Future of Software: Developers at the center of the universe
Launch report: Everything we released at GitHub Universe
GitHub Blog Search
Search Results for: GitHub Actions
Code Scanning will stop combining runs from a single upload
Code Scanning will stop combining runs from a single upload
Where does your software (really) come from?
GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.
CodeQL zero to hero part 3: Security research with CodeQL
Learn how to use CodeQL for security research and improve your security research workflow.
Securing millions of developers through 2FA
We’ve dramatically increased 2FA adoption on GitHub as part of our responsibility to make the software ecosystem more secure. Read on to learn how we secured millions of developers and why we’re urging more organizations to join us in these efforts.
Advanced filtering capabilities for the security overview dashboard
Advanced filtering capabilities for the security overview dashboard
macOS 14 (Sonoma) is generally available
macOS 14 (Sonoma) is generally available and the `latest` macOS runner image
Game Bytes · March 2024
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!
Improvements to security overview insights, secret scanning metrics
Improvements to security overview insights, secret scanning metrics
Security overview dashboard: Alert age trends, custom repository and severity filters, and date pickers
Security overview dashboard: Alert age trends, custom repository and severity filters, and date pickers
OpenSSF Scorecard info is now available in the Dependency Review Action
OpenSSF Scorecard info is now available in the Dependency Review Action
Enablement trends for security products (public beta)
Enablement trends for security products (public beta)
The architecture of SAST tools: An explainer for developers
More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.
Gradle starter workflows now automatically submit transitive dependencies
Gradle starter workflows now automatically submit transitive dependencies
Do you know if all your repositories have up-to-date dependencies?
Consider deploying the GitHub Action: Evergreen so that you know each of your repositories are leveraging active dependency management with Dependabot.
Yes, good DevEx increases productivity. Here is the data.
Explore how DevEx boosts productivity and innovation according to new research.
How to get in the flow while coding (and why it’s important)
Explore what flow state entails, its benefits, and three tips for reaching it the next time you code.