Search results for: GitHub Actions

Code scanning API to enable default setup with CodeQL on a repository

Create and manage Runner Groups in the Team plan

Security advisories now have multiple types of credits

A deep dive into why more people are using Python than ever, its key use cases, and why it’s still so popular 30-plus years after it was first released.

Secret scanning alerts are now generally available for all public repositories. Admins can now turn on the alert experience with one click.

Looking back over a year’s worth of developer-first content moderation and, new in this report, making our data more accessible to researchers.

CodeQL code scanning is now 16% faster

Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar systems.

Invitation Enhancements

Code scanning: CodeQL Action v1 is now deprecated

Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns.

Secret scanning emits audit log events for custom pattern push protection enablement

GitHub’s search inputs have several complex accessibility considerations. Let’s dive into what those are, how we addressed them, and talk about the standalone, reusable component that was ultimately built.

Before you say it, yes, the October Release Radar was supposed to be shared in November. But with Hackatoberfest, GitHub Universe, Turkey Day, and in real life (IRL) conferences returning…

Administrators, or enterprise owners, have the increased responsibility of managing their account and keeping it secure. We are excited to introduce what is new with enterprise accounts and what is coming soon.

Audit log improvements for Dependabot alerts

Dependency review API is generally available with updates to dependency review enforcement

CodeQL code scanning now supports customizing build configurations for Go analysis

Secret scanning enterprise-level enablement events now in the audit log

Having a robust security plan is key to innovation. These tips will empower you to gain the upper hand on cyberattacks, so you can ship quickly and innovate with ease.

New Dependabot alerts webhook