Happy anniversary GitHub Security Lab!
Last year at GitHub Universe, we introduced the GitHub Security Lab, which is committed to contributing resources, tooling, bounties, and security research to secure the open source ecosystem. We know…
Last year at GitHub Universe, we introduced the GitHub Security Lab, which is committed to contributing resources, tooling, bounties, and security research to secure the open source ecosystem. We know…
Dependency review allows you to easily understand your dependencies before you introduce them to your environment. As part of a pull request, you can see what dependencies you’re introducing, changing, or removing, and information about their vulnerabilities, age, usage, and license.
You can now upload .mp4 and .mov files to issue, pull request, and discussion comments to share reproduction steps, design ideas, and experience details with your team. The public beta…
Part of the Building GitHub blog series. It’s four o’clock in the afternoon as you push the last tweak to your branch. Your teammate already reviewed and approved your pull request…
GHEC enterprise owners may now verify domains across their enterprise account and restrict email notifications to addresses within those domains. This feature expands upon the existing organization verified domains functionality,…
In July 2020, we announced our intent to require the use of token-based authentication (for example, a personal access, OAuth, or GitHub App installation token) for all authenticated Git operations.…
Temporary interaction limits have new, powerful, and flexible updates. You can now enable interaction limits for up to six months. In addition, you can limit interactions across all your personal…
Today we are releasing an open beta for the new continuous delivery capabilities in GitHub Actions. In this open beta there is no need to sign up, all existing GitHub…
GitHub Enterprise Cloud administrators may now download and view current GitHub compliance reports from the Security settings tab of their enterprise account: https://github.com/enterprises/”your-enterprise”/settings/security. Enterprise plan organization owners may also view…
GitHub Campus Advisors are teachers who are enthusiastic about teaching with Git and GitHub. Whether or not they come from a technical background, they’re deeply passionate about technology and sharing…
What we look for from applicants, plus an overview of how the application process works.
We detail the great momentum we’ve had with our partners at GitHub this past year, building a healthy ecosystem aimed at making our users more productive.
Dark mode is now available to all GitHub.com users as a public beta. To select your preferred theme, navigate to your profile settings and click on the new “Appearance” tab…
Companies can now invest in open source with GitHub Sponsors! We’re launching GitHub Sponsors for companies in beta on December 8 (Tuesday) at Universe. Self-service (payment via credit card or…
Aimed at developers, in this series we introduce and explore the memory unsafe attack surface of interpreted languages.
To best apply DevSecOps principles to improve the security of your supply chain, you should ask your developers to declare your dependencies in code; and in turn provide your developers with maintained ‘golden’ artifacts and automated downstream actions so they can focus on code.
The Digital Millennium Copyright Act (DMCA) is a 22-year old United States law meant to strike a complicated balance between art, code, and speech on the net — impacting users…
You can now more easily opt-in to the public beta of GitHub Packages’ improved containers experience. New users and organizations can opt-in to the beta for their organization using either…
As previously announced, GitHub.com no longer accepts account passwords when authenticating with the REST API and now requires the use of token-based authentication (e.g., a personal access, OAuth, or GitHub…
Ubuntu 20.04 local privilege escalation using vulnerabilities in gdm3 and accountsservice (CVE-2020-16125, CVE-2020-16126, CVE-2020-16127)
The theme for this year’s Game Off is MOONSHOT. moonshot – noun an extremely ambitious and innovative project the act of launching a spacecraft to the moon a hit or…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.