
5 ways to transform your workflow using GitHub Copilot and MCP
Learn how to streamline your development workflow with five different MCP use cases.
Learn how to streamline your development workflow with five different MCP use cases.
Use these insights to automate software security (where possible) to keep your projects safe.
Stricter requirements are being enforced for application authentication and cross-organization access
GitHub Desktop 3.5 is now generally available! This update marks a major milestone for GitHub Desktop, and we’re thrilled to highlight some of the improvements and features we’ve added recently.…
The latest updates to GitHub Copilot in Visual Studio Code deliver significant improvements to agent mode workflows, Model Context Protocol (MCP) support, and development tools integration. Learn more in the…
The Actions Runner Controller (ARC) 0.12.0 release introduces several enhancements including: public preview support for Red Hat OpenShift Kubernetes clusters and vault-based secret management, improvements to Docker-in-Docker (DinD) container mode,…
The GitHub MCP Server allows AI tools like GitHub Copilot in VS Code and Visual Studio, Claude Desktop, and others to seamlessly access live GitHub context and tools—like issues, pull…
In May, we experienced three incidents that resulted in degraded performance across GitHub services.
DNS rebinding attack without CORS against local network web applications. Explore the topic further and see how it can be used to exploit vulnerabilities in the real-world.
Maintaining and developing complex and risky code is never easy. See how we addressed the challenges of securing our SAML implementation with this behind-the-scenes look at building trust in our systems.
Follow along and build a frontend client using React and Copilot Chat.
To provide a secure and dependable experience on GitHub, we’re rolling out updates to rate limits for requests made without authentication. These changes will apply to operations like cloning repositories…
You can now revoke an exposed GitHub personal access token (PAT) you found outside of repositories, even if it’s not yours, to help quickly limit the impact of the exposure…
See how you can use GitHub Copilot to build an API.
Discover practical tips and tricks for forming effective GraphQL queries and mutations.
What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.
Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.
Discover the differences between agent mode and Copilot Edits with GitHub Copilot—and when to use them in your workflows.
A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.
Fine-grained Personal Access Tokens (PATs) have been used by millions of users to make tens of billions of API calls over the last two years in public preview. In that…
Treating exposures as full and complete can help you respond more effectively to focus on what truly matters: securing systems, protecting sensitive data, and maintaining the trust of stakeholders.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Last chance: Save $700 on your IRL pass to Universe and join us on Oct. 28-29 in San Francisco.