Search results for: triage

Add repository permissions to custom organization roles
Add repository permissions to custom organization roles

Secret scanning displays branch and file paths for push protection bypasses
Secret scanning displays branch and file paths for push protection bypasses

Secret scanning now deduplicates non-provider patterns
Secret scanning non-provider pattern deduplication

How to level up your Git game with GitHub CLI
Using Git in the CLI can improve your development speed and power. Here are our top eight commands for using GitHub via your command line.

Pre-defined organization roles that grant access to all repositories
Pre-defined organization roles that grant access to all repositories

10 years of the GitHub Security Bug Bounty Program
Let’s take a look at 10 key moments from the first decade of the GitHub Security Bug Bounty program.

GitHub and JFrog partner to unify code and binaries for DevSecOps
This partnership between GitHub and JFrog enables developers to manage code and binaries more efficiently on two of the most widely used developer platforms in the world.

dependabot-core is now open source with an MIT license
dependabot-core is now open source with an MIT license

CodeQL zero to hero part 3: Security research with CodeQL
Learn how to use CodeQL for security research and improve your security research workflow.

Security research without ever leaving GitHub: From code scanning to CVE via Codespaces and private vulnerability reporting
This blog post is an in-depth walkthrough on how we perform security research leveraging GitHub features, including code scanning, CodeQL, and Codespaces.

Exploring an increase in circumvention claims in our transparency data
Our full year of 2023 transparency reporting data is now available and we’re taking a deep dive into how a form change caused an abrupt increase in circumvention claims.

GitHub Enterprise Server 3.12 is now generally available
With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more.

The GitHub Enterprise Server 3.12 is generally available
The GitHub Enterprise Server 3.12 is generally available

How we’re using GitHub Projects to standardize our workflows and stay aligned
Learn how we’re managing feature releases and establishing best practices within and across teams at GitHub using GitHub Projects.

The GitHub Enterprise Server 3.12 Release Candidate is available
The GitHub Enterprise Server 3.12 Release Candidate is available

Fixing security vulnerabilities with AI
A peek under the hood of GitHub Advanced Security code scanning autofix.

The architecture of SAST tools: An explainer for developers
More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

5 ways to make your DevSecOps strategy developer-friendly
Developers care about security, but poorly integrated tools and other factors can cause frustration. Here are five best practices to reduce friction.

Scaling vulnerability management across thousands of services and more than 150 million findings
Learn about how we run a scalable vulnerability management program built on top of GitHub.
The world's largest developer platform
GitHub
Build what’s next on GitHub, the place for anyone from anywhere to build anything.