Search results for: Security

View Dependabot alerts across an organization

Today, we’re shipping improvements to Dependabot alerts that make them easier to understand and remediate.

Code scanning organization-level REST API

Here’s January’s top staff picks on projects that shipped major version releases.

A quick guide on the advantages of using GitHub Actions as your preferred CI/CD tool—and how to build a CI/CD pipeline with it.

Dependency graph adds support for GitHub Actions

The dependency graph helps developers and maintainers understand the code they depend on, and now includes GitHub Actions!

In GitHub’s latest transparency report, we’re giving you a by-the-numbers look at how we responded to requests for user info and content removal.

When it comes to secure database access, there’s more to consider than SQL injections. OWASP Top 10 Proactive Control C3 offers guidance.

GitHub continues to improve account security and developer experience with a new 2FA mechanism in GitHub Mobile on iOS and Android.

When digital infrastructure is overlooked by governments, it isn’t just a missed opportunity: policies may inadvertently endanger open source collaboration.

Secret scanning enterprise-level REST API

View code scanning alerts across an organization

GitHub Actions – Update on OIDC based deployments to AWS

As the year winds down, we’re highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers.

Advisory Database now includes an Unreviewed Advisories section

Looking to avoid security vulnerabilities, buttons that don’t work, slow site speeds, or manually writing release notes? This one’s for you.

On Thursday, December 9, 2021, GitHub was made aware of a vulnerability in the Log4j logging framework, CVE-2021-44228.

We shipped a ton of updates in November, from the push notification for PR review activities on the go, to an easy way to create Markdown links.

GitHub Actions: Changes to permissions in workflows triggered by Dependabot

GitHub Enterprise Server is now generally available for all customers. This release improves performance for CI/CD and for customers with large repositories.