# Twtxt is an open, distributed microblogging platform that # uses human-readable text files, common transport protocols, # and free software. # # Learn more about twtxt at https://github.com/buckket/twtxt # # This is an automated Yarn.social feed running feeds v0.1.0@72e53a9 # Learn more about Yarn.social at https://yarn.social # # nick = github_blog # url = https://feeds.twtxt.net/github_blog/twtxt.txt # type = rss # source = https://github.blog/all.atom # avatar = https://feeds.twtxt.net/github_blog/avatar.png#qthzd4mqu3p6rjiuixc6hvicp6dk64bi5iyvc4hygl3mpzfq3wjq # description = The Github Blog # updated_at = 2024-04-18T17:47:02Z # 2020-07-09T01:52:51Z Introducing the GitHub Availability Report ⌘ https://github.blog/2020-07-08-introducing-the-github-availability-report/ 2020-07-09T01:52:51Z GitHub Action Hero: Casey Lee ⌘ https://github.blog/2020-07-03-github-action-hero-casey-lee/ 2020-07-09T01:52:51Z How we launched docs.github.com ⌘ https://github.blog/2020-07-02-how-we-launched-docs-github-com/ 2020-07-09T01:52:51Z Git Credential Manager Core: Building a universal authentication experience ⌘ https://github.blog/2020-07-02-git-credential-manager-core-building-a-universal-authentication-experience/ 2020-07-09T01:52:51Z GitHub Supports the Open Technology Fund ⌘ https://github.blog/2020-07-02-github-supports-the-open-technology-fund/ 2020-07-09T01:52:51Z Launching docs.github.com ⌘ https://github.blog/2020-07-01-launching-docs-github-com/ 2020-07-09T01:52:51Z Looking back on the GitHub Security Lab Capture The Flag: CodeQL and chill ⌘ https://github.blog/2020-06-30-looking-back-on-the-github-security-lab-capture-the-flag-codeql-and-chill/ 2020-07-09T01:52:51Z Remote work: Reshaping the workplace experience ⌘ https://github.blog/2020-06-26-remote-work-reshaping-the-workplace-experience/ 2020-07-09T01:52:51Z GitHub Action Hero: Victoria Drake ⌘ https://github.blog/2020-06-26-github-action-hero-victoria-drake/ 2020-07-09T01:52:51Z GitHub Enterprise Server 2.21 is here ⌘ https://github.blog/2020-06-25-github-enterprise-server-2-21-is-here/ 2020-07-09T21:10:38Z What we learned from building an industry coalition ⌘ https://github.blog/2020-07-09-what-we-learned-from-building-an-industry-coalition/ 2020-07-10T15:32:48Z GitHub Action Hero: Jeremy Shore ⌘ https://github.blog/2020-07-10-github-action-hero-jeremy-shore/ 2020-07-15T13:10:56Z How organizations can tackle securing the world’s code ⌘ https://github.blog/2020-07-15-how-organizations-can-tackle-securing-the-worlds-code/ 2020-07-16T16:05:25Z GitHub Archive Program: the journey of the world’s open source code to the Arctic ⌘ https://github.blog/2020-07-16-github-archive-program-the-journey-of-the-worlds-open-source-code-to-the-arctic/ 2020-07-16T18:00:00Z Securing your open source dependencies with GitHub dependency insights ⌘ https://github.blog/2020-07-16-securing-your-open-source-dependencies-with-github-dependency-insights/ 2020-07-17T15:00:44Z GitHub Action Hero: Nikita Sobolev ⌘ https://github.blog/2020-07-17-github-action-hero-nikita-sobolev/ 2020-07-20T15:33:30Z Hardening your GitHub Enterprise Server ⌘ https://github.blog/2020-07-20-hardening-your-github-enterprise-server/ 2020-07-23T17:00:54Z Safeguarding trans-Atlantic developer collaboration ⌘ https://github.blog/2020-07-23-safeguarding-trans-atlantic-developer-collaboration/ 2020-07-23T22:00:08Z How to secure your GitHub organization and enterprise account ⌘ https://github.blog/2020-07-23-how-to-secure-your-github-organization-and-enterprise-account/ 2020-07-24T08:08:24Z GitHub Action Hero: Samson Amaugo ⌘ https://github.blog/2020-07-24-github-action-hero-samson-amaugo/ 2020-07-27T16:00:07Z Introducing GitHub’s OpenAPI Description ⌘ https://github.blog/2020-07-27-introducing-githubs-openapi-description/ 2020-07-27T16:50:05Z Highlights from Git 2.28 ⌘ https://github.blog/2020-07-27-highlights-from-git-2-28/ 2020-07-28T15:57:32Z Announcing the GitHub public roadmap ⌘ https://github.blog/2020-07-28-announcing-the-github-public-roadmap/ 2020-07-28T18:26:31Z Welcome Malta and Cyprus to GitHub Sponsors—plus updates! ⌘ https://github.blog/2020-07-28-welcome-malta-and-cyprus-to-github-sponsors-plus-updates/ 2020-07-29T19:00:06Z Using GitHub Actions to deploy applications to IBM Cloud Kubernetes Service ⌘ https://github.blog/2020-07-29-use-github-actions-to-deploy-your-application-to-ibm-cloud-kubernetes-service/ 2020-07-30T16:07:21Z Maintainer spotlight: How to secure your project with one of the world’s top open source tools ⌘ https://github.blog/2020-07-30-maintainer-spotlight-how-to-secure-your-project-with-one-of-the-worlds-top-open-source-tools/ 2020-07-30T19:18:50Z Token authentication requirements for API and Git operations ⌘ https://github.blog/2020-07-30-token-authentication-requirements-for-api-and-git-operations/ 2020-07-31T17:26:26Z GitHub Action Hero: Swechhya Bista ⌘ https://github.blog/2020-07-31-github-action-hero-swechhya-bista/ 2020-08-03T15:00:45Z GitHub joins the Open Source Security Foundation ⌘ https://github.blog/2020-08-03-github-joins-the-open-source-security-foundation/ 2020-08-03T18:07:08Z GitHub Actions improvements for fork and pull request workflows ⌘ https://github.blog/2020-08-03-github-actions-improvements-for-fork-and-pull-request-workflows/ 2020-08-04T14:45:41Z CodeGen: Semantic’s improved language support system ⌘ https://github.blog/2020-08-04-codegen-semantics-improved-language-support-system/ 2020-08-04T15:35:57Z GitHub Actions self-hosted runners on Google Cloud ⌘ https://github.blog/2020-08-04-github-actions-self-hosted-runners-on-google-cloud/ 2020-08-04T22:11:41Z Secure at every step: How GitHub’s dependency graph is generated ⌘ https://github.blog/2020-08-04-secure-at-every-step-how-githubs-dependency-graph-is-generated/ 2020-08-05T16:00:54Z GitHub Availability Report: July 2020 ⌘ https://github.blog/2020-08-05-github-availability-report-july-2020/ 2020-08-05T19:16:46Z GitHub Actions: Enterprise runners and fine-grained access settings with runner groups ⌘ https://github.blog/2020-08-05-github-actions-enterprise-runners-and-fine-grained-access-settings-with-runner-groups/ 2020-08-06T15:05:55Z Achieving DevSecOps maturity with a developer-first, community driven approach ⌘ https://github.blog/2020-08-06-achieving-devsecops-maturity-with-a-developer-first-community-driven-approach/ 2020-08-06T15:00:52Z GMTK Game Jam 2020 – staff picks ⌘ https://github.blog/2020-08-06-gmtk-game-jam-2020-staff-picks-open-source-games/ 2020-08-07T21:42:35Z GitHub Action Hero – Daniel Dennis ⌘ https://github.blog/2020-08-07-github-action-hero-daniel-dennis/ 2020-08-07T22:34:14Z Remote work: Sharing tips for leading in a remote world ⌘ https://github.blog/2020-08-07-remote-work-sharing-tips-for-leading-in-a-remote-world/ 2020-08-11T12:00:29Z GitHub ¡Presente! na América Latina ⌘ https://github.blog/2020-08-11-github-presente-na-america-latina/ 2020-08-13T17:00:30Z Why Write ADRs ⌘ https://github.blog/2020-08-13-why-write-adrs/ 2020-08-13T17:51:41Z Secure at every step: A guide to DevSecOps, shifting left, and GitOps ⌘ https://github.blog/2020-08-13-secure-at-every-step-a-guide-to-devsecops-shifting-left-and-gitops/ 2020-08-14T06:26:08Z Karuna 2020: Using GitHub Actions in the COVID-19 response efforts ⌘ https://github.blog/2020-08-13-github-actions-karuna/ 2020-08-18T15:00:11Z Introducing the Rally + GitHub integration ⌘ https://github.blog/2020-08-18-introducing-the-rally-github-integration/ 2020-08-20T16:00:33Z Introducing The ReadME Project ⌘ https://github.blog/2020-08-20-readme-project/ 2020-08-21T16:00:41Z Maintainer spotlight: Managing dependencies and the Metasploit pen testing toolkit ⌘ https://github.blog/2020-08-21-maintainer-spotlight-managing-dependencies-and-the-metasploit-pen-testing-toolkit/ 