Search results for: GitHub Actions

GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.

Learn how to use CodeQL for security research and improve your security research workflow.

We’ve dramatically increased 2FA adoption on GitHub as part of our responsibility to make the software ecosystem more secure. Read on to learn how we secured millions of developers and why we’re urging more organizations to join us in these efforts.

Push rules public beta

Deprecation of multi-label larger runners

Advanced filtering capabilities for the security overview dashboard

macOS 14 (Sonoma) is generally available and the `latest` macOS runner image

SSH CA support for enterprise-owned user accounts

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

Improvements to security overview insights, secret scanning metrics

Security overview dashboard: Alert age trends, custom repository and severity filters, and date pickers

OpenSSF Scorecard info is now available in the Dependency Review Action

Enablement trends for security products (public beta)

VS Code Copilot Chat January 2024 (version 0.12)

More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

Gradle starter workflows now automatically submit transitive dependencies

Consider deploying the GitHub Action: Evergreen so that you know each of your repositories are leveraging active dependency management with Dependabot.

Explore how DevEx boosts productivity and innovation according to new research.

Explore what flow state entails, its benefits, and three tips for reaching it the next time you code.

Copilot Content Exclusions Feature Update

As we look to empower developers with AI tools, we inadvertently integrate AI deeper into the way developers work. How do developers feel about that? And what are the most impactful ways to introduce more AI into workflows? We recently conducted 25 in-depth interviews with developers to understand exactly that.