Search results for: Security

CodeQL code scanning now supports Java 16 language features

CodeQL runner deprecation

During an audit of Apache Dubbo v2.7.8 source code, I found multiple vulnerabilities enabling attackers to compromise and run arbitrary system commands on both Dubbo consumers and providers. In this blog post I detailed how I leveraged CodeQL as an audit oracle to help me find these issues.

Secret scanning: user-defined patterns now support editing

If you’re a GitHub Enterprise Cloud customer, you can now set up a stream of audit log and Git events to Splunk or an Azure Event Hub.

Contributed Systems is now a GitHub secret scanning partner

What did we ship in August? Codespaces, Discussions, and lots of other updates, from the general availability of the dark high contrast theme to an auto-generated table of contents for wikis.

View secret scanning alerts across an organization

The GitHub Enterprise Server 3.2 Release Candidate is available

How GitHub uses code scanning to increase developer happiness, and how you can too.

The end of financial year is complete, tax time is over, and everyone is back to shipping awesome projects. During August, our community has been super busy shipping lots of…

Calling all students! Get the most out of your GitHub Education experience by joining the GitHub student community on our new digital campus.

We’re reporting on a six-month period rather than annually to increase our level of transparency. For this report, we’ve added more granularity to our 2020 stats.

Secret scanning org-level REST API

PlanetScale is now a GitHub secret scanning partner

Beginning October 4, 2021, all connections to npm websites and the npm registry, including for package installation, must use TLS 1.2 or higher.

The open source Git project just released Git 2.33, with features and bug fixes from over 74 contributors. Here’s a look at some of the most interesting features and changes.

The benefits of multifactor authentication are widely documented, and there are a number of options for using 2FA on GitHub.

A public beta for CodeQL package manager, additional options to manage Actions runs from first-time contributors, GitHub Discussions translation, and more.

GitHub Actions: Self-hosted runner events are now included in the Audit Log

Dependabot Preview is shutting down