2020-08-21T21:53:50Z GitHub Action Hero: Keirron Stach ⌘ https://github.blog/2020-08-21-github-action-hero-keirron-stach/ 2020-08-24T16:00:53Z Automate releases and more with the new Sentry Release GitHub Action ⌘ https://github.blog/2020-08-24-automate-releases-and-more-with-the-new-sentry-release-github-action/ 2020-08-25T15:00:00Z Upgrading GitHub to Ruby 2.7 ⌘ https://github.blog/2020-08-25-upgrading-github-to-ruby-2-7/ 2020-08-27T03:52:29Z Adacats Mentorship Program: A growth journey ⌘ https://github.blog/2020-08-26-adacats-mentorship-program/ 2020-08-27T15:00:24Z Secure at every step: Putting DevSecOps into practice with code scanning ⌘ https://github.blog/2020-08-27-secure-at-every-step-putting-devsecops-into-practice-with-code-scanning/ 2020-08-31T01:52:00Z GitHub Action Hero: Eddie Jaoude ⌘ https://github.blog/2020-08-30-github-action-hero-eddie-jaoude/ 2020-09-01T15:00:47Z Ready to vote in the U.S. 2020 elections? ⌘ https://github.blog/2020-09-01-ready-to-vote-in-the-u-s-2020-elections/ 2020-09-01T17:00:40Z Introducing GitHub Container Registry ⌘ https://github.blog/2020-09-01-introducing-github-container-registry/ 2020-09-02T16:00:11Z GitHub Availability Report: August 2020 ⌘ https://github.blog/2020-09-02-github-availability-report-august-2020/ 2020-09-02T17:58:11Z Secure at every step: What is software supply chain security and why does it matter? ⌘ https://github.blog/2020-09-02-secure-your-software-supply-chain-and-protect-against-supply-chain-threats-github-blog/ 2020-09-03T16:00:53Z Introducing the GitHub Stars Program ⭐️ ⌘ https://github.blog/2020-09-03-introducing-the-github-stars-program/ 2020-09-04T04:07:22Z GitHub Africa Virtual Meetup ⌘ https://github.blog/2020-09-03-github-africa-virtual-meetup/ 2020-09-04T18:16:17Z Release Radar · September 2020 Edition ⌘ https://github.blog/2020-09-04-release-radar-september-2020-edition/ 2020-09-10T15:00:23Z Remote Education: A series of best practices for online campus communities ⌘ https://github.blog/2020-09-10-remote-education-a-series-of-best-practices-for-online-campus-communities/ 2020-09-10T16:00:46Z Announcing the GitHub integration with Microsoft Teams ⌘ https://github.blog/2020-09-10-announcing-the-github-integration-with-microsoft-teams/ 2020-09-16T16:06:32Z Ensure your neighbors have the right to vote: A software engineer volunteers at his local elections office ⌘ https://github.blog/2020-09-16-ensure-your-neighbors-have-the-right-to-vote-a-software-engineer-volunteers-at-a-local-elections-office/ 2020-09-17T13:00:49Z GitHub CLI 1.0 is now available ⌘ https://github.blog/2020-09-17-github-cli-1-0-is-now-available/ 2020-09-17T19:28:48Z We are excited to announce our next event for Latin America, GitHub ¡Presente! In Spanish ⌘ https://github.blog/2020-09-17-we-are-excited-to-announce-our-next-event-for-latin-america-github-presente-in-spanish/ 2020-09-17T23:00:58Z GitHub Action Hero: Stefan Zweifel and “git-auto-commit” ⌘ https://github.blog/2020-09-17-github-action-hero-stefan-zweifel-and-git-auto-commit/ 2020-09-18T23:24:36Z Join us for OctogatosConf ⌘ https://github.blog/2020-09-18-join-us-for-octogatosconf/ 2020-09-23T16:00:21Z GitHub Mobile and GraphQL ⌘ https://github.blog/2020-09-23-github-mobile-and-graphql/ 2020-09-23T18:30:50Z A better logs experience with GitHub Actions ⌘ https://github.blog/2020-09-23-a-better-logs-experience-with-github-actions/ 2020-09-23T19:01:33Z GitHub Enterprise Server 2.22 is here ⌘ https://github.blog/2020-09-23-github-enterprise-server-2-22/ 2020-09-24T16:00:22Z GitHub India Virtual Meetup – Open Source & Hacktoberfest ⌘ https://github.blog/2020-09-24-github-india-virtual-meetup-open-source-hacktoberfest/ 2020-09-24T16:00:13Z Lightning Q&A: DevSecOps in five with Maya Kaczorowski ⌘ https://github.blog/2020-09-24-lightning-qa-devsecops-in-five-with-maya-kaczorowski/ 2020-09-24T19:00:35Z Remote Education: Creating community through shared experiences ⌘ https://github.blog/2020-09-24-remote-education-creating-community-through-shared-experiences/ 2020-09-25T08:49:23Z GitHub Action Hero · James Ives and “GitHub Pages Deploy” ⌘ https://github.blog/2020-09-25-github-action-hero-james-ives-and-github-pages-deploy/ 2020-09-25T15:00:43Z Phishing Resistant SMS Autofill ⌘ https://github.blog/2020-09-25-phishing-resistant-sms-autofill/ 2020-09-30T16:00:07Z Code scanning is now available! ⌘ https://github.blog/2020-09-30-code-scanning-is-now-available/ 2020-09-30T17:00:11Z GitHub Welcomes the OpenJDK Project! ⌘ https://github.blog/2020-09-30-github-welcomes-the-openjdk-project/ 2020-10-01T16:00:57Z Keeping your data pipelines healthy with the Great Expectations GitHub Action ⌘ https://github.blog/2020-10-01-keeping-your-data-pipelines-healthy-with-the-great-expectations-github-action/ 2020-10-05T04:41:46Z GitHub Action Hero: Shivam Mathur and “Setup PHP” ⌘ https://github.blog/2020-10-04-github-action-hero-shivam-mathur-and-setup-php/ 2020-10-05T16:00:25Z Announcing third-party code scanning tools: static analysis & developer security training ⌘ https://github.blog/2020-10-05-announcing-third-party-code-scanning-tools-static-analysis-and-developer-security-training/ 2020-10-06T02:04:44Z Fine-tune access to external actions ⌘ https://github.blog/2020-10-05-fine-tune-access-to-external-actions/ 2020-10-06T22:04:42Z Safe harbors for software collaboration, part 1 ⌘ https://github.blog/2020-10-06-safe-harbors-for-software-collaboration-part-1/ 2020-10-07T08:00:20Z Announcing third-party code scanning tools: infrastructure as code and container scanning ⌘ https://github.blog/2020-10-07-announcing-third-party-code-scanning-tools-infrastructure-as-code-and-container-scanning/ 2020-10-07T16:00:42Z What is DevOps? A guide to common methods and misconceptions ⌘ https://github.blog/2020-10-07-devops-definition/ 2020-10-07T16:31:58Z GitHub Availability Report: September 2020 ⌘ https://github.blog/2020-10-07-github-availability-report-september-2020/ 2020-10-09T16:00:20Z Testing cloud apps with GitHub Actions and cloud-native open source tools ⌘ https://github.blog/2020-10-09-devops-cloud-testing/ 2020-10-09T21:00:37Z Release Radar · October 2020 Edition ⌘ https://github.blog/2020-10-09-release-radar-october-2020-edition/ 2020-10-12T05:00:28Z Top 10 games from the JS13K 2020 competition 🕹 ⌘ https://github.blog/2020-10-11-top-ten-games-from-the-js13k-2020-competition/ 2020-10-13T16:00:22Z Presenting v7.0.0 of the npm CLI ⌘ https://github.blog/2020-10-13-presenting-v7-0-0-of-the-npm-cli/ 2020-10-14T13:00:07Z Even better code review in GitHub for mobile ⌘ https://github.blog/2020-10-14-even-better-code-review-in-github-for-mobile/ 2020-10-14T16:53:48Z How we open sourced docs.github.com ⌘ https://github.blog/2020-10-14-how-we-open-sourced-docs-github-com/ 2020-10-15T16:00:30Z Pachyderm and the power of GitHub Actions: MLOps meets DevOps ⌘ https://github.blog/2020-10-15-pachyderm-and-the-power-of-github-actions-mlops-meets-devops/ 2020-10-15T17:00:21Z How to get your organization started with containerized deployments ⌘ https://github.blog/2020-10-15-how-to-get-your-organization-started-with-containerized-deployments/ 2020-10-15T18:00:14Z Standing by developers through Google v. Oracle ⌘ https://github.blog/2020-10-15-standing-by-developers-through-google-v-oracle/ 2020-10-15T19:00:31Z Try something new at Local Hack Day: Learn ⌘ https://github.blog/2020-10-15-try-something-new-at-local-hack-day-learn/ 2020-10-15T21:57:24Z Updates to our Terms of Service and Privacy Statement ⌘ https://github.blog/2020-10-15-updates-to-our-terms-of-service-and-our-privacy-statement/ 2020-10-19T13:00:29Z GitHub Planeta Virtual Meetup ⌘ https://github.blog/2020-10-19-github-planeta-virtual-meetup/ 2020-10-19T16:44:04Z Git 2.29 highlights ⌘ https://github.blog/2020-10-19-git-2-29-released/ 2020-10-20T17:46:41Z A Journey of Diversity, Inclusion, and Belonging at GitHub ⌘ https://github.blog/2020-10-20-a-journey-of-diversity-inclusion-and-belonging-at-github/ 2020-10-21T16:00:25Z Diversity, inclusion, and belonging at GitHub in 2020 ⌘ https://github.blog/2020-10-21-diversity-inclusion-and-belonging-at-github-in-2020/ 2020-10-21T17:10:41Z Hacktoberfest e GitHub ¡Presente!: celebrando comunidades open source em outubro ⌘ https://github.blog/2020-10-21-hacktoberfest-e-github-presente-celebrando-comunidades-open-source-em-outubro/ 2020-10-22T16:00:54Z Introducing the npm public roadmap and a new feedback process ⌘ https://github.blog/2020-10-22-introducing-the-npm-public-roadmap-and-a-new-feedback-process/ 2020-10-22T20:00:07Z Vote, and contribute to democracy through open source ⌘ https://github.blog/2020-10-22-vote-and-contribute-to-democracy-through-open-source/ 2020-10-22T20:07:50Z DevOps best practices Q&A: Automated deployments at GitHub ⌘ https://github.blog/2020-10-22-devops-best-practices-qa-automated-deployments-at-github/ 2020-10-27T19:17:21Z 2020 GitHub Universe Micro-Mentoring Application ⌘ https://github.blog/2020-10-27-2020-github-universe-micro-mentoring-application/ 2020-10-27T19:00:11Z Code Scanning a GitHub Repository using GitHub Advanced Security within an Azure DevOps Pipeline ⌘ https://github.blog/2020-10-27-code-scanning-a-github-repository-using-github-advanced-security-within-an-azure-devops-pipeline/ 2020-10-27T19:30:18Z Build a game this November with GitHub Game Off ⌘ https://github.blog/2020-10-27-github-game-off-2020/ 2020-10-29T15:00:04Z Making GitHub CI workflow 3x faster ⌘ https://github.blog/2020-10-29-making-github-ci-workflow-3x-faster/ 2020-10-29T15:00:00Z Building GitHub: introduction ⌘ https://github.blog/2020-10-29-building-github-introduction/ 2020-10-29T16:00:16Z Getting started with DevOps automation ⌘ https://github.blog/2020-10-29-getting-started-with-devops-automation/ 2020-10-30T05:32:08Z GitHub Action Hero: Eyal Posener and “Go Action” ⌘ https://github.blog/2020-10-29-github-action-hero-eyal-posener-and-go-action/ 2020-10-30T07:01:21Z 13 ghoulish games to play, hack and slash this weekend 👻 ⌘ https://github.blog/2020-10-30-13-ghoulish-games-to-play-hack-and-slash-this-weekend/ 2020-11-01T21:35:22Z GitHub Game Off 2020 theme announcement ⌘ https://github.blog/2020-11-01-github-game-off-2020-theme-announcement/ 2020-11-02T13:00:45Z Commit your vote on election day! ⌘ https://github.blog/2020-11-02-commit-your-vote-on-election-day/ 2020-11-04T17:30:43Z GitHub Availability Report: October 2020 ⌘ https://github.blog/2020-11-04-github-availability-report-october-2020/ 2020-11-11T14:00:17Z Veterans Day spotlight: Finding careers and camaraderie through code ⌘ https://github.blog/2020-11-11-veterans-day-spotlight-finding-careers-and-camaraderie-through-code/ 2020-11-16T15:52:15Z Standing up for developers: youtube-dl is back ⌘ https://github.blog/2020-11-16-standing-up-for-developers-youtube-dl-is-back/ 2020-11-16T22:26:17Z Release Radar · November 2020 Edition ⌘ https://github.blog/2020-11-16-release-radar-nov-2020/ 2020-11-17T01:00:19Z Updates to our Terms of Service and Privacy Statement now merged ⌘ https://github.blog/2020-11-16-updates-to-our-terms-of-service-and-privacy-statement-now-merged/ 2020-11-17T17:00:57Z Introducing split diffs in GitHub Desktop ⌘ https://github.blog/2020-11-17-introducing-split-diffs-in-github-desktop/ 2020-11-19T14:00:08Z GitHub Archive Program: Making the archives beautiful ⌘ https://github.blog/2020-11-19-github-archive-program-making-the-archives-beautiful/ 2020-11-19T19:00:51Z Take action: DMCA anti-circumvention and developer innovation ⌘ https://github.blog/2020-11-19-take-action-dmca-anti-circumvention-and-developer-innovation/ 2020-11-20T09:00:36Z Whatcha watchin’? Custom notification controls ⌘ https://github.blog/2020-11-20-whatcha-watchin-custom-notification-controls/ 2020-11-20T17:00:15Z Nbdev: A literate programming environment that democratizes software engineering best practices ⌘ https://github.blog/2020-11-20-nbdev-a-literate-programming-environment-that-democratizes-software-engineering-best-practices/ 2020-12-01T16:30:45Z The ReadME Project shares innovative paths to DevOps success ⌘ https://github.blog/2020-12-01-devops-success-readme/ 2020-12-02T18:00:03Z The State of the Octoverse 2020 ⌘ https://github.blog/2020-12-02-the-state-of-the-octoverse-2020/ 2020-12-02T21:00:31Z GitHub Availability Report: November 2020 ⌘ https://github.blog/2020-12-02-availability-report-november-2020/ 2020-12-03T14:00:44Z Join our panel with WHO at GitHub Universe 2020! ⌘ https://github.blog/2020-12-03-join-our-panel-with-who-at-github-universe-2020/ 2020-12-03T16:00:23Z Improving the GHES release process: release candidates ⌘ https://github.blog/2020-12-03-improving-the-ghes-release-process-release-candidates/ 2020-12-03T17:00:27Z The evolving role of operations in DevOps ⌘ https://github.blog/2020-12-03-the-evolving-role-of-operations-in-devops/ 2020-12-03T22:59:50Z Applying DevSecOps to your software supply chain ⌘ https://github.blog/2020-12-03-applying-devsecops-to-your-software-supply-chain/ 2020-12-04T17:00:38Z Your DevOps guide to GitHub Universe ⌘ https://github.blog/2020-12-04-your-devops-guide-to-github-universe/ 2020-12-07T18:00:16Z Release Radar · December 2020 Edition ⌘ https://github.blog/2020-12-07-release-radar-dec-2020/ 2020-12-08T17:15:04Z New from Universe 2020: Dark mode, GitHub Sponsors for companies, and more ⌘ https://github.blog/2020-12-08-new-from-universe-2020-dark-mode-github-sponsors-for-companies-and-more/ 2020-12-09T17:26:07Z GitHub in the enterprise ⌘ https://github.blog/2020-12-09-github-in-the-enterprise/ 2020-12-09T17:25:33Z Building together: GitHub partner ecosystem continues to grow ⌘ https://github.blog/2020-12-09-building-together-github-partner-ecosystem-continues-to-grow/ 2020-12-10T17:40:40Z Introducing the New (and Improved!) Campus Experts Program ⌘ https://github.blog/2020-12-10-introducing-the-new-and-improved-campus-experts-program/ 2020-12-10T19:20:28Z Introducing the new Campus Advisors program ⌘ https://github.blog/2020-12-10-introducing-the-new-campus-advisors-program/ 2020-12-14T17:58:59Z Inspired by Open Source: Balanced Employee Intellectual Property Agreement 2.0 ⌘ https://github.blog/2020-12-14-inspired-by-open-source-balanced-employee-intellectual-property-agreement-2-0/ 2020-12-15T18:14:49Z Encapsulating Ruby on Rails views ⌘ https://github.blog/2020-12-15-encapsulating-ruby-on-rails-views/ 2020-12-15T20:28:51Z Token authentication requirements for Git operations ⌘ https://github.blog/2020-12-15-token-authentication-requirements-for-git-operations/ 2020-12-16T16:00:56Z Reducing flaky builds by 18x ⌘ https://github.blog/2020-12-16-reducing-flaky-builds-by-18x/ 2020-12-17T17:00:53Z No cookie for you ⌘ https://github.blog/2020-12-17-no-cookie-for-you/ 2020-12-17T18:00:46Z Commits are shapshots, not diffs ⌘ https://github.blog/2020-12-17-commits-are-shapshots-not-diffs/ 2020-12-17T20:20:25Z Shifting supply chain security left with dependency review ⌘ https://github.blog/2020-12-17-shifting-supply-chain-security-left-with-dependency-review/ 2020-12-18T14:00:32Z Happy anniversary GitHub Security Lab! ⌘ https://github.blog/2020-12-18-happy-anniversary-github-security-lab/ 2020-12-18T17:00:59Z Learn about ghapi, a new third-party Python client for the GitHub API ⌘ https://github.blog/2020-12-18-learn-about-ghapi-a-new-third-party-python-client-for-the-github-api/ 2020-12-18T21:00:23Z How to make DevOps your competitive