Show your appreciation to the open source projects you love. You can help provide much-needed support to the critical but often underfunded projects that keep your infrastructure running smoothly. And remember—every day is a perfect day to support open source! 💖
How GitHub’s Product Security Engineering team manages our CodeQL implementation at scale and how you can, too.
Discover how to use GitHub Copilot to refactor your code and see samples of it in action.
The partnership between GitHub and Endor Labs enables application security engineers and developers to drastically reduce time spent on open source vulnerabilities, and gives them the tools to go from finding to fixing.
Introducing agent mode for GitHub Copilot in VS Code, announcing the general availability of Copilot Edits, and providing a first look at our SWE agent.
In January, we experienced two incidents that resulted in degraded performance across GitHub services.
In December, we experienced two incidents that resulted in degraded performance across GitHub services.
An interview with economic researchers analyzing the causal effect of GitHub Copilot on how open source maintainers work.
We’re open sourcing Annotated Logger, a Python package that helps make logs searchable with consistent metadata.
How GitHub’s Product Security Engineering team manages our CodeQL implementation at scale and how you can, too.
A deep dive on the work that went into making the component that powers repository and pull request file trees.
The Performance Engineering team at GitHub assessed how CPU performance degrades as utilization increases and how this relates to capacity.
With this custom addon, you can ensure your workplace remains accessible to users with motion sensitivities while benefiting from Storybook’s Interactions.
In January, we experienced two incidents that resulted in degraded performance across GitHub services.
Introducing agent mode for GitHub Copilot in VS Code, announcing the general availability of Copilot Edits, and providing a first look at our SWE agent.
Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 & Q3 2024 data for the Innovation Graph.
Explore insights into open source community growth, innovation, and inclusivity with an updated survey dataset.
Introducing agent mode for GitHub Copilot in VS Code, announcing the general availability of Copilot Edits, and providing a first look at our SWE agent.
Discover how to use GitHub Copilot to refactor your code and see samples of it in action.
On March 13, we will officially begin rolling out our initiative to require all developers who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Read on to learn about what the process entails and how you can help secure the software supply chain with 2FA.
Today we’re announcing a big step in securing the open source supply chain: we’re welcoming Semmle to the GitHub.
A quick guide on the advantages of using GitHub Actions as your preferred CI/CD tool—and how to build a CI/CD pipeline with it.
In this year’s Octoverse report, we study how public and open source activity on GitHub shows how AI is expanding as the global developer community surges in size.
How GitHub’s Product Security Engineering team manages our CodeQL implementation at scale and how you can, too.
The partnership between GitHub and Endor Labs enables application security engineers and developers to drastically reduce time spent on open source vulnerabilities, and gives them the tools to go from finding to fixing.
Discover the exciting world of cybersecurity research: what researchers do, essential skills, and actionable steps to begin your journey toward protecting the digital world.
Learn how specially crafted artifacts can be used to attack Maven repository managers. This post describes PoC exploits that can lead to pre-auth remote code execution and poisoning of the local artifacts in Sonatype Nexus and JFrog Artifactory.
In the last few months, we secured 75+ GitHub Actions workflows in open source projects, disclosing 90+ different vulnerabilities. Out of this research we produced new support for workflows in CodeQL, empowering you to secure yours.
We are excited to introduce the new CodeQL Community Packs, a comprehensive set of queries and models designed to enhance…
In this post, I’ll walk you through the vulnerabilities I uncovered in the GStreamer library and how I built a custom fuzzing generator to target MP4 files.
Show your appreciation to the open source projects you love. You can help provide much-needed support to the critical but often underfunded projects that keep your infrastructure running smoothly. And remember—every day is a perfect day to support open source! 💖
Three open source experts offer their advice on sharing open source projects with the world.
Empowering humanitarian action with open source: A natural language search tool for UN Resolutions.
Explore our simple guide to finding projects, understanding guidelines, and making an impact.
A new set of Git releases were published to address a variety of security vulnerabilities. All users are encouraged to upgrade. Take a look at GitHub’s view of the latest round of releases.
Secrets spilled, discovered, and hidden again—Game Off 2024 brought over 500 jaw-dropping submissions that redefined creativity in gaming. From cult quests for free furniture to spellbinding mysteries, these games will have you hooked. Ready to uncover the winners?!?
The open source Git project just released Git 2.48. Here is GitHub's look at some of the most interesting features and changes introduced since last time.
We've tested integrating OpenAI o1-preview with GitHub Copilot. Here's a first look at where we think it can add value to your day to day.
In this third and last part, I’ll share the results of my research on Apache HTTP server, and I’ll show some of the vulnerabilities that I’ve found.