Keeping secrets out of public repositories
With push protection now enabled by default, GitHub helps open source developers safeguard their secrets, and their reputations.
With push protection now enabled by default, GitHub helps open source developers safeguard their secrets, and their reputations.
Enterprise accounts now have a new root navigational experience, landing all users on an Enterprise Overview. Within this new page, GitHub Enterprise owners can create a README for their enterprise,…
Enterprise Managed Users can now enable secret scanning on their user namespace repositories. Owners of user repositories will receive secret scanning alerts when a supported secret is detected in their…
Repo-jacking is a specific type of supply chain attack. This blog post explains what it is, what the risk is, and what you can do to stay safe.
The npm engineering team recently transitioned to using GitHub Codespaces for local development for npm registry services. This shift to Codespaces has substantially reduced the friction of our inner development loop and boosted developer productivity.
Experience AI-powered assistance for queries related to GitHub topics.
The Fundamentals program has helped us address tech debt, improve reliability, and enhance observability of our engineering systems.
Calling all nonprofits! Do you want to implement open source software but don’t know where to start? We’ve got good news; you can easily get started by consulting our new guide.
Last month, we announced our plan to migrate from a strategy where student repositories are created from a template starter code repository to a strategy where student repositories are forked…
The Repository Actions Runners List is now generally available. With the Repository Actions Runnners List you can view all available runners right within the Actions tab, without needing access to…
In December, we experienced three incidents that resulted in degraded performance across GitHub services.
As we look to empower developers with AI tools, we inadvertently integrate AI deeper into the way developers work. How do developers feel about that? And what are the most impactful ways to introduce more AI into workflows? We recently conducted 25 in-depth interviews with developers to understand exactly that.
GitHub received a bug bounty report of a vulnerability that allowed access to the environment variables of a production container. We have patched GitHub.com and rotated all affected credentials. If you have hardcoded or cached a public key owned by GitHub, read on to ensure your systems continue working with the new keys.
About a month ago we announced that GitHub’s Support Portal will soon require login. Starting today, you will need to be signed-in to your GitHub account to access our Support…
Read a round-up of the exciting, new innovation coming from GitHub Enterprise.
Learn about how we run a scalable vulnerability management program built on top of GitHub.
GitHub uses MySQL to store vast amounts of relational data. This is the story of how we seamlessly upgraded our production fleet to MySQL 8.0.
Read a roundup of the exciting, new innovation coming from GitHub Actions.
GitHub Codespaces recently released multiple updates to improve visibility into monthly spend: Organization administrators whose organization’s codespace usage is paid for by the enterprise can now see month-to-date spending in…
We’re committed to continually improving your experience with GitHub Support, and part of that commitment involves enhancing the personalization of our services. Starting December 8, you will need to be…
The last Git release of 2023 is here! Take a look at some of our highlights on what’s new in Git 2.43.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Join us October 28-29 in San Francisco or online for GitHub Universe, our flagship developer event uniting people, agents, and the world’s code.