advantage ⌘ https://github.blog/2020-12-18-how-to-make-devops-your-competitive-advantage/ 2020-12-21T17:45:19Z Visualizing GitHub’s global community ⌘ https://github.blog/2020-12-21-visualizing-githubs-global-community/ 2020-12-21T17:45:10Z How we built the GitHub globe ⌘ https://github.blog/2020-12-21-how-we-built-the-github-globe/ 2020-12-21T21:04:37Z Get up to speed with partial clone and shallow clone ⌘ https://github.blog/2020-12-21-get-up-to-speed-with-partial-clone-and-shallow-clone/ 2020-12-22T18:00:15Z Let’s talk about securing open source projects ⌘ https://github.blog/2020-12-22-lets-talk-about-securing-open-source-projects/ 2020-12-22T17:00:51Z Git clone: a data-driven study on cloning behaviors ⌘ https://github.blog/2020-12-22-git-clone-a-data-driven-study-on-cloning-behaviors/ 2020-12-22T18:13:26Z How to launch a tech career in 2020 ⌘ https://github.blog/2020-12-22-how-to-launch-a-tech-career-in-2020/ 2020-12-23T21:37:07Z Highlights from Game Off 2020 ⌘ https://github.blog/2020-12-23-highlights-from-game-off-2020/ 2020-12-30T16:00:34Z Announcing the GitHub Education Classroom Report 2020 ⌘ [Read more...](https://github.blog/2020-12-30-announcing-the-github-education-classroom-report-2020/) 2021-01-05T18:00:34Z Advancing developer freedom: GitHub is fully available in Iran ⌘ [Read more...](https://github.blog/2021-01-05-advancing-developer-freedom-github-is-fully-available-in-iran/) 2021-01-06T17:00:00Z Building On-Call Culture at GitHub ⌘ [Read more...](https://github.blog/2021-01-06-building-on-call-culture-at-github/) 2021-01-06T18:30:32Z GitHub Availability Report: December 2020 ⌘ [Read more...](https://github.blog/2021-01-06-github-availability-report-december-2020/) 2021-01-11T16:02:34Z GitHub security features: highlights from 2020 ⌘ [Read more...](https://github.blog/2021-01-11-github-security-features-highlights-from-2020/) 2021-01-15T17:00:12Z GitHub Enterprise Server 3.0 is here! ⌘ [Read more...](https://github.blog/2021-01-15-github-enterprise-server-3-0-is-here/) 2021-01-17T17:00:31Z Update on an Employee Matter ⌘ [Read more...](https://github.blog/2021-01-17-update-on-an-employee-matter/) 2021-01-21T17:00:32Z The best of Changelog • 2020 Edition ⌘ [Read more...](https://github.blog/2021-01-21-changelog-2020-edition/) 2021-01-22T17:18:27Z Level up your code with TwilioQuest ⌘ [Read more...](https://github.blog/2021-01-22-level-up-your-code-with-twilioquest/) 2021-01-25T17:46:08Z Improving how we deploy GitHub ⌘ [Read more...](https://github.blog/2021-01-25-improving-how-we-deploy-github/) 2021-01-26T17:24:32Z The Social Sector is Contributing to the Broader OSS Ecosystem ⌘ [Read more...](https://github.blog/2021-01-26-the-social-sector-is-contributing-to-the-broader-oss-ecosystem/) 2021-01-29T17:00:55Z Making GitHub’s new homepage fast and performant ⌘ [Read more...](https://github.blog/2021-01-29-making-githubs-new-homepage-fast-and-performant/) 2021-02-01T16:18:24Z GitHub Campus Experts applications are open ⌘ [Read more...](https://github.blog/2021-02-01-github-campus-experts-applications-are-open/) 2021-02-02T17:09:47Z npm 7 is now generally available! ⌘ [Read more...](https://github.blog/2021-02-02-npm-7-is-now-generally-available/) 2021-02-02T19:00:22Z What’s next for DevOps: Q&A with Lightstep CEO Ben Sigelman ⌘ [Read more...](https://github.blog/2021-02-02-whats-next-for-devops-qa-with-lightstep-ceo-ben-sigelman/) 2021-02-02T23:53:58Z GitHub Availability Report: January 2021 ⌘ [Read more...](https://github.blog/2021-02-02-github-availability-report-january-2021/) 2021-02-03T18:00:20Z Deployment reliability at GitHub ⌘ [Read more...](https://github.blog/2021-02-03-deployment-reliability-at-github/) 2021-02-03T18:59:27Z Fighting for developers: GitHub policy 2020 in review ⌘ [Read more...](https://github.blog/2021-02-03-fighting-for-developers-github-policy-2020-in-review/) 2021-02-04T17:29:20Z How We Illustrate at GitHub ⌘ [Read more...](https://github.blog/2021-02-04-how-we-illustrate-at-github/) 2021-02-04T18:58:52Z GitHub reduces Marketplace transaction fees, revamps Technology Partner Program ⌘ [Read more...](https://github.blog/2021-02-04-github-reduces-marketplace-transaction-fees-revamps-technology-partner-program/) 2021-02-04T20:30:03Z Extending GitOps to reliability-as-code with GitHub and StackPulse ⌘ [Read more...](https://github.blog/2021-02-04-extending-gitops-to-reliability-as-code-with-github-and-stackpulse/) 2021-02-05T23:00:29Z Release Radar · January 2021 Edition ⌘ [Read more...](https://github.blog/2021-02-05-release-radar-jan-2021/) 2021-02-09T17:00:20Z Using CWE and CVSS scores to get more context on a security advisory ⌘ [Read more...](https://github.blog/2021-02-09-using-cwe-and-cvss-scores-to-get-more-context-on-a-security-advisory/) 2021-02-10T18:00:33Z New global ID format coming to GraphQL ⌘ [Read more...](https://github.blog/2021-02-10-new-global-id-format-coming-to-graphql/) 2021-02-11T18:00:34Z How we designed and wrote the narrative for our homepage ⌘ [Read more...](https://github.blog/2021-02-11-how-we-designed-and-wrote-the-narrative-for-our-homepage/) 2021-02-12T17:13:38Z Avoiding npm substitution attacks ⌘ [Read more...](https://github.blog/2021-02-12-avoiding-npm-substitution-attacks/) 2021-02-16T23:21:14Z GitHub Enterprise Server 3.0 is now generally available ⌘ [Read more...](https://github.blog/2021-02-16-github-enterprise-server-3-0-is-now-generally-available/) 2021-02-17T17:54:26Z Introducing GitHub Campus TV! ⌘ [Read more...](https://github.blog/2021-02-17-introducing-github-campus-tv/) 2021-02-19T13:59:19Z MLH Fellowship, powered by GitHub, welcomes American Express and Adobe to the Summer 2021 Program ⌘ [Read more...](https://github.blog/2021-02-19-mlh-fellowship-welcomes-american-express-adobe-summer-2021/) 2021-02-19T22:16:03Z Your guide to Developer Experience Week at GitHub InFocus ⌘ [Read more...](https://github.blog/2021-02-19-your-guide-developer-experience-week-github-infocus/) 2021-02-23T20:46:49Z Open source in the 5G stack ⌘ [Read more...](https://github.blog/2021-02-23-open-source-in-the-5g-stack/) 2021-02-23T22:13:41Z Dr. Bernice King on how technology can transform the Black economy ⌘ [Read more...](https://github.blog/2021-02-23-dr-bernice-king-on-how-technology-can-transform-the-black-economy/) 2021-02-24T15:58:08Z Let’s talk about tech internships ⌘ [Read more...](https://github.blog/2021-02-24-lets-talk-about-tech-internships/) 2021-02-24T17:00:41Z Black History Month Spotlight: Honoring Black creators, activists, and community builders ⌘ [Read more...](https://github.blog/2021-02-24-black-history-month-spotlight-honoring-black-creators-activists-and-community-builders/) 2021-02-24T20:00:01Z Hello from GitHub’s new Chief Security Officer ⌘ [Read more...](https://github.blog/2021-02-24-hello-from-githubs-new-chief-security-officer/) 2021-02-25T18:30:04Z 2020 Transparency Report ⌘ [Read more...](https://github.blog/2021-02-25-2020-transparency-report/) 2021-02-25T19:00:39Z The little bug that couldn’t: Securing OpenSSL ⌘ [Read more...](https://github.blog/2021-02-25-the-little-bug-that-couldnt-securing-openssl/) 2021-03-01T17:46:42Z Your guide to DevOps automation and CI/CD at GitHub InFocus ⌘ [Read more...](https://github.blog/2021-03-01-guide-devops-automation-ci-cd-github-infocus/) 2021-03-02T16:27:29Z GitHub Security Lab Capture the Flag: A call to hacktion ⌘ [Read more...](https://github.blog/2021-03-02-github-security-lab-capture-the-flag-a-call-to-hacktion/) 2021-03-03T15:54:33Z Octoverse spotlight: Exploring the people and stories behind GitHub data ⌘ [Read more...](https://github.blog/2021-03-03-octoverse-spotlight-exploring-people-stories-github-data/) 2021-03-03T19:17:41Z GitHub