Search results for: Security

We envision the future of AI-enabled tooling to look like near-effortless engineering for sustainability. We call it Continuous Efficiency.

Editor’s note (December 19, 2025): We updated this post to indicate new dates for when self-hosted runners need to be updated to v2.329.0 or later. The original upgrade date has…

A look at how we rebuilt GitHub Actions’ core architecture and shipped long-requested upgrades to improve performance, workflow flexibility, reliability, and everyday developer experience.

Repository administrators can now post and comment in GitHub Discussions using an “Admin” badge to distinguish official responses from personal contributions. The option to post as Admin appears when creating…

We’ve released a number of improvements, a dedicated SKU for Spark, and ensured Spark is covered by the GitHub DPA! Read on to hear about all of the changes. Spark…

GitHub Enterprise Server (GHES) 3.19 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.19 release: An improved and more intuitive flow…

The GitHub MCP Server now comes with support for tool-specific configuration, allowing you to customize the server to your needs and minimize context window usage. Simply use the new X-MCP-Tools…

MCP is moving to the Linux Foundation. Here’s how that will affect developers.

AI can help you build faster than ever, but it can also produce bugs, issues, and problems. Use these strategies to keep your speed without losing control of your code.

As previously announced, we’re completing the npm classic token deprecation today. This marks a major milestone in the security hardening initiative to strengthen npm’s authentication system. What’s changing today (December…

Continuing the supply chain security theme of continually improving our package ecosystem support, Go projects will now see more complete and accurate transitive dependency trees in their dependency graphs and…

Discover how advanced AI users are redefining software development—shifting from code producers to strategic orchestrators—through delegation, verification, and a new era of AI-fluent engineering.

Follow this step-by-step guide to learn how to debug your issues using GitHub Copilot Spaces and Copilot coding agent.

GitHub Enterprise Server (GHES) 3.19 enhances deployment efficiency, monitoring capabilities, code security, and policy management. Here are a few highlights in the 3.19 release: An improved and more intuitive flow…

Learn how one of GitHub’s fastest-growing open source projects is redefining smart homes without the cloud.

GitHub secret scanning continually adds support for new secret types. The following updates were made during the month of November. New provider patterns: Secret scanning added 24 new secret types…

We released three major updates to Copilot Spaces: public spaces, individual sharing, and the ability to add files to a space directly from the github.com code viewer. 👥 Public spaces…

Organization owners can now better control which users are allowed to install GitHub Apps across their repositories with a new setting. Previously, any user with admin permissions on a repository—including…

Run multiple Copilot agents from one place. Learn prompt techniques, how to spot drift early, and how to review agent work efficiently.

Starting today, GitHub will report any publicly leaked secrets found in unlisted GitHub gists to the respective secret scanning partner. GitHub gists can be listed (denoted with a public label)…

GitHub code scanning default setup now runs even if your organization has GitHub Actions policies that restrict which workflows can run. In the past, restrictive actions policies could block code…