Search results for: GitHub Actions

Aimed at developers, in this series we introduce and explore the memory unsafe attack surface of interpreted languages.

To best apply DevSecOps principles to improve the security of your supply chain, you should ask your developers to declare your dependencies in code; and in turn provide your developers with maintained ‘golden’ artifacts and automated downstream actions so they can focus on code.

Today we reinstated youtube-dl, a popular project on GitHub, after we received additional information about the project that enabled us to reverse a Digital Millennium Copyright Act (DMCA) takedown. 

Temporary interaction limits give you control over who interacts with your public repositories. You can use them to force a cool-down period during heated discussions, or to prevent spam or…

Remote Education explores the challenges of organizing student communities and events online. We’ll be speaking with event organizers and community leaders in the industry and academics each week to help…

Remote Education explores the challenges of organizing student communities and events online. We’ll be speaking with event organizers and community leaders in the industry and academics every week to help…

Last year, the Adacats (GitHub’s employee resource group for marginalized genders) started a mentorship program. We’re sharing insights and fun stories from this experience for anyone interested in starting a…

We all play a role in securing the world’s code. No one company can solve things alone, including GitHub, which is why it is critical to combine the energies of…

Sales and Support leaders share advice and strategies to help you navigate a remote-first customer approach.

When we introduced the workflow scope for Personal Access Tokens we did not apply that permission to existing tokens. To prevent breaking existing workflows we are enabling this scope on…

Secret names are now shown as all uppercase in the UI and API to reflect that they are case-insensitive. Learn more about secrets in the documentation

This post details how an open source supply chain malware spread through build artifacts. 26 open source projects were backdoored by this malware and were actively serving backdoored code.

GitHub parents share their tips for adapting during COVID-19 and working from home with kids.

In-depth analysis of February service disruptions that impacted GitHub services.

Take a look at some of the new features in the latest Git release.

We’re excited to share GitHub’s 2019 Transparency Report, a by-the-numbers look at how we handle requests for user data and moderate content on GitHub.

California’s new privacy law comes into effect this January. Learn how you can prepare (tl;dr—don’t sell personal information) and contribute to the rules.

When you edit or comment on existing issues on mobile web, you now get the same useful features as you experience in our desktop web experience: Add and update issue…

In order to align the experience of linking to Actions log lines and linking to code we have made the line numbers in Actions logs links. Previously, we showed a…

Administrators of organization-owned repositories can now assign “triage” and “maintain” roles to collaborators and teams.

Software security is a collective problem, a responsibility that involves producers and consumers of code, open source maintainers, security researchers, and security teams. At GitHub, we want to give the community the tools it needs to secure the software we all depend on.