
GitHub’s commitment to npm ecosystem security
We’re sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
We’re sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm.
What an incredible month it’s been for GitHub and our communities. Whilst we’ve been busy with GitHub Universe, our communities have been busy coding. It’s been a successful year for…
During Universe, we received a number of security questions ranging from our strategy to our advisories. Here’s what we’ve got planned!
You can now specify input types for manually triggered workflows allowing you to provide a better experience to users of your workflow. In addition to the default string type, we…
Here are a few ways our teams use GitHub Discussions internally to build community, simplify workflows, and get key insights into our work.
The new sparse index feature makes it feel like you are working in a small repository when working in a focused portion of a monorepo.
Actions written in YAML, also known as composite actions, now support if conditionals. This lets you prevent specific steps from executing unless a condition has been met. Like steps defined…
Tips on how to get started using GitHub Actions and resources to learn more about making it work for you.
This morning, I shared the following post with Hubbers in response to Nat’s announcement about his next adventure. I am thrilled to take on the role of CEO to build the next phase of GitHub for our global community of software developers.
This morning, I sent the following post to the GitHub team. TL;DR: I’m moving on to my next adventure, and Thomas Dohmke (currently Chief Product Officer) will be GitHub’s next CEO.
Users and organizations can now verify GitHub Pages domains to protect against takeover attacks. Learn more about verifying your custom domain for GitHub Pages For questions, visit the GitHub Pages…
The theme for this year’s Game Off is… …BUG! Your challenge, should you choose to accept it, is to create a game between now and December 1 incorporating the theme…
As an administrator of an organization, you can now moderate disruptive behavior in your community on the go. Tap Block from organization from a comment menu on an issue, pull…
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program: @yvvdwf
Maintainers can now limit who can approve and request changes on pull requests. You can also close issues and block users via your phone.
A command palette beta is now available for all users across github.com. Quickly navigate to your organizations and repositories, and use modes to find and jump-to pull requests, issues, projects,…
Ruby is the 10th most popular language within the open source community. To help more open source maintainers and organizations find potential vulnerabilities in their code, we’ve added Ruby support…
Since we introduced the new GitHub Issues earlier this year in a private beta, we’ve been working hard to expand access to all developers in order to make GitHub the…
Since last year’s GitHub Universe, we’ve shipped more than 20,000 improvements to GitHub for developers, open source communities, and enterprise teams. Here’s a comprehensive overview of what we’re announcing at Universe this week.
GitHub Actions can automate several common security and compliance tasks, even if your CI/CD pipeline is managed by another tool.
GitHub Marketplace just passed 10,000 published actions! Learn about contributing to this growing open source ecosystem.
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Last chance: Save $700 on your IRL pass to Universe and join us on Oct. 28-29 in San Francisco.