Enabling CodeQL analysis with code scanning default setup for eligible repositories in your organization is now as easy as a single click from the organization’s settings page or a single…
GitHub Security was notified about an issue where users still had access to organizations after being removed. Our Security team investigated potential instances and determined there were occasional instances where…
GitHub organization owners can now opt-in to a public beta to display organization members’ IP addresseses in audit logs events. When enabled, IP addresses will be displayed for all audit…
Organizations on github.com with an enterprise plan can now create 5 custom repository roles, an increase from the previous limit of 3. This increase will also appear in GitHub Enterprise…
Organization admins and security managers can now enable private vulnerability reporting for all public repositories within an organization at once. With this enhancement, you no longer have to enable the…
The GitHub Packages RubyGems registry now runs on a new architecture, unlocking great new capabilities: Publishing packages at organization level with GitHub Packages Previously, RubyGems packages published to GitHub Packages…
GitHub Enterprise Cloud admins can now display critical announcements to members of their enterprise or specific organizations. GitHub Enterprise Server already has this capability. With this enhancement, Enterprise Cloud admins…
Today, we are announcing public beta of required workflows in GitHub Actions 🎉 Required workflows allow DevOps teams to define and enforce standard CI/CD practices across many source code repositories…
You can now view (GET) the security feature enablement status for all repositories in your organization using the “list organization repositories” endpoint in the REST API for the following security…
GitHub Security was recently notified about a caching issue affecting npm. This bug had been present since 2016 and sporadically caused npm maintainers to be re-invited upon removal from packages…
The GitHub Packages NuGet registry now runs on a new architecture, unlocking great new capabilities: Publishing packages at organization level with GitHub Packages Previously, NuGet packages published to GitHub Packages…
The organization-level security overview page has been replaced by the risk and coverage views as previously announced and is no longer available. The risk view is designed to help you…
GitHub organizations can now use the code scanning organization-level API endpoint to retrieve code scanning alerts on public repositories; this no longer requires a GitHub Advanced Security license. This new…
You can now enable and disable the following GitHub security features for a single repository from the organization-level security coverage view: Dependency graph Dependabot alerts Dependabot security updates If you…
Whether you invite a user to an organization via the API or via our user interface, we are bringing enhancements to make this experience better. From today, you can: search…
Security overview’s new risk and coverage views provide greater visibility into your security posture and risk analysis. Each new view offers a refreshed design with several key improvements, including insights…
We recently released organization-level API support that enables administrators to programmatically manage their organization-owned codespaces at scale. Today we’re announcing that these APIs are generally available. With organization APIs providing…
GitHub Advanced Security customers using secret scanning can now specify a custom link via the organization level REST API that will show in the message when push protection detects and…
Organization administrators can now filter fine-grained personal access tokens (PATs) by their permissions in the organization settings UI. Both pending token requests and active tokens can be filtered by permission,…
On September 15, 2022, we fixed a bug on GitHub.com that allowed OAuth tokens (such as personal access tokens) to bypass SAML single sign-on (SSO) requirements to view organization issue…
Enterprise owners can now transfer organizations between GitHub Enterprise Cloud enterprise accounts that they own. This self-serve functionality removes the necessity of removing an organization from an enterprise account into…
Build what’s next on GitHub, the place for anyone from anywhere to build anything.
Last chance: Save $700 on your IRL pass to Universe and join us on Oct. 28-29 in San Francisco.
