How to define security requirements for your OSS project
Defining your security requirements is the most important proactive control you can implement for your project. Here’s how.
Defining your security requirements is the most important proactive control you can implement for your project. Here’s how.
How to exploit a double-free vulnerability in Ubuntu’s accountsservice (CVE-2021-3939)
We shipped a ton of updates in November, from the push notification for PR review activities on the go, to an easy way to create Markdown links.
Last week, GitHub joined the Internet Governance Forum to spread awareness of developers’ initiatives and public policy interests.
Today, we are rolling out a technology preview for GitHub code search, the next iteration for search, discovery, and navigation on GitHub.
GitHub Enterprise Cloud customers participating in the audit log streaming public beta may now use Google Cloud Storage when configuring a stream. This will allow tools that support Google Cloud…
Today we’re introducing enhanced login verification to the npm registry, and we will begin a staged rollout to maintainers beginning Dec 7.
Dotfiles are a common way to specify custom, user-specific behavior for applications (like Vim or Emacs) and shells on your codespaces. If enabled, dotfiles stored in a user’s public dotfiles…
Organization owners can now unsubscribe from email notifications when new deploy keys are added to repositories belonging to their organizations. For more info, see our docs.
The GitHub Services Engineers have released the Advanced Security Enforcer GitHub Action to enable organizations to utilize code scanning in a consistent and automated way.
A public beta of the new GitHub Issues, a “security manager” role for organizations, a command palette beta, and lots more.
Check out some advanced automation and CI/CD capabilities you can use today with GitHub Actions on any GitHub account.
GitHub puts the needs of developers at the core of our content moderation policies. Learn more about our approach and how you can contribute.
GitHub Enterprise Cloud administrators can now download and view the latest GitHub SOC 1, Type 2 and SOC 2, Type 2 compliance reports for 2021. These reports can be found…
You can manage your keyboard shortcuts using the new accessibility settings page. You can choose to disable “character key shortcuts”. This turns off keyboard shortcuts that only use single characters…
We’re sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
To celebrate this most recent release, here’s GitHub’s look at some of the most interesting features and changes introduced since last time.
On Saturday November 13, 2021 from 7:00PM to 9:00PM PST, GitHub’s billing systems will undergo scheduled maintenance. During this time period, certain payment functionalities will be unavailable including: Adding a…
You can now export your Advanced Security license data to review usage across your business. The CSV data can be downloaded at both enterprise and organization level, and contains: the…
Here are a few ways our teams use GitHub Discussions internally to build community, simplify workflows, and get key insights into our work.
This latest release sees the introduction of a new role, a new webhook for GitHub Actions, and a bright edge to dark mode.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Join us October 28-29 in San Francisco or online for GitHub Universe, our flagship developer event uniting people, agents, and the world’s code.