Availability Report: February 2021 ⌘ [Read more...](https://github.blog/2021-03-03-github-availability-report-february-2021/) 2021-03-04T20:06:45Z 4 things you didn’t know you could do with GitHub Actions ⌘ [Read more...](https://github.blog/2021-03-04-4-things-you-didnt-know-you-could-do-with-github-actions/) 2021-03-05T23:00:48Z Release Radar · February 2021 Edition ⌘ [Read more...](https://github.blog/2021-03-05-release-radar-feb-2021/) 2021-03-08T21:08:31Z This week at GitHub InFocus: Code security and DevSecOps ⌘ [Read more...](https://github.blog/2021-03-08-github-infocus-code-security-devsecops/) 2021-03-09T03:34:20Z GitHub security update: A bug related to handling of authenticated sessions ⌘ [Read more...](https://github.blog/2021-03-08-github-security-update-a-bug-related-to-handling-of-authenticated-sessions/) 2021-03-09T18:00:45Z Git clone vulnerability announced ⌘ [Read more...](https://github.blog/2021-03-09-git-clone-vulnerability-announced/) 2021-03-09T21:30:37Z GitHub Discussions now available for private repositories ⌘ [Read more...](https://github.blog/2021-03-09-github-discussions-now-available-for-private-repositories/) 2021-03-10T17:57:31Z Measuring enterprise developer productivity ⌘ [Read more...](https://github.blog/2021-03-10-measuring-enterprise-developer-productivity/) 2021-03-11T16:59:50Z How MLOps can drive governance for machine learning: A conversation with Algorithmia ⌘ [Read more...](https://github.blog/2021-03-11-mlops-governance-for-machine-learning-algorithmia/) 2021-03-11T17:59:41Z Scripting with GitHub CLI ⌘ [Read more...](https://github.blog/2021-03-11-scripting-with-github-cli/) 2021-03-15T18:20:02Z Dependabot ❤️s private dependencies ⌘ [Read more...](https://github.blog/2021-03-15-dependabot-private-dependencies/) 2021-03-15T19:38:24Z Highlights from Git 2.31 ⌘ [Read more...](https://github.blog/2021-03-15-highlights-from-git-2-31/) 2021-03-15T19:59:24Z FUD chills: GitHub stands with security researchers on DMCA Section 1201 ⌘ [Read more...](https://github.blog/2021-03-15-fud-chills-github-stands-with-security-researchers-on-dmca-section-1201/) 2021-03-16T16:35:48Z Improving large monorepo performance on GitHub ⌘ [Read more...](https://github.blog/2021-03-16-improving-large-monorepo-performance-on-github/) 2021-03-16T17:55:56Z Using GitHub code scanning and CodeQL to detect traces of Solorigate and other backdoors ⌘ [Read more...](https://github.blog/2021-03-16-using-github-code-scanning-and-codeql-to-detect-traces-of-solorigate-and-other-backdoors/) 2021-03-18T15:58:23Z What’s up with these new not-open source licenses? ⌘ [Read more...](https://github.blog/2021-03-18-whats-up-with-these-new-not-open-source-licenses/) 2021-03-18T19:59:27Z How we found and fixed a rare race condition in our session handling ⌘ [Read more...](https://github.blog/2021-03-18-how-we-found-and-fixed-a-rare-race-condition-in-our-session-handling/) 2021-03-22T15:58:22Z Open innovation will be the winning strategy for digital sovereignty and human progress in the new decade ⌘ [Read more...](https://github.blog/2021-03-22-open-innovation-winning-strategy-digital-sovereignty-human-progress/) 2021-03-22T19:18:34Z GitHub CTF results ⌘ [Read more...](https://github.blog/2021-03-22-github-ctf-results/) 2021-03-23T17:00:41Z Solving the innersource discovery problem ⌘ [Read more...](https://github.blog/2021-03-23-solving-the-innersource-discovery-problem/) 2021-03-24T22:28:10Z One day short of a full chain: Real world exploit chains explained ⌘ [Read more...](https://github.blog/2021-03-24-real-world-exploit-chains-explained/) 2021-03-25T12:29:48Z Introducing the GitHub Education Stream Team! ⌘ [Read more...](https://github.blog/2021-03-25-introducing-the-github-education-stream-team/) 2021-03-25T16:28:23Z How GitHub Actions renders large-scale logs ⌘ [Read more...](https://github.blog/2021-03-25-how-github-actions-renders-large-scale-logs/) 2021-03-26T05:00:35Z GitHub India: Celebrating a community connected by code ⌘ [Read more...](https://github.blog/2021-03-25-github-india-celebrating-a-community-connected-by-code/) 2021-03-29T16:16:42Z Women’s History Month spotlight: Honoring women developers ⌘ [Read more...](https://github.blog/2021-03-29-womens-history-month-spotlight-honoring-women-developers/) 2021-03-30T13:00:51Z GitHub Advanced Security: Introducing security overview beta and general availability of secret scanning for private repositories ⌘ [Read more...](https://github.blog/2021-03-30-github-advanced-security-security-overview-beta-secret-scanning-private-repos/) 2021-03-30T16:00:39Z Introducing new push notifications, scheduling, releases and more on GitHub Mobile ⌘ [Read more...](https://github.blog/2021-03-30-new-push-notifications-scheduling-releases-github-mobile/) 2021-03-30T16:00:11Z GitHub Desktop now supports cherry-picking ⌘ [Read more...](https://github.blog/2021-03-30-github-desktop-now-supports-cherry-picking/) 2021-04-05T15:59:07Z How we scaled the GitHub API with a sharded, replicated rate limiter in Redis ⌘ [Read more...](https://github.blog/2021-04-05-how-we-scaled-github-api-sharded-replicated-rate-limiter-redis/) 2021-04-05T16:31:34Z Behind GitHub’s new authentication token formats ⌘ [Read more...](https://github.blog/2021-04-05-behind-githubs-new-authentication-token-formats/) 2021-04-06T12:00:54Z Announcing the Global Maintainer Summit ⌘ [Read more...](https://github.blog/2021-04-06-announcing-the-global-maintainer-summit/) 2021-04-06T17:55:22Z Supreme Court sides with developers in Google v. Oracle ⌘ [Read more...](https://github.blog/2021-04-06-supreme-court-sides-with-developers-in-google-v-oracle/) 2021-04-07T16:29:19Z GitHub Availability Report: March 2021 ⌘ [Read more...](https://github.blog/2021-04-07-github-availability-report-march-2021/) 2021-04-08T19:48:43Z Safe harbors for software collaboration, part 2 ⌘ [Read more...](https://github.blog/2021-04-08-safe-harbors-for-software-collaboration-part-2/) 2021-04-09T18:30:42Z Release Radar · March 2021 Edition ⌘ [Read more...](https://github.blog/2021-04-09-release-radar-mar-2021/) 2021-04-13T18:05:20Z Implementing least privilege for secrets in GitHub Actions ⌘ [Read more...](https://github.blog/2021-04-13-implementing-least-privilege-for-secrets-in-github-actions/) 2021-04-15T16:00:59Z Work with GitHub Actions in your terminal with GitHub CLI ⌘ [Read more...](https://github.blog/2021-04-15-work-with-github-actions-in-your-terminal-with-github-cli/) 2021-04-19T13:00:32Z Open source goes to Mars 🚀 ⌘ [Read more...](https://github.blog/2021-04-19-open-source-goes-to-mars/) 2021-04-20T19:43:03Z New and simplified Enterprise and Partner terms ⌘ [Read more...](https://github.blog/2021-04-20-new-simplified-enterprise-and-partner-terms/) 2021-04-22T15:00:21Z Environmental sustainability at GitHub ⌘ [Read more...](https://github.blog/2021-04-22-environmental-sustainability-github/) 2021-04-22T20:53:39Z GitHub Actions update: Helping maintainers combat bad actors ⌘ [Read more...](https://github.blog/2021-04-22-github-actions-update-helping-maintainers-combat-bad-actors/) 2021-04-27T15:59:50Z How we ship code faster and safer with feature flags ⌘ [Read more...](https://github.blog/2021-04-27-ship-code-faster-safer-feature-flags/) 2021-04-28T16:00:58Z GitHub Desktop supports hiding whitespace, expanding diffs, and creating repository aliases ⌘ [Read more...](https://github.blog/2021-04-28-github-desktop-hiding-whitespace-expanding-diffs-repo-aliases/) 2021-04-28T15:45:36Z How we use GitHub Actions to manage GitHub Docs ⌘ [Read more...](https://github.blog/2021-04-28-use-github-actions-manage-docs/) 2021-04-29T15:50:21Z Scaling monorepo maintenance ⌘ [Read more...](https://github.blog/2021-04-29-scaling-monorepo-maintenance/) 