What’s new? This feature makes it easier to enable Dependabot alerts and check enablement status across all your repositories at an enterprise level, with updates across both enablement UI and…
A look at what happened on January 30, what measures we’re putting in place to prevent surprises, and how we’ll handle future changes.
GitHub Advanced Security customers using secret scanning can now view any new secrets exposed in an issue’s title, description, or comments within the UI or the REST API. This expanded…
Fine-grained personal access tokens offer enhanced security to developers and organization owners, to reduce the risk to your data of compromised tokens.
API users can now integrate with a new dependabot_alert webhook, which matches the naming and structure of the recently introduced Dependabot alerts REST API. You should use this webhook in…
GitHub’s audit log allows admins to quickly review the actions performed by members of their Enterprise. It includes details such as who performed the action, what the action was, and…
GitHub Advanced Security customers can now view a timeline of actions taken on a secret scanning alert, including when a contributor bypassed the push protection on a secret. Users can…
We have started creating and storing CodeQL databases for the most popular open-source projects on GitHub.com. If you use CodeQL for security research, you can now obtain these databases easily…
GitHub’s audit log allows admins to quickly review the actions performed by members of their Enterprise. It includes details such as who performed the action, what the action was, and…
In May we shipped a setting for including the pull request title in the default commit message presented to users when squash merging a pull request. We just shipped more…
GitHub Packages is being re-platformed, unlocking great capabilities such as fine-grained permissions, org-level publishing and increased performance. Package registries on the new GitHub Packages architecture, including container registry and npm…
GitHub Discussions and Audit Log Streaming, new automation features, and security enhancements are available now in GitHub Enterprise Server 3.6.
Today, we’re releasing capabilities that will enable developers and organizations to efficiently manage and confidently scale with Codespaces. Retention setting for all individuals To enable auto-cleanup of unused codespaces, inactive…
GitHub Advanced Security customers can now see an overview of code scanning alerts at the enterprise level. This page provides a repo-centric view of application security risks, as well as…
We’re releasing exciting functionalities that will enable organizations to confidently manage and scale with Codespaces.
Custom repository roles are now GA for GitHub.com and Enterprise Server 3.5. Organization admins can create custom repository roles available to all repositories in their organization. Roles can be configured…
Today’s Changelog brings you the release of project webhooks, a first exploration into templates and a host of improvements to GitHub Issues. ☁️🪝 Automate more with project webhooks The first…
Users can now add a comment when dismissing a code scanning alert. It is optional to provide a dismissal comment. Dismissal comments are recorded in the alert timeline. They can…
A two-part story about how GitHub’s Product Security Engineering team rolled out Dependabot internally to track vulnerable dependencies, and how GitHub tracks and prioritizes technical debt.
Today’s Changelog brings you the release of issue closed reasons, project deletion, and availability of the new side-panel. 🕵🏽♀️ Issue closed reasons We announced a preview of issue closed reasons…
It is now possible to re-run only failed jobs or a single job in GitHub Actions workflows.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Catch up on the GitHub podcast, a show dedicated to the topics, trends, stories and culture in and around the open source developer community on GitHub.
