise Cloud customers can now see code security configurations data in audit log events. Code security configurations simplify the rollout of GitHub security products at scale by defining collections…

The REST API now supports the following code security configuration actions for organizations: – Detach configurations from repositories – Enforce configurations – Enable validity checks for secret scanning in a…

Secret scanning now detects generic passwords using AI. Passwords are difficult to find with custom patterns — the AI-powered detection offers greater precision for unstructured credentials that can cause security…

Organization owners and security managers can now filter the table of repositories on the code security configurations settings page by configuration attachment failure reason. This is useful when you’ve attempted…

Secret scanning now helps you more easily define custom patterns with GitHub Copilot. Generally available as of today, you can now leverage AI to generate custom patterns without expert knowledge…

Code scanning autofix for alerts in default branch is now available in public beta for all GitHub Advanced Security customers. This feature empowers developers to reduce the time and effort…

Starting today, we are deprecating npm hooks services and they might no longer be functional, including current hooks subscriptions. This deprecation includes npm hooks API Endpoints and its related cli…

Enterprise Owners on GitHub Enterprise Cloud (GHEC) can join a private beta allowing them to configure audit log streaming via the REST API. This private beta grants access to new…

Organization owners can now grant a user or team access to all of the repositories in their org with a single click. Five new pre-defined roles have been added to…

Over the next few weeks, jobs generating Dependabot pull requests will start running as GitHub Actions workflows on Github.com accounts with GitHub Actions enabled. This migration will include faster Dependabot…

Code security configurations are now generally available (GA)! Code security configurations simplify the rollout of GitHub security products at scale. They help you define collections of security settings and apply…