2021-04-29T17:09:49Z Goodbye Dependabot Preview, hello Dependabot! ⌘ [Read more...](https://github.blog/2021-04-29-goodbye-dependabot-preview-hello-dependabot/) 2021-04-29T17:02:00Z A call for feedback on our policies around exploits and malware ⌘ [Read more...](https://github.blog/2021-04-29-call-for-feedback-policies-exploits-malware/) 2021-05-04T15:57:58Z How we use Web Components at GitHub ⌘ [Read more...](https://github.blog/2021-05-04-how-we-use-web-components-at-github/) 2021-05-05T15:59:15Z GitHub Availability Report: April 2021 ⌘ [Read more...](https://github.blog/2021-05-05-github-availability-report-april-2021/) 2021-05-06T17:37:09Z GitHub Enterprise Server 3.1 available as a release candidate ⌘ [Read more...](https://github.blog/2021-05-06-github-enterprise-server-3-1-available-release-candidate/) 2021-05-07T23:00:02Z Release Radar · April 2021 Edition ⌘ [Read more...](https://github.blog/2021-05-07-release-radar-apr-2021/) 2021-05-10T17:20:08Z Security keys are now supported for SSH Git operations ⌘ [Read more...](https://github.blog/2021-05-10-security-keys-supported-ssh-git-operations/) 2021-05-11T22:08:56Z Join GitHub on June 5 to celebrate the Class of 2021 ⌘ [Read more...](https://github.blog/2021-05-11-join-github-june-5-celebrate-class-of-2021/) 2021-05-13T16:00:13Z Video uploads now available across GitHub ⌘ [Read more...](https://github.blog/2021-05-13-video-uploads-available-github/) 2021-05-17T16:00:02Z Headphones on, volume up: Introducing The ReadME Podcast ⌘ [Read more...](https://github.blog/2021-05-17-introducing-readme-podcast/) 2021-05-18T15:59:19Z GitHub Artifact Exporter open source release ⌘ [Read more...](https://github.blog/2021-05-18-github-artifact-exporter-open-source-release/) 2021-05-19T22:34:44Z Ludum Dare 48 staff picks ⌘ [Read more...](https://github.blog/2021-05-19-ludum-dare-48-staff-picks/) 2021-05-25T15:00:43Z Octoverse Spotlight 2021: The Good Day Project—Personal analytics to make your work days better ⌘ [Read more...](https://github.blog/2021-05-25-octoverse-spotlight-good-day-project/) 2021-05-26T19:20:09Z Why (and how) GitHub is adopting OpenTelemetry ⌘ [Read more...](https://github.blog/2021-05-26-why-and-how-github-is-adopting-opentelemetry/) 2021-06-01T16:00:35Z Github Social Impact: How we’re driving change with social sector organizations ⌘ [Read more...](https://github.blog/2021-06-01-github-social-impact-driving-change-social-sector/) 2021-06-03T00:00:00Z GitHub Availability Report: May 2021 ⌘ [Read more...](https://github.blog/2021-06-02-github-availability-report-may-2021/) 2021-06-03T16:00:48Z GitHub Enterprise Server 3.1 is now generally available ⌘ [Read more...](https://github.blog/2021-06-03-github-enterprise-server-3-1-is-now-generally-available/) 2021-06-04T09:00:57Z Release Radar · May 2021 Edition ⌘ [Read more...](https://github.blog/2021-06-04-release-radar-may-2021/) 2021-06-04T16:00:30Z Updates to our policies regarding exploits, malware, and vulnerability research ⌘ [Read more...](https://github.blog/2021-06-04-updates-to-our-policies-regarding-exploits-malware-and-vulnerability-research/) 2021-06-08T16:00:30Z Securing the open source supply chain by scanning for package registry credentials ⌘ [Read more...](https://github.blog/2021-06-08-securing-open-source-supply-chain-scanning-package-registry-credentials/) 2021-06-10T16:00:52Z Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug ⌘ [Read more...](https://github.blog/2021-06-10-privilege-escalation-polkit-root-on-linux-with-bug/) 2021-06-10T17:32:32Z What’s new from GitHub Changelog? May 2021 Recap ⌘ [Read more...](https://github.blog/2021-06-10-whats-new-from-github-changelog-may-2021-recap/) 2021-06-10T19:03:23Z Blacktocats turn five ⌘ [Read more...](https://github.blog/2021-06-10-blacktocats-turn-five/) 2021-06-16T16:00:57Z GitHub Desktop 2.9 includes squashing, reordering, amending, and more! ⌘ [Read more...](https://github.blog/2021-06-16-github-desktop-2-9-squashing-reordering-amending/) 2021-06-21T19:04:56Z GitHub Packages Container registry is generally available ⌘ [Read more...](https://github.blog/2021-06-21-github-packages-container-registry-generally-available/) 2021-06-22T17:07:49Z A framework for building Open Graph images ⌘ [Read more...](https://github.blog/2021-06-22-framework-building-open-graph-images/) 2021-06-23T16:04:51Z Introducing the new GitHub Issues ⌘ [Read more...](https://github.blog/2021-06-23-introducing-new-github-issues/) 2021-06-24T16:00:08Z Run online campus events with your favorite tools at no cost with the new GitHub Virtual Event Kit ⌘ [Read more...](https://github.blog/2021-06-24-run-online-campus-events-github-virtual-event-kit/) 2021-06-25T16:01:03Z Seven years of the GitHub Security Bug Bounty program ⌘ [Read more...](https://github.blog/2021-06-25-seven-years-github-security-bug-bounty-program/) 2021-06-29T14:28:51Z Introducing GitHub Copilot: your AI pair programmer ⌘ [Read more...](https://github.blog/2021-06-29-introducing-github-copilot-ai-pair-programmer/) 2021-07-07T16:00:30Z GitHub Availability Report: June 2021 ⌘ [Read more...](https://github.blog/2021-07-07-github-availability-report-june-2021/) 2021-07-12T16:00:12Z Adding support for cross-cluster associations to Rails 7 ⌘ [Read more...](https://github.blog/2021-07-12-adding-support-cross-cluster-associations-rails-7/) 2021-07-13T16:01:14Z What’s new from GitHub Changelog? June 2021 Recap ⌘ [Read more...](https://github.blog/2021-07-13-whats-new-github-changelog-june-2021/) 2021-07-15T16:00:29Z Student leaders are taking GitHub Campus TV to the next level ⌘ [Read more...](https://github.blog/2021-07-15-student-leaders-github-campus-tv-next-level/) 2021-07-22T16:00:25Z GitHub brings supply chain security features to the Go community ⌘ [Read more...](https://github.blog/2021-07-22-github-supply-chain-security-features-go-community/) 2021-07-22T17:00:32Z Minimum Viable Governance: lightweight community structure to grow your FOSS projects ⌘ [Read more...](https://github.blog/2021-07-22-minimum-viable-governance-lightweight-community-structure-foss-projects/) 2021-07-27T14:00:34Z Standing up for developers: the GitHub Developer Rights Fellowship at Stanford Law School ⌘ [Read more...](https://github.blog/2021-07-27-github-developer-rights-fellowship-stanford-law-school/) 2021-07-28T16:01:02Z 15+ new code scanning integrations with open source security tools ⌘ [Read more...](https://github.blog/2021-07-28-new-code-scanning-integrations-open-source-security-tools/) 2021-08-04T16:00:45Z GitHub Availability Report: July 2021 ⌘ [Read more...](https://github.blog/2021-08-04-github-availability-report-july-2021/) 2021-08-05T17:00:45Z Release Radar · Mid-year 2021 Edition ⌘ [Read more...](https://github.blog/2021-08-05-release-radar-jun-jul-2021/) 2021-08-09T14:00:52Z **August 2021 Campus Experts applications are open!**
The GitHub Campus Expert applications are officially open for the August 2021 generation! ⌘ [Read more](https://github.blog/2021-08-09-august-2021-campus-experts-applications-are-open/) 2021-08-11T16:00:14Z **GitHub’s Engineering Team has moved to Codespaces**
Over the past months, we’ve left our macOS model behind and moved to Codespaces for the majority of GitHub.com development. ⌘ [Read more](https://github.blog/2021-08-11-githubs-engineering-team-moved-codespaces/) 2021-08-12T18:00:00Z **Seamless teaching and learning through GitHub Classroom and Visual Studio Code**
This GitHub Classroom extension for Visual Studio Code provides a simplified introduction to Git, GitHub Classroom, and Visual Studio Code. ⌘ [Read more](https://github.blog/2021-08-12-teaching-learning-github-classroom-visual-studio-code/) 2021-08-13T00:15:37Z **What’s new from GitHub Changelog? July 2021 Recap**
