Secret scanning REST API now surfaces locations
GitHub Advanced Security customers can now use the GitHub REST API to retrieve commit details of secrets detected in private repository scans. Now available on cloud, the new endpoint will…
GitHub Advanced Security customers can now use the GitHub REST API to retrieve commit details of secrets detected in private repository scans. Now available on cloud, the new endpoint will…
We have graduated twenty-three of the twenty-five existing previews that were in our REST API. Previously, REST API consumers needed to pass in a custom media-type via an HTTP accept…
GitHub Advanced Security customers can now retrieve private repository secret scanning results at the organization level via the GitHub REST API. This new endpoint, in beta, supplements the existing repository-level…
API requests made by a GitHub App on behalf of a user that has authorized the app are known as user-to-server requests. The resources that can be accessed by these…
Audit Log Git events REST API and export capabilities are generally available for all GitHub Enterprise Cloud customers. Enterprise and organization owners may call the REST API to view Git…
The “Compare two commits” REST API, which returns a list of commits reachable from one commit (or branch) but not reachable from another, now supports pagination. It can also now…
We changed the REST API authorization logic for maintainer fork collaborators to address an improper write access control bug identified by an independent bug bounty researcher. Under certain circumstances, this…
In December 2020 we announced a limited beta of the new Audit Log Git events and REST API. We have now enabled these features in beta for all GitHub Enterprise…
In GitHub Enterprise Cloud, the Audit Log now includes Git events and has a new REST API. Both are available as a limited public beta. The new Git events will…
GitHub published a full description of its REST API in OpenAPI 3.0 specification compliant documents. The GitHub OpenAPI description contains more than 600 operations exposed in our API. For visual…
We’ve added new billing REST API endpoints for Actions and Packages. You can monitor your GitHub Actions and GitHub Packages charges and usage for the current billing period for a…
We are expanding support for the triage and maintain roles in the REST API. Users with the triage or maintain role can now use endpoints that reflect what they can…
You can now create a draft pull request via the REST API. View the REST API documentation for more information.
As previously announced, we will be begin to validate request payloads more strictly in the REST API starting on November 1, 2018. You can opt into the new validations by…
On November 1, 2018 we will begin to validate request payloads more strictly. Calls that previously returned a 2xx success code, may return a 422 Unprocessable Entity. Learn more
The node_id attribute, used to identify GraphQL API objects from the REST API, is now officially supported in the REST API v3 for GitHub.com and GitHub Enterprise (versions 2.14 and…
We’ve extended the Credential revocation API to support additional token types, enabling you to programmatically revoke any exposed credentials found on repositories or elsewhere. This helps you quickly limit the…
On April 21, 2026, we’re deprecating and removing the following fields from the get an organization and update an organization REST API endpoints: advanced_security_enabled_for_new_repositories dependabot_alerts_enabled_for_new_repositories dependabot_security_updates_enabled_for_new_repositories dependency_graph_enabled_for_new_repositories secret_scanning_enabled_for_new_repositories secret_scanning_push_protection_enabled_for_new_repositories secret_scanning_validity_checks_enabled…
Organization owners who want to manage Copilot coding agent access at scale can now do so programmatically with the new Copilot coding agent management REST APIs, available in public preview.…
We’re expanding the organization-level Copilot Usage Metrics API to include a broader set of pull request activity, including creation volume, throughput and cycle time. This brings the org-level endpoints to…
Organization owners within GitHub Enterprise can now discover and interact with both enterprise teams and organization teams through existing organization API endpoints. Previously, retrieving a complete view of all teams…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.