Search results for: Security

Ahead of the sunset of Copilot knowledge bases on November 1, 2025, we’ve introduced a new way for you to migrate your legacy knowledge bases into a Copilot Space. Simply…

GitHub Copilot and VS Code teams, along with the Microsoft Open Source Program Office (OSPO), sponsored these nine open source MCP projects that provide new frameworks, tools, and assistants to unlock AI-native workflows, agentic tooling, and innovation.

Actions Runner Controller (ARC) release 0.13.0 is now available and provides improvements in storage, networking, platform, and metrics. Enable container hooks to remove storage limitations ARC now supports container lifecycle…

Discover how GitHub Copilot has evolved from a high-powered autocomplete tool to a powerful, multi-model agentic assistant.

We’ve added support for Rust and scanning C/C++ projects without builds in CodeQL, the engine powering GitHub code scanning. Both of these initiatives have ended their public preview and are…

GitHub Enterprise Server (GHES) 3.18 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.18 release: Enterprise administrators can define custom properties…

We’ve removed offset-based pagination parameters (page, first, and last) in all GitHub Dependabot alerts for REST API endpoints. Going forward, we only support cursor-based pagination parameters (before, after, and per_page).…

See how this three-part framework will turn AI into a repeatable and reliable engineering practice.

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.23.2, which introduces a new Rust security…

GitHub now offers social login with Apple, simplifying sign-ups for our iOS developers. We previously launched social login with Google, and we’re now extending that for Apple. You can create…

See how we turned weekly accessibility signals into an automated, accountable remediation workflow—powered by GitHub Copilot and cross‑functional collaboration.

GitHub continually updates the default pattern set for secret scanning with new patterns and upgrades to existing patterns, helping ensure your repositories have comprehensive detection for different secret types. The…

GitHub Enterprise Cloud customers with multiple Enterprise Managed Users (EMU) accounts can now configure a single proxy header to restrict traffic to github.com outside any of these enterprises. Previously, enterprise…

AI is changing how software gets built. Explore the skills you need to keep up and stand out.

Secret scanning is adding validity check support for MongoDB, Meta, and Microsoft Azure. In addition to previously announced validators, GitHub now validates the following secret types: Provider Pattern Validity Azure…

Learn to debug and fix your CodeQL queries.

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.23.1, which includes the following: Added support…

Learn what it really takes to sustain one of the web’s most widely used frameworks on this episode of the GitHub Podcast.

Ever wish Copilot understood your project as well as your teammates do? Now it can. With GitHub Copilot Spaces, you can bring together the context it needs — files, pull…

We’re closing down offset-based pagination parameters (page, first, and last) in all GitHub Dependabot alerts REST API endpoints. Going forward, only cursor-based pagination parameters (before, after, and per_page) will be…

Learn how to use GitHub Copilot agent mode to modernize legacy Java projects with guided upgrades, automated fixes, and cloud-ready migrations.