A public beta for CodeQL package manager, additional options to manage Actions runs from first-time contributors, GitHub Discussions translation, and more. ⌘ [Read more](https://github.blog/2021-08-12-whats-new-from-github-changelog-july-2021-recap/) 2021-08-16T18:00:51Z **Securing your GitHub account with two-factor authentication**
The benefits of multifactor authentication are widely documented, and there are a number of options for using 2FA on GitHub. ⌘ [Read more](https://github.blog/2021-08-16-securing-your-github-account-two-factor-authentication/) 2021-08-16T23:15:27Z **Highlights from Git 2.33**
The open source Git project just released Git 2.33 with features and bug fixes from over 74 contributors, 19 of them new. We last caught up with you on the latest in Git when 2.31 ⌘ [Read more](https://github.blog/2021-08-16-highlights-from-git-2-33/) 2021-08-17T19:59:33Z **GitHub Discussions is out of beta**
GitHub Discussions is now out of beta, with features that include labels, Discussions GraphQL API and webhooks, and mobile functionality. ⌘ [Read more](https://github.blog/2021-08-17-github-discussions-out-of-beta/) 2021-08-19T16:12:34Z **Enhanced support for citations on GitHub**
We're excited to support researchers and academics on GitHub with enhanced citation support through \`CITATION.cff\` files. ⌘ [Read more](https://github.blog/2021-08-19-enhanced-support-citations-github/) 2021-08-23T19:04:52Z **The npm registry is deprecating TLS 1.0 and TLS 1.1**
Beginning October 4, 2021, all connections to npm websites and the npm registry, including for package installation, must use TLS 1.2 or higher. ⌘ [Read more](https://github.blog/2021-08-23-npm-registry-deprecating-tls-1-0-tls-1-1/) 2021-08-24T16:08:13Z **GitHub CLI 2.0 includes extensions!**
GitHub CLI 2.0 is now available, making it easy to create and share your own custom commands to make your experience even more powerful. ⌘ [Read more](https://github.blog/2021-08-24-github-cli-2-0-includes-extensions/) 2021-08-25T16:00:32Z **2021 Transparency Report: January to June**
We’re reporting on a six-month period rather than annually to increase our level of transparency. For this report, we’ve added more granularity to our 2020 stats. ⌘ [Read more](https://github.blog/2021-08-25-2021-transparency-report-january-to-june/) 2021-08-26T16:00:28Z **30 free and open source Linux games – part 2**
Linux is celebrating its 30-year anniversary, so I’m taking the opportunity to highlight 30 of my favorite free and open source Linux games, their communities, and their stories.   I shared the first 10 yesterday. ⌘ [Read more](https://github.blog/2021-08-26-30-free-and-open-source-linux-games-part-2/) 2021-08-27T16:00:33Z **30 free and open source Linux games – part 3**
With Linux celebrating it’s 30 year anniversary, I thought I’d use that as an excuse to highlight 30 of my favorite free and open source Linux games, their communities, and their stories. If you’ve haven’t ⌘ [Read more](https://github.blog/2021-08-27-30-free-and-open-source-linux-games-part-3/) 2021-08-31T17:00:23Z **Request for proposals: Defining standardized GitHub metrics**
The GitHub Social Impact and Policy teams are issuing a Request for Proposal (RFP) for a researcher to define a list of publicly available GitHub platform usage metrics by country for international development, public policy and economics disciplines. ⌘ [Read more](https://github.blog/2021-08-31-request-for-proposals-defining-standardized-github-metrics/) 2021-08-31T18:42:55Z **Vague infringement allegations considered harmful**
Ensuring that software copyright allegations are specific and actionable benefits the entire developer ecosystem. That’s why GitHub submitted a “friend of the court” brief in the SAS Institute, Inc. v. World Programming Ltd. case before a Federal Court of Appeals. ⌘ [Read more](https://github.blog/2021-08-31-vague-infringement-allegations-considered-harmful/) 2021-09-01T16:00:29Z **Introducing GitHub Global Campus**
Calling all students! Get the most out of your GitHub Education experience by joining the GitHub student community on our new digital campus. ⌘ [Read more](https://github.blog/2021-09-01-introducing-github-global-campus/) 2021-09-01T17:00:12Z **Improving Git protocol security on GitHub**
We’re changing which keys are supported in SSH and removing unencrypted Git protocol. Only users connecting via SSH or git:// will be affected. If your Git remotes start with https://, nothing in this post will affect you. If you’re an SSH user, read on for the details and timeline. ⌘ [Read more](https://github.blog/2021-09-01-improving-git-protocol-security-github/) 2021-09-01T17:30:56Z **GitHub Availability Report: August 2021**
In August, we experienced two distinct incidents resulting in significant impact and degraded state of availability for Git operations, API requests, webhooks, issues, pull requests, GitHub Pages, GitHub Packages, and GitHub Actions services. ⌘ [Read more](https://github.blog/2021-09-01-github-availability-report-august-2021/) 2021-09-02T20:18:04Z **Introducing the MLH Fellowship: GitHub Externship Track**
Applications are now open for the MLH Fellowship: GitHub Externship Track. Apply by September 13. ⌘ [Read more](https://github.blog/2021-09-02-introducing-the-mlh-fellowship-github-externship-track/) 2021-09-03T21:00:55Z **Release Radar · August 2021 Edition**
The end of financial year is complete, tax time is over, and everyone is back to shipping awesome projects. During August, our community has been super busy shipping lots of new updates. These new releases ⌘ [Read more](https://github.blog/2021-09-03-release-radar-aug-2021/) 2021-09-07T16:10:42Z **Increasing developer happiness with GitHub code scanning**
How GitHub uses code scanning to increase developer happiness, and how you can too. ⌘ [Read more](https://github.blog/2021-09-07-increasing-developer-happiness-github-code-scanning/) 2021-09-08T16:00:32Z **GitHub security update: Vulnerabilities in tar and @npmcli/arborist**
Between July 21, 2021 and August 13, 2021 we received reports through one of our private security bug bounty programs from researchers regarding vulnerabilities in tar and @npmcli/arborist. ⌘ [Read more](https://github.blog/2021-09-08-github-security-update-vulnerabilities-tar-npmcli-arborist/) 2021-09-09T17:26:30Z **GitHub Enterprise Server 3.2 brings new color modes and added security capabilities**
GitHub Enterprise Server 3.2 is available today as a release candidate. With this release, we’re shipping over 70 new features and changes to improve the developer experience and deliver new security capabilities for our customers. ⌘ [Read more](https://github.blog/2021-09-09-github-enterprise-server-3-2-color-modes-security/) 2021-09-09T17:23:06Z **An analysis on developer-security researcher interactions in the vulnerability disclosure process**
We put out a call to open source developers and security researchers to talk about the security vulnerability disclosure process. Here's what we found. ⌘ [Read more](https://github.blog/2021-09-09-analysis-developer-security-researcher-interactions-vulnerability-disclosure/) 2021-09-13T03:30:45Z **Announcing recipients of the GitHub Open Source Grants and GitHub Sponsors now open in India**
Announcing recipients of the GitHub Open Source Grants and opening of GitHub Sponsors in India. ⌘ [Read more](https://github.blog/2021-09-12-recipients-open-source-grants-github-sponsors-india/) 2021-09-13T17:01:15Z **What’s new from GitHub Changelog? August 2021 Recap**
