You can now add repository permissions to custom organization roles, granting a specific level of access to all the repositories in your organization. This builds on the release of organization-wide…
For Unkey users, GitHub secret scanning now scans for Unkey tokens to help secure your public repositories. Unkey’s Root API Key enables users to create and manage Unkey resources including…
You can now grant fine-grained permissions to review and manage push protection bypass requests within your organization. Anyone with this permission will have the ability to approve and manage the…
View all your organization’s Sponsors activity in one place. It’s now easier for organizations to view GitHub Sponsors related activities in one place. From the Sponsors dashboard you can view…
With this change, you can now use natural language within Copilot Chat in GitHub.com to search across GitHub to find commits, issues, pull requests, repositories, and topics. Try it yourself:…
GitHub Enterprise Server 3.14 is generally available GitHub Enterprise Server 3.14 gives customers enhanced deployment requirements and security controls. Here are a few highlights in the 3.14 release: SCIM for…
CodeQL code scanning can now analyze Java and C# code without having to observe a build. This makes it easier to roll out the security analysis on large numbers of…
Custom models for GitHub Copilot are now available in Limited Public Beta for Copilot Enterprise. This new capability lets you fine-tune Copilot to better understand and align with your organization’s…
Push protection bypass requests will now show file path and branch information for the secret. This improvement helps you more effectively triage any secrets for which you’ve requested push protection…
The client_id field is now included in all API responses that describe a GitHub App. We are shifting to use the client ID as the primary identifier for an app,…
Now, secret scanning non-provider patterns are included in the GitHub-recommended security configuration. Non-provider patterns have also been automatically enabled for any repositories with the recommended configuration previously attached. Secret scanning…
To help you triage and remediate secret leaks more effectively, GitHub secret scanning now dededuplicates non-provider patterns (generic patterns) against provider patterns. Secret scanning non-provider patterns are generic detectors that…
You can now enable non-provider patterns (generic patterns) through security configurations at the organization level. Non-provider patterns will also be included in the GitHub-recommended security configuration on August 23, 2024.…
For Anthropic users, GitHub secret scanning now scans for Anthropic tokens to help secure your public repositories. Anthropic tokens enable users to access Claude through the Anthropic API. GitHub will…
GitHub Actions will be making the following deprecations and breaking changes in our runners and services over the next 6 months. Exclude hidden files by default in Upload Artifact GitHub…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
