Search results for: repository

A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives.

GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, our scans help prevent data leaks and fraud. We have partnered…

GitHub Advanced Security customers can now enable validity checks for supported partner patterns in their repository, organization, or enterprise level code security settings. When you enable the checkbox in your…

GitHub secret scanning protects users by searching repositories for known types of secrets. By identifying and flagging these secrets, our scans help prevent data leaks and fraud. We have partnered…

Fine-grained PATs can now call the GitHub GraphQL API. This was a limitation at the start of the public beta, and is now supported. Like with the REST API, the…

You can now create new repositories with pre-filled form fields, making it even easier to define the right info for your new repos from the start. There are a number…

Learn some tips, tricks, and tools for mastering the command line from GitHub’s own developers.

The macOS 13 (Ventura) beta runner image is now available for GitHub-hosted macOS runners. You can try it today by setting the runs-on: key to macos-13 or macos-13-xl in your…

Codespaces has a number of new features to get you coding fast, from anywhere on the web, with a single click. Let’s jump right in! Recommended Secrets You can now…

When editing a file on github.com, repo admins, actors with the bypass branch protections permissions, and actors in bypass lists on branch protections will now default to creating a new…

As we work towards general availability of pull request merge queue, we want to thank everyone that has provided feedback ❤ (keep it coming!) and let you know about some…

Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities.

How to verifiably link npm packages to their source repository and build instructions.

You can now use the REST API to open a private vulnerability report on open-source repositories that have this feature enabled. Learn more about the repository security advisories REST API

Available in public beta today, the security coverage page now includes multi-repository enablement, which lets you enable or disable security features across several repositories at once. This feature improves upon…

Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know.

When changes in a repository make a Dependabot pull request out-of-date, Dependabot will automatically rebase it so that it is able to be merged without your manual effort. With this…

You can now fetch release notes, changelogs and commit history for Docker update pull requests with Dependabot. This will allow you to quickly evaluate the stability risk of the dependency…

How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries.

GitHub Advanced Security customers using secret scanning can now view any secrets exposed historically in an issue’s title, description, or comments within the UI or the REST API. This expanded…

Following our recent release of generating a software bill of materials from the repository’s dependency graph, you can now generate an SBOM for a repository using a new REST API…