Search results for: REST API

Modeling CORS frameworks with CodeQL to find security vulnerabilities

Discover how to increase the coverage of your CodeQL CORS security by modeling developer headers and frameworks.

CVE-2025-53367: An exploitable out-of-bounds write in DjVuLibre

DjVuLibre has a vulnerability that could enable an attacker to gain code execution on a Linux Desktop system when the user tries to open a crafted document.

An illustration of two octocats repairing a robot.

Changelog

Manage artifact attestations with deletion, filtering, and bulk actions

You can now manage artifact attestations more effectively with new updates to the UI and API, including deletion, filtering, and bulk actions. Here’s what’s new: Delete attestations: Easily delete artifact…

Changelog

Actions Runner Controller 0.12.0 release

The Actions Runner Controller (ARC) 0.12.0 release introduces several enhancements including: public preview support for Red Hat OpenShift Kubernetes clusters and vault-based secret management, improvements to Docker-in-Docker (DinD) container mode,…

A screenshot of the new app manager role in the organization settings UI, showing that the role is made of four permissions: create, view, edit, and delete GitHub Apps

Changelog

GitHub App Manager can now be granted to teams

You can now assign teams as the app managers of some or all of your organization’s GitHub Apps. The App Manager role has been converted to a standard organization role,…

Changelog

GitHub Enterprise Server 3.17 is now generally available

GitHub Enterprise Server (GHES) 3.17 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.17 release: GitHub Advanced Security (GHAS) is now…

Changelog

Incremental security analysis makes CodeQL up to 20% faster in pull requests

CodeQL scans on pull requests for JavaScript, TypeScript, Java, Ruby, and Python are now up to 20% faster. This is powered by our new incremental analysis, which only analyzes new…

The "Compare" tab in GitHub Models, displaying a side-by-side model evaluation with three different AI models.

Changelog

GitHub Models built into your repository is in public preview

We’re making it easier than ever to take your AI project from idea to shipped, all within GitHub. With the new GitHub Models repository integration, you get the building blocks…

AI & ML

Vibe coding: Your roadmap to becoming an AI developer

Learn how to go from curious coder to AI wizard—with a little help from GitHub.

Changelog

GitHub Enterprise Server 3.17 release candidate is now available

AI & ML

GitHub for Beginners: Building a React App with GitHub Copilot

Follow along and build a frontend client using React and Copilot Chat.

Maintainers

Dos and don’ts when sunsetting open source projects

Three maintainers share their tips for gracefully sunsetting open source projects.

AI & ML

Copilot ask, edit, and agent modes: What they do and when to use them

An introduction to the three distinct modes of GitHub Copilot and a practical guide for integrating them effectively into your workflow.

Maintainers

From MCP to multi-agents: The top 10 new open source AI projects on GitHub right now and why they matter

Get insights on the latest trends from GitHub experts while catching up on these exciting new projects.

AI & ML

A guide to deciding what AI model to use in GitHub Copilot

What to look for with each model and how to test them in your workflows—with tips, tricks, and pointers.

Changelog

MAI-DS-R1 is now generally available in GitHub Models

MAI-DS-R1 is now available on GitHub Models. MAI-DS-R1 is an updated version of DeepSeek-R1, refined by Microsoft AI. It handles complex queries more effectively, works across multiple languages, and provides…

CI/CD

When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions

Comparing GitHub-hosted vs self-hosted runners for your CI/CD workflows? This deep dive explores important factors to consider when making this critical infrastructure decision for your development team.

Git

Git turns 20: A Q&A with Linus Torvalds

To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.

Changelog

Dependency graph supports all purl-identified package ecosystems

GitHub’s dependency graph now supports a wider range of package ecosystems, including transitive path information and the registered name of the ecosystem. This change increases the accuracy and usefulness of…

Application security

Localhost dangers: CORS and DNS rebinding

What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.

Application security

GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help

Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.