Search results for: Security

Five actionable tips and strategies to supercharge developer happiness—and a more innovative workplace.

In this post, I’ll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

The secret scanning metrics page within an organization’s “Security” tab now includes metrics for push protection bypass requests. If an organization uses delegated bypass controls for push protection, the following…

The GitHub Enterprise Server 3.14 release candidate is here GitHub Enterprise Server 3.14 gives customers enhanced deployment requirements and security controls. Here are a few highlights in the 3.14 release:…

We’re excited to introduce a new security feature in GitHub Mobile: app lock via biometrics. This adds an extra layer of security, ensuring only you can access your GitHub account…

Secret scanning alerts for non-provider patterns and generic passwords can now be retrieved using the REST API. With the “List secret scanning alerts” endpoint for an enterprise, organization, or repository,…

March 20, 2025 update To clarify the exact impact of this change, we’ve updated the title and the wording we used in this changelog. Previously it was titled “Enterprise Managed…

We are enabling the rise of the AI engineer with GitHub Models–bringing the power of industry leading large and small language models to our more than 100 million users directly on GitHub.

Copilot Chat and pull request summary generation now use GPT-4o, bringing the performance of OpenAI’s latest flagship model to all developers. Copilot Chat is available in Visual Studio, VS Code,…

Learn how we’re experimenting with open source AI models to systematically incorporate customer feedback to supercharge our product roadmaps.

Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.

To create a comprehensive model of the dependencies in a Maven project, it is essential to understand the the transitive dependencies that are resolved at build-time. This feature automatically performs…

Teams with neurodivergent employees can be up to 30 percent more productive. Discover tips on how best to support them in your workplace.

CodeQL is the static analysis engine that powers GitHub code scanning. CodeQL version 2.18.1 has been released and has now been rolled out to code scanning users on GitHub.com. Important…

Meet each maintainer, watch their project demos, and discover the unique story of each open source AI project.

GitHub Advanced Security customers using secret scanning can now use the REST API to enable or disable support for non-provider patterns at the repository level. Non-provider patterns scans for token…

GitHub Staff Engineer Sarah Vessels discusses her philosophy of code review, what separates good code review from bad, her strategy for finding and reviewing code, and how to get the most from reviews of her own code.

In this blog post, we’ll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.

Secret scanning now detects generic passwords using AI. Passwords are difficult to find with custom patterns — the AI-powered detection offers greater precision for unstructured credentials that can cause security…

Secret scanning now helps you more easily define custom patterns with GitHub Copilot. Generally available as of today, you can now leverage AI to generate custom patterns without expert knowledge…

Code scanning autofix for alerts in default branch is now available in public beta for all GitHub Advanced Security customers. This feature empowers developers to reduce the time and effort…