GitHub MCP Server: Secret scanning, push protection, and more
The remote GitHub MCP server now scans all of its tool call inputs in public repositories. If an exposed secret is detected, the call is blocked by default with clear…
The remote GitHub MCP server now scans all of its tool call inputs in public repositories. If an exposed secret is detected, the call is blocked by default with clear…
Dependabot now supports automatic dependency updates for vcpkg, the free C/C++ package manager from Microsoft. This enables teams using vcpkg to keep their C and C++ dependencies secure and up-to-date…
Learn how maintainers are using the GitHub MCP Server and what they are building in this episode of the GitHub Podcast.
Learn how the GitHub Secure Open Source Fund helped 71 open source projects significantly improve their security posture through direct funding, expert guidance, and actionable playbooks.
Summary We’re introducing improvements to the GitHub Activity Events API to provide a fresher, more scalable experience for everyone using GitHub event data. By reducing the size of data payloads,…
The role of junior developer is evolving. If you’re at this stage in your career, here’s how to keep up and stand out.
With GitHub Copilot coding agent, you can delegate tasks to Copilot that it will work on in the background. By adding custom instructions to your repository, you can guide Copilot…
Learn how to integrate AI features with GitHub Models directly in GitHub Actions workflows.
New REST APIs for actions settings Today, GitHub Actions is launching new REST APIs for managing settings. The following settings are now accessible via these new endpoints: Approval for running…
Copilot Chat in github.com is significantly more powerful for repository workflows, unlocking a range of new capabilities directly in chat: Create, update, and push files: Describe changes to code, READMEs,…
Learn how to configure Copilot coding agent’s environment, optimize project structure, use custom instructions, and extend its capabilities with MCP servers.
We’re investing in keeping Dependabot relevant for modern development teams, whether you’re experimenting with a new language or relying on the latest version of your favorite package manager. We’ve expanded…
Build a custom Azure DevOps extension that eliminates the complexity of JWT generation and token management, enabling powerful automation and enhanced security controls.
With GitHub Copilot coding agent, you can delegate tasks to Copilot that it will work on in the background while you focus on something else. When delegating a task to…
With GitHub Copilot coding agent, you can hand off tasks for it to work on in the background, freeing you up to concentrate on other things. You can add custom…
How using GitHub’s free inference API can make your AI-powered open source software more accessible.
We’re streamlining and enhancing Copilot code review! Upcoming features include moving from coding guidelines to copilot-instructions.md, making the Request pull request review from Copilot checkbox easier to find, and introducing…
Copilot on github.com now supports improvements to the experiences you already know and love. Creating issues with Copilot supports issue forms When creating issues with Copilot, it can now select…
Strengthen your repositories against actions workflow injections — one of the most common vulnerabilities.
That idea you’ve been sitting on? The domain you bought at 2AM? A silly or serious side project? This summer, we invite you to build it — for the joy, for the vibes, For the Love of Code 🧡
GitHub Copilot coding agent, currently in public preview, has limited internet access by default to help protect your data and mitigate security risks. Today, we’re releasing an updated experience that…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.