Search results for: Security

We’ve introduced enhanced authentication capabilities in GitHub Copilot plugins for JetBrains, Eclipse, and Xcode to support more third-party OAuth providers with a secure and flexible approach using Dynamic Client Registration…

GitHub now makes it easier for teams to track, prioritize, and remediate security risks that matter by connecting code, build artifacts, and production context. Here’s what’s shipped and how you…

Enterprise and organization administrators can now configure MCP registries and enforce allowlist policies in the latest release of VS Code Stable, bringing these governance controls to the majority of Copilot…

Starting December 1, 2025, all usage-based GitHub products paid by credit card on self-serve metered GitHub Enterprise Cloud accounts will be billed on the first of each month. Your billing…

The open source Git project just released Git 2.52. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

Organization owners can now better control which users are allowed to install GitHub Apps across their repositories with a new setting, available in public preview. Previously, any user with admin…

Discover practical tips, examples, and best practices for writing effective instructions files. Whether you’re new or experienced, you’ll find something to level up your code reviews.

GitHub Actions OpenID Connect (OIDC) token claims now include check_run_id This enhancement enables fine-grained, attribute-based access control and improves auditability for workflows that integrate with external services. Platform teams often…

To reduce the risk of cryptographic credentials being exposed in your repositories, secret scanning now detects additional private key formats and has upgraded existing private key detectors. In addition, Sentry…

A breakdown of how Copilot coding agent has contributed to a better, more powerful GitHub.

GitHub is updating how GitHub Actions’ pull_request_target and environment branch protection rules are evaluated for pull-request-related events. These changes will take effect on 12/8/2025. They aim to reduce security critical…

Nearly a billion commits later, the way we ship code has changed for good. Here’s what the 2025 Octoverse data says about how devs really work now.

Editor’s note (November 18, 2025): We’ve updated this post to clarify impact on enterprises. Following the previous announcement notice, we retired GraphQL Explorer. Who this affects Customers who use the…

Curious about using GitHub Copilot in your terminal? Here’s our guide to GitHub Copilot CLI, including a starter kit with the best prompts for a wide range of use cases.

How GitHub Copilot works today—including mission control—and how to get the most out of it. Here’s what you need to know.

Secret scanning — October 2025 GitHub secret scanning continually adds support for new secret types. The following updates were made during the month of October. Base64-encoded secrets: Secret scanning now…

The GitHub MCP Server now comes with server instructions that unlock new and better ways in which it can be used by models. We’ve also continued to decrease the footprint…

On October 7, 2025, we released CodeQL Action v4, which runs on the Node.js 24 runtime. CodeQL Action v3 will be deprecated at the same time as GHES 3.19, which…

At Universe 2025, GitHub’s next evolution introduces a single, unified workflow for developers to be able to orchestrate any agent, any time, anywhere.

In this year’s Octoverse, we uncover how AI, agents, and typed languages are driving the biggest shifts in software development in more than a decade.

GitHub celebrates its 2025 Partner Award winners, honoring global, regional, and technology partners for driving innovation, collaboration, and impact across the developer ecosystem.