Community-powered security with AI: an open source framework for security research
Announcing GitHub Security Lab Taskflow Agent, an open source and collaborative framework for security research with AI.
Announcing GitHub Security Lab Taskflow Agent, an open source and collaborative framework for security research with AI.
Editor’s note (February 19, 2026): We updated this post and the title to remove a reference to a Google model that is no longer being retired. In addition, we updated…
Today we’ve released an update to the consent page to be less alarming when using GitHub Apps only as a form of sign-in. The consent page for GitHub Apps, where…
Security advice for users and maintainers to help reduce the impact of the next supply chain malware attack.
Delegated alert dismissal allows you to require a review process before Dependabot alerts are closed. This feature is available to GitHub Code Security customers and can be used in both…
Organizations can now apply Copilot code review to all pull requests, including those from contributors without a Copilot license. Usage is billed seamlessly to the organization as premium requests, without…
You can now access your organization’s Copilot usage metrics via the Copilot usage APIs. The APIs contain reports with aggregated and user-specific metrics, including usage statistics for various Copilot features,…
Repository administrators can now post and comment in GitHub Discussions using an “Admin” badge to distinguish official responses from personal contributions. The option to post as Admin appears when creating…
We’ve released a number of improvements, a dedicated SKU for Spark, and ensured Spark is covered by the GitHub DPA! Read on to hear about all of the changes. Spark…
The GitHub MCP Server now comes with support for tool-specific configuration, allowing you to customize the server to your needs and minimize context window usage. Simply use the new X-MCP-Tools…
AI can help you build faster than ever, but it can also produce bugs, issues, and problems. Use these strategies to keep your speed without losing control of your code.
Learn how one of GitHub’s fastest-growing open source projects is redefining smart homes without the cloud.
GitHub secret scanning continually adds support for new secret types. The following updates were made during the month of November. New provider patterns: Secret scanning added 24 new secret types…
Starting today, GitHub will report any publicly leaked secrets found in unlisted GitHub gists to the respective secret scanning partner. GitHub gists can be listed (denoted with a public label)…
Learn more about the agentic security principles that we use to build secure AI products—and how you can apply them to your own agents.
GitHub Actions cache size can now exceed 10 GB per repository You can now store more build dependencies between workflow runs with expanded GitHub Actions cache storage. Repositories can go…
GitHub Copilot in JetBrains IDEs, Xcode, and Eclipse now includes an Auto option that selects the model on your behalf. Choose Auto from the model picker in Copilot Chat. This…
You can now migrate repositories to GitHub Enterprise Cloud (GHEC) with GitHub Enterprise Importer (GEI) using GitHub-owned blob storage. You no longer need to provide GEI with shared access keys…
Starting December 1, 2025, all usage-based GitHub products paid by credit card on self-serve metered GitHub Enterprise Cloud accounts will be billed on the first of each month. Your billing…
GitHub Copilot in Visual Studio now includes an Auto option you can select from the model picker where Copilot picks the model for you. Auto is now available all Copilot…
We have deprecated Claude Sonnet 3.5 across all GitHub Copilot experiences (including Copilot Chat, inline edits, ask and agent modes, and code completions) as of today, November 10th 2025. As…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.