Search results for: Security

A two-part story about how GitHub’s Product Security Engineering team rolled out Dependabot internally to track vulnerable dependencies, and how GitHub tracks and prioritizes technical debt.

Secret scanning alert events now in the audit log

Each month, we highlight open source projects that have shipped major updates. These include everything from world-changing technology to developer tooling, and weekend projects. Here are our top staff picks…

With innersource, it’s important to measure both the amount of innersource activity and the quality of the code being created. Here’s how.

The innersource contribution percentage is the rate of contributions from people outside the team that originally authored the software. Let’s dive into what it can look like for your organization.

Dependabot alerts show all affected files for vulnerable function calls (Python Beta)

ISO/IEC 27001:2013 Certification Now Available

GitHub’s Information Security Management System (ISMS) has been certified against ISO 27001:2013, an internationally recognized standard for security program best practices.

View Dependabot alerts across the enterprise

DigitalOcean is now a GitHub secret scanning partner

Secret scanning: Dry runs for enterprise-level custom patterns

Introduction Open Sauced, GitHub’s Explore page, Hacktoberfest, and First Timers Only help folks discover open source projects. This monthly series–Open Source Monthly—will add to these efforts by helping: First-time contributors…

The GitHub Enterprise Server 3.5 Release Candidate is available

Dependabot keeps `@types` dependencies in sync with updated packages

Enhanced 2FA experience for npm accounts: public beta

Late last year, in response to an unprecedented series of account takeovers resulting from the compromise of developer accounts without 2FA enabled, we committed to a variety of enhancements to…

You can now output and group custom Markdown content on the Actions run summary page.

Teachers, it is now your turn to join GitHub Global Campus with our student community! Get access to exclusive benefits, programs, and the Power of Codespaces at no cost in GitHub Classroom!

This is the second and final post in a series describing friendly forks and alternative strategies for managing them.

Secret scanning now prevents secret leaks in web commits

These days software is subject to an ever-changing threat landscape. Check out the many ways you can keep your projects secure on GitHub today.