Search results for: Account

GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, we help protect users from data leaks and fraud associated with…

In this post I’ll exploit CVE-2022-22057, a use-after-free in the Qualcomm gpu kernel driver, to gain root and disable SELinux from the untrusted app sandbox on a Samsung Z flip 3. I’ll look at various mitigations that are implemented on modern Android devices and how they affect the exploit.

To combat the prevalence of malware in the open source ecosystem, GitHub now publishes malware occurrences in the GitHub Advisory Database. These advisories power Dependabot alerts and remain forever free and usable by the community.

How can you robustly assert and identify a user’s identity?

Available in public beta today, we’re announcing Achievements as a new way to commemorate milestones on GitHub.

You can now use GitHub Mobile to complete your password reset, if you have two-factor authentication enabled. After you confirm access to your email address, you’ll be asked to authenticate…

Today, we’re announcing GitHub Skills, a new learning experience to help you throughout your GitHub journey.

Learn how you can securely manage users with the latest ships for GitHub Enterprise.

Read about all the features you may not have known come on the GitHub Free plan, and how to choose the right plan for you.

You can now sign up to be sponsored via GitHub Sponsors if you have a bank account and tax residence in Brazil. Read about the rollout on our blog and…

GitHub Sponsors is now available in Brazil—an exciting expansion for one of our fastest growing developer communities.

Enterprises that use Enterprise Managed Users (EMUs) to authenticate their accounts via Azure Active Directory can now use Azure AD location-based Conditional Access policies to protect the use of PATs…

GitHub Enterprise Server 3.5 is available now, including access to the Container registry, the addition of Dependabot, enhanced administrator capabilities, and features for GitHub Advanced Security.

npm’s impact analysis of the attack campaign using stolen OAuth tokens and additional findings.

You can now sign up for Sponsors if you have a bank account and tax residence in India. Read about the rollout on our blog and stay tuned for more…

GitHub Sponsors is now available to all developers in India – no more waitlist, you can sign up right away!

Each month, we highlight open source projects that have shipped major updates. These include everything from world-changing technology to developer tooling, and weekend projects. Here are our top staff picks…

Upgrade to GHES 3.2 or newer by June 3rd to continue using GitHub Connect.

Learn about what GitHub is doing to make their products more inclusive, and what’s next.

Via our new beta feature, enterprise owners can now revoke pending member invitations from the pending invitations page within the enterprise account: https://github.com/enterprises/<enterprise>/pending_members. This beta feature only applies to enterprise…

Device verification protects new sessions if you don’t have two-factor authentication enabled, using an email notification. We’ve updated this feature to allow you to verify your sign in using GitHub…