Search results for: Security

Hear about the personal tools we use to improve our workflows (and how to get started building your own) on this episode of the GitHub Podcast.

Delegate it a task, and coding agent can independently write, run, and test code. Here’s how you can make the most of it.

Expanded platform support GitHub Enterprise Cloud with data residency and Enterprise Server Enterprise Cloud with data residency: Starting today, validity checks are now available for GitHub Secret Protection and GitHub…

Create your own agenda of favorites, sign up for one-on-on mentoring sessions, and register if you haven’t already. We’ll see you there!

Dependabot alerts can now be filtered and prioritized using production context from external artifact registries, including JFrog Artifactory, and your own CI/CD workflows. This feature is available in public preview.…

Connect commits to artifacts without switching tools.

Dependabot can now update private Go modules hosted on enterprise registries and behind GOPROXY-compatible private proxies, as well as public modules, within the same workflow. This enables automated version and…

The remote GitHub MCP Server is now generally available. We’ve introduced OAuth-based authentication, expanded tooling, and improved security guardrails. Improvements & updates 🔐 Production authentication The GitHub MCP Server now…

Copilot code review is becoming even more customizable! You can now use your existing path-scoped instruction files to provide targeted guidance for specific parts of your repository. Plus we have…

This guide offers five essential tips for writing effective GitHub Copilot custom instructions, covering project overview, tech stack, coding guidelines, structure, and resources, to help developers get better code suggestions.

CodeQL is the static analysis engine behind GitHub code scanning, which finds and remediates security issues in your code. We’ve recently released CodeQL 2.22.4, which adds support for Go 1.25,…

Developers can use their AI tool of choice for spec-driven development with this open source toolkit.

Learn how GitHub Copilot’s evolving models and infrastructure center developer choice and power agentic workflows.

Learn how the Secret Protection engineering team collaborated with GitHub Copilot coding agent to expand validity check coverage.

In the latest improvements with Copilot code review, we’ve added a new Copilot code review enterprise and organization setting and Copilot code review is now generally available in Xcode 🎉.…

GitHub is committed to empowering the developer community by helping organizations recognize and address the risks of secret leaks. That’s why we’re launching a new free tool which will help…

Releases now support immutability in public preview GitHub releases now support immutability, adding a new layer of supply chain security. With immutable releases, assets and tags are protected from tampering…

You can now tell Dependabot to completely skip dependency manifests that live in specific subdirectories of your repository. This general availability release reduces noise by preventing unwanted update pull requests…

Secret scanning is adding validity check support for several additional secret types across multiple providers. In addition to previously announced validators, GitHub is adding validity check support for the following…

When a chat conversation is poisoned by indirect prompt injection, it can result in the exposure of GitHub tokens, confidential files, or even the execution of arbitrary code without the user’s explicit consent. In this blog post, we’ll explain which VS Code features may reduce these risks.

Learn Model Context Protocol by building a turn-based game server that shows how to extend GitHub Copilot with custom tools, resources, and prompts.