Search results for: organization

GitHub Advanced Security users can now filter their secret scanning alerts by validity in the UI at the repository, organization, and enterprise level. Valid statuses are active, inactive, or unknown.…

Users who are not part of the mandatory 2FA program will now be added to it within 24 hours of creating their first release. In August we expanded the 2FA…

GitHub Advanced Security users can now use the REST API to retrieve the validity status of a secret scanning token and retrieve all tokens of a particular validity status. The…

From starting at GitHub over 10 years ago as a developer to becoming the Chief Operating Officer, I’ve learned that developers are often bellwethers for change across the rest of their organizations. That makes investing in—and learning from—them critical.

Starting today, in Actions workflows, the pull_request_target trigger is now supported for repository rulesets that require a successful workflow run. This is in addition to pull_request and merge_group, making pull_request_target…

We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program—@Ammar Askar!

We’re excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Action to empower maintainers to measure how many new and returning contributors and contributions have occurred over any given time period.

Code scanning default setup now automatically attempts to analyze all CodeQL supported languages in a repository. This means default setup supports all CodeQL languages at the organization level, including enabling…

The effectiveness of a static application security solution hinges on its ability to provide extensive vulnerability coverage and support for a wide range of languages and frameworks. Today, we’re highlighting two releases that’ll help you discover more vulnerabilities in your codebase, so you can ship more secure software.

On December 21st, 2023 GitHub Codespaces plans to remove the deprecated Repository Access and Security setting. Rather than configuring cross-repository access at the account level, we now recommend declaring cross-repository…

Atlassian is ending support for its Server products—including Bitbucket Server—in February 2024. In this post, you’ll learn what that means for you, your options, and how you can move to GitHub.

Use our new open source Trace2 receiver component and OpenTelemetry to capture and visualize telemetry from your Git commands.

Need to roll back a change to a ruleset? How about easily moving your ruleset around? With today’s public beta you now have new tools to manage your ruleset. Import…

If you are a student from a U.S. minority-serving institution looking to start your journey into open source, join us!

Starting today, organization administrators can create custom properties to enrich repositories with valuable information. Using these properties, you can dynamically target repository rules to apply protections on just your production…

Requiring Actions workflows with Repository Rules is now generally available on GitHub.com! Through Repository Rules, GitHub Enterprise Cloud customers can now set up organization-wide rules to enforce their CI/CD workflows,…

GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories.

Findings show that code quality is better across the board and developers felt more confident, too.

We’re making changes to the IP addresses used by GitHub Enterprise Importer for outbound network connections. If you’re using GitHub Enterprise Importer to run migrations, you will need to add…

Repository rule insights now make finding more details about how someone merged specific code into your repos even easier. 🔍 Filter by status If you want only to see bypassed…

Learn more about how we use GitHub to build GitHub, how we turned our guiding communications principles into prescriptive practices to manage our internal communications signal-to-noise ratio, and how you can contribute to the ongoing conversation.