Search results for: Security

GitHub now offers social login with Apple, simplifying sign-ups for our iOS developers. We previously launched social login with Google, and we’re now extending that for Apple. You can create…

See how we turned weekly accessibility signals into an automated, accountable remediation workflow—powered by GitHub Copilot and cross‑functional collaboration.

GitHub continually updates the default pattern set for secret scanning with new patterns and upgrades to existing patterns, helping ensure your repositories have comprehensive detection for different secret types. The…

GitHub Enterprise Cloud customers with multiple Enterprise Managed Users (EMU) accounts can now configure a single proxy header to restrict traffic to github.com outside any of these enterprises. Previously, enterprise…

AI is changing how software gets built. Explore the skills you need to keep up and stand out.

Secret scanning is adding validity check support for MongoDB, Meta, and Microsoft Azure. In addition to previously announced validators, GitHub now validates the following secret types: Provider Pattern Validity Azure…

Learn to debug and fix your CodeQL queries.

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.23.1, which includes the following: Added support…

Learn what it really takes to sustain one of the web’s most widely used frameworks on this episode of the GitHub Podcast.

Ever wish Copilot understood your project as well as your teammates do? Now it can. With GitHub Copilot Spaces, you can bring together the context it needs — files, pull…

We’re closing down offset-based pagination parameters (page, first, and last) in all GitHub Dependabot alerts REST API endpoints. Going forward, only cursor-based pagination parameters (before, after, and per_page) will be…

Learn how to use GitHub Copilot agent mode to modernize legacy Java projects with guided upgrades, automated fixes, and cloud-ready migrations.

Addressing a surge in package registry attacks, GitHub is strengthening npm’s security with stricter authentication, granular tokens, and enhanced trusted publishing to restore trust in the open source ecosystem.

Our commitment is to empower every developer and stay true to our north star by building an open, secure, and AI-powered platform that defines the future of software development.

Copilot code review is now in most standard editors and IDEs! 🚀 With this update, you can use Copilot code review directly in Visual Studio and JetBrains IDEs (including IntelliJ…

Delegated bypass controls allow you to choose who can bypass push protection for secret scanning and designate reviewers for bypass requests. You can now manage your list of approvers and…

This is your new home base for discovering MCP servers. Learn how we’re working with the broader community on MCP publication and discovery.

If you’ve tried connecting AI agents to your development tools, you know the pain — MCP servers are scattered across numerous registries, random repositories, and buried in community threads. Without…

Enterprise access restrictions via corporate proxies is now generally available for GitHub Enterprise Cloud accounts with Enterprise Managed Users (EMU). With this release, enterprise owners may allow only EMU enterprise…

The August 2025 update to GitHub Copilot in Visual Studio Code (v1.104) brings greater flexibility, security, and productivity to AI-powered development workflows. Highlights Auto model selection in Copilot Chat: Copilot…

Enterprise and organization administrators can now configure MCP registries and test allowlist enforcement in VS Code Insiders, preparing for the rollout across all Copilot environments. Understanding MCP registries and allowlists…