Search results for: Security

Secret scanning alerts for non-provider patterns and generic passwords can now be retrieved using the REST API. With the “List secret scanning alerts” endpoint for an enterprise, organization, or repository,…

March 20, 2025 update To clarify the exact impact of this change, we’ve updated the title and the wording we used in this changelog. Previously it was titled “Enterprise Managed…

We are enabling the rise of the AI engineer with GitHub Models–bringing the power of industry leading large and small language models to our more than 100 million users directly on GitHub.

Copilot Chat and pull request summary generation now use GPT-4o, bringing the performance of OpenAI’s latest flagship model to all developers. Copilot Chat is available in Visual Studio, VS Code,…

Learn how we’re experimenting with open source AI models to systematically incorporate customer feedback to supercharge our product roadmaps.

Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.

To create a comprehensive model of the dependencies in a Maven project, it is essential to understand the the transitive dependencies that are resolved at build-time. This feature automatically performs…

Teams with neurodivergent employees can be up to 30 percent more productive. Discover tips on how best to support them in your workplace.

CodeQL is the static analysis engine that powers GitHub code scanning. CodeQL version 2.18.1 has been released and has now been rolled out to code scanning users on GitHub.com. Important…

Meet each maintainer, watch their project demos, and discover the unique story of each open source AI project.

GitHub Advanced Security customers using secret scanning can now use the REST API to enable or disable support for non-provider patterns at the repository level. Non-provider patterns scans for token…

GitHub Staff Engineer Sarah Vessels discusses her philosophy of code review, what separates good code review from bad, her strategy for finding and reviewing code, and how to get the most from reviews of her own code.

In this blog post, we’ll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

Secret scanning now detects generic passwords using AI. Passwords are difficult to find with custom patterns — the AI-powered detection offers greater precision for unstructured credentials that can cause security…

Secret scanning now helps you more easily define custom patterns with GitHub Copilot. Generally available as of today, you can now leverage AI to generate custom patterns without expert knowledge…

Code scanning autofix for alerts in default branch is now available in public beta for all GitHub Advanced Security customers. This feature empowers developers to reduce the time and effort…

Outcomes from the Partnership on AI and GitHub workshop.

Organization owners can now grant a user or team access to all of the repositories in their org with a single click. Five new pre-defined roles have been added to…

Over the next few weeks, jobs generating Dependabot pull requests will start running as GitHub Actions workflows on Github.com accounts with GitHub Actions enabled. This migration will include faster Dependabot…

When rolling out code scanning default setup at scale (e.g., via code security configurations), GitHub checks if an advanced CodeQL setup already exists for each repository. If an advanced setup…

In June, we released a number of improvements to the GitHub Mobile apps, mostly focusing on accessibility and enhancing existing features. iOS You can now navigate to GitHub URLs by…