Search results for: organization

You can now use the REST API to list and update push protection configurations for secret scanning patterns at the enterprise and organization levels. Push protection helps prevent secrets from…

New REST APIs for actions settings Today, GitHub Actions is launching new REST APIs for managing settings. The following settings are now accessible via these new endpoints: Approval for running…

We’re rolling out a new enterprise-level control for bring your own key (BYOK) in GitHub Models. This new control helps admins manage access to custom models across their organizations. Going…

Learn how to configure Copilot coding agent’s environment, optimize project structure, use custom instructions, and extend its capabilities with MCP servers.

As of today, npm trusted publishing with OpenID Connect (OIDC) is now generally available. This feature enables you to securely publish npm packages directly from CI/CD workflows using OpenID Connect…

On July 28, 2025 21:41 UTC, GitHub Enterprise Importer (GEI) was identified as being in a degraded state with migrations stalled. An incident was declared to restore the service to…

What’s new You can now dismiss or reopen multiple Dependabot alerts at once across your entire organization, making alert management more efficient for security and development teams. Previously, organization-level alert…

Build a custom Azure DevOps extension that eliminates the complexity of JWT generation and token management, enabling powerful automation and enhanced security controls.

Open source software is critical infrastructure, but it’s underfunded. With a new feasibility study, GitHub’s developer policy team is building a coalition of policymakers and industry to close the maintenance funding gap.

You can now grant permissions to GitHub Apps to review secret scanning push protection bypass requests and alert dismissal requests. This makes it easier for organizations to set up automated…

You can now choose a Not set option for GitHub Code Security features in your organization’s security configurations. Previously, you could only enable or disable features like code scanning and…

Organization administrators can now centrally configure private registries for Dependabot at the organization level, streamlining dependency management across all repositories. What’s new Previously, organizations had to individually configure private registry…

Enterprise and organization administrators can now download a new GitHub Copilot activity report that provides enhanced visibility into user authentication and feature adoption. This report improves upon the legacy usage…

We’re streamlining and enhancing Copilot code review! Upcoming features include moving from coding guidelines to copilot-instructions.md, making the Request pull request review from Copilot checkbox easier to find, and introducing…

Organizations using GitHub security configurations can now choose to require CodeQL to run on repositories using either default or advanced setup. Previously, if a repository was using advanced setup, you…

When it comes to merging code, developers will always make the final decision. But we’re rethinking how tools like GitHub Copilot can help.

You can now use Model Context Protocol (MCP) with GitHub Copilot in VS Code in production environments. MCP enables GitHub Copilot to access external tools and data sources, making your…

With GitHub Copilot coding agent, developers can tackle tech debt, fix bugs, and even implement new features at scale. Simply delegate tasks to Copilot, and let it work in the…

Ensuring quality code suggestions from Copilot goes beyond the perfect prompt. Context is key to success when working with your AI pair programmer.

We’re excited to announce that Copilot code review is now generally available in the GitHub Mobile app! Code review is a critical step in shipping high-quality software, but it can…