What did we ship in August? Codespaces, Discussions, and lots of other updates, from the general availability of the dark high contrast theme to an auto-generated table of contents for wikis. ⌘ [Read more](https://github.blog/2021-09-13-whats-new-from-github-changelog-august-2021-recap/) 2021-09-14T16:00:10Z **The ReadME Project: A look back at the community stories that shape us**
In August of 2020, we started highlighting stories that showcase how developers, maintainers, and organizations are moving humanity forward through The ReadME Project. ⌘ [Read more](https://github.blog/2021-09-14-the-readme-project-a-look-back-community-stories/) 2021-09-16T17:32:09Z **Audit log streaming is now in public beta**
If you're a GitHub Enterprise Cloud customer, you can now set up a stream of audit log and Git events to Splunk or an Azure Event Hub. ⌘ [Read more](https://github.blog/2021-09-16-audit-log-streaming-public-beta/) 2021-09-23T16:09:35Z **GitHub Advisory Database now supports Rust**
We’re excited to announce that the GitHub Advisory Database now includes curated security advisories on the Rust ecosystem! ⌘ [Read more](https://github.blog/2021-09-23-github-advisory-database-now-supports-rust/) 2021-09-23T17:19:34Z **Announcing npm’s new access token format**
npm access tokens will now follow the established format of GitHub authentication tokens. ⌘ [Read more](https://github.blog/2021-09-23-announcing-npms-new-access-token-format/) 2021-09-27T16:02:13Z **Partitioning GitHub’s relational databases to handle scale**
In 2019, to meet GitHub's growth and availability challenges, we set a plan in motion to improve our tooling and ability to partition relational databases. ⌘ [Read more](https://github.blog/2021-09-27-partitioning-githubs-relational-databases-scale/) 2021-09-28T00:51:12Z **Revised enterprise DPA with new standard contractual clauses**
As part of GitHub's strong commitment to developer privacy, we are excited to announce updates to our privacy agreements in line with new legal requirements and our own robust data protection practices. ⌘ [Read more](https://github.blog/2021-09-27-revised-enterprise-dpa-new-standard-contractual-clauses/) 2021-09-28T16:21:10Z **GitHub Enterprise Server 3.2 is now generally available**
Today, we’re excited to announce that GitHub Enterprise Server 3.2 is generally available. This release brings over 70 new features and changes that improve developer experience and deliver new security capabilities. ⌘ [Read more](https://github.blog/2021-09-28-github-enterprise-server-3-2-generally-available/) 2021-09-30T16:00:22Z **Enterprise managed users are now generally available for GitHub Enterprise Cloud**
Manage your company in the cloud with more control and governance using enterprise managed users. ⌘ [Read more](https://github.blog/2021-09-30-enterprise-managed-users-generally-available-github-enterprise-cloud/) 2021-10-01T18:21:36Z **Cybersecurity spotlight on bug bounty researchers @chen-robert and @ginkoid**
GitHub's bug bounty team is excited to kick off Cybersecurity Awareness Month with a spotlight on two security researchers who participate in the GitHub Security Bug Bounty Program. ⌘ [Read more](https://github.blog/2021-10-01-cybersecurity-spotlight-bug-bounty-researchers-chen-robert-ginkoid/) 2021-10-04T18:07:00Z **A new public beta of GitHub Releases: How we’re improving the release experience**
GitHub Releases has a new look and updated tools to make it easier for open source communities to create and share high-quality releases with auto-generated release notes. ⌘ [Read more](https://github.blog/2021-10-04-beta-github-releases-improving-release-experience/) 2021-10-05T16:00:31Z **13 tiny and terrific entries from the js13kGames competition**
If you think about it, 13kB isn’t really a lot. The image above is 81kB. This page weighs over 3MB (waaay more if you include the videos). That’s why it’s so incredibly impressive that the ⌘ [Read more](https://github.blog/2021-10-05-13-tiny-and-terrific-entries-from-the-js13kgames-competition/) 2021-10-06T16:18:14Z **GitHub Availability Report: September 2021**
In September, we experienced no incidents resulting in service downtime to our core services. ⌘ [Read more](https://github.blog/2021-10-06-github-availability-report-september-2021/) 2021-10-07T16:05:05Z **GitHub Advisory Database now powers npm audit**
Today, we’re adding a proxy on top of the GitHub Advisory Database that speaks the \`npm audit\` protocol. This means that every version of the npm CLI that supports security audits is now talking directly to the GitHub Advisory Database. ⌘ [Read more](https://github.blog/2021-10-07-github-advisory-database-now-powers-npm-audit/) 2021-10-07T18:44:14Z **GitHub’s guide to Hacktoberfest 2021**
Giving back to open source projects is a great way to practice skills you don’t get to use in your day job. Check out ways to get involved! ⌘ [Read more](https://github.blog/2021-10-07-githubs-guide-hacktoberfest-2021/) 2021-10-08T18:55:48Z **Release Radar · September 2021 Edition**
The Northern Hemisphere has hit fall, and the southern is starting to warm into summer. September has been a busy time for our community. Maintainers have been getting their repositories ready for Hacktoberfest, joining us ⌘ [Read more](https://github.blog/2021-10-08-release-radar-aug-2021/) 2021-10-11T17:00:22Z **GitHub security update: revoking weakly-generated SSH keys**
On September 28, 2021, we received notice from the developer Axosoft regarding a vulnerability in a dependency of their popular git GUI client - GitKraken. An underlying issue with a dependency, called \`keypair\`, resulted in the GitKraken client generating weak SSH keys. ⌘ [Read more](https://github.blog/2021-10-11-github-security-update-revoking-weakly-generated-ssh-keys/) 2021-10-12T16:34:40Z **Apply now for GitHub Universe 2021 micro-mentoring**
As part of our ongoing commitment to ensure GitHub’s conferences are accessible and inclusive to people from all walks of life, we’re offering 30-minute, 1:1 micro-mentoring sessions with GitHub employees. ⌘ [Read more](https://github.blog/2021-10-12-apply-github-universe-2021-micro-mentoring/) 2021-10-14T15:53:55Z **Student developer resources you won’t find in the classroom**
Heading back to school? Did you just graduate? The GitHub Education Stream Team (GEST) is sharing resources, tools, and more to help emerging developers land a job. Student leaders from around the world are creating and hosting shows to grow the tech community and share information you won’t find in the classroom. ⌘ [Read more](https://github.blog/2021-10-14-student-developer-resources-wont-find-classroom/) 2021-10-15T14:28:05Z **💾 Save the date for GitHub Game Off 2021**
Game Off is an annual game jam (or “hackathon for building games”) that’s a little different from most—it lasts for the entire month of November—not just a weekend or a few days. It’s the perfect ⌘ [Read more](https://github.blog/2021-10-15-save-the-date-for-github-game-off-2021/) 2021-10-18T16:10:49Z **Meet the GitHub Universe hosts, and start building your schedule**
We sat down with Universe hosts Lorena Mesa and Jarryd McCree for a quick Q&A to help you make the most out of your conference experience this year. ⌘ [Read more](https://github.blog/2021-10-18-meet-github-universe-hosts-start-building-schedule/) 2021-10-19T19:44:33Z **What’s new from GitHub Changelog? September 2021 recap**
Catch up on 44 ships, including a colorblind-accessible theme, a public README.md for organizations, and customization of code review settings. ⌘ [Read more](https://github.blog/2021-10-19-whats-new-from-github-changelog-september-2021-recap/) 2021-10-20T16:00:10Z **Diversity, inclusion, and belonging at GitHub in 2021**
In the past two years, GitHub has doubled in size, welcoming more than