Search results for: repository

A deep dive on the work that went into making the component that powers repository and pull request file trees.

Explore our simple guide to finding projects, understanding guidelines, and making an impact.

This month, we’re highlighting two major updates to GitHub Mobile: repository forking and create a pull request! Repository forking Fork repositories directly from your devices, making it easier than ever…

Repository administrators and organization owners with a Copilot Business or Copilot Enterprise license can use content exclusions to configure Copilot in GitHub.com to ignore certain files. For example, ignore files…

Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.

Learn how to modernize legacy code with GitHub Copilot with real-world examples.

With this update, developers can review edited files and open a pull request from an existing branch anytime, anywhere, making your workflow smoother when moving between desktop and mobile. Simply…

Now in public preview, Linux arm64 hosted runners are available for free in public repositories. Following the release of arm64 larger hosted runners in June, this offering now extends to…

In December, we experienced two incidents that resulted in degraded performance across GitHub services.

GitHub uses GitHub to build GitHub, and our CLI extensions are no exception. Read on to find out how we built the GitHub Skyline CLI extension using GitHub!

Following our opt-in preview last year, we are excited to release sub-issues, issue types and advanced search for issues to everyone! 🎉 Thank you to everyone who opted-in and gave…

The open source Git project just released Git 2.48. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.

On December 13, 2023, we released CodeQL Action v3, which runs on the Node.js 20 runtime. In January 2024, we announced that CodeQL Action v2 would be retired at the…

In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours.

How Copilot can generate unit tests, refactor code, create documentation, perform multi-file edits, and much more.

Welcome to another week of Copilot Workspace updates! We have a bunch this week, so let’s jump right in! 🎉 Copilot Workspace Handling large files Workspace will now inform you…

To enhance auditing and troubleshooting, we’ve introduced new webhook and audit log events to track the completion of certain secret backfill scans on repositories. The events specify the type of…

An interview with economic researchers analyzing the causal effect of GitHub Copilot on how open source maintainers work.

Learn how GitHub Artifact Attestations can enhance your build security and help your organization achieve SLSA Level 3. This post breaks down the basics of SLSA, explains the importance of artifact attestations, and provides a step-by-step guide to securing your build process.

The Windows 2025 server image for GitHub Actions hosted runners is now available in public preview. To start using this image in your Actions workflows, update your workflow file to…

You can now more easily filter secret scanning alerts, with new filter options and advanced filtering. Enterprise and organization level list views now include a new menu with commonly used…