Dependabot security updates now supports the Pub ecosystem, making it easier for you to fix vulnerable dependencies in your Dart or Flutter apps. With security updates enabled, Dependabot will automatically…
Personalize your feed with activity filters, now available on GitHub Mobile! Read more about GitHub Mobile and send us your feedback to help us improve.
GitHub’s audit log allows organization and enterprise admins to quickly review the actions performed by members of their organization or enterprise. For Dependabot alerts, the audit log includes actions such…
The recently enhanced GitHub Enterprise “consumed licenses” report and new “enterprise members” report are now generally available. These reports provide more insight into who has access to an enterprise, what…
Today, we’re introducing calendar-based versioning for the REST API to give API integrators a smooth migration path and plenty of time to update their integrations when we need to make…
Starting today, GitHub code scanning includes beta support for analyzing code written in Kotlin, powered by the CodeQL engine. Kotlin is a key programming language used in the creation of…
You can now filter results from the code scanning REST API based on alert severity. Use the parameter severity to return only code scanning alerts with a specific severity. This…
In a small but frequently requested improvement, GitHub now shows the date that an archived repository was put into read-only mode to indicate it is no longer actively maintained. Previously,…
Dependabot security updates now supports the GitHub Actions ecosystem, making it easier for you to fix vulnerable GitHub Actions dependencies. With security updates enabled, Dependabot will automatically raise a pull…
Dependabot expands its existing Hex private registry support beyond Hex organizations by adding support for self-hosted Hex repositories. You can configure your self-hosted Hex package repository as a private registry…
You can now enable and disable the following GitHub security features for a single repository from the organization-level security coverage view: Dependency graph Dependabot alerts Dependabot security updates If you…
A GitHub Actions workflow run is made up of one or more jobs and each job is associated with a check run. The workflow_job webhook is sent during state transitions…
As we prepare for next year’s 2FA requirement for active contributors on GitHub, we’re making improvements to our two-factor setup UI to encourage best practices and ensure new 2FA users…
OpenID Connect (OIDC) for authenticating enterprise managed users is now generally available for enterprises using Azure AD. OIDC allows GitHub to use your identity provider’s IP allow list policies to…
GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, our scans help prevent data leaks and fraud. We have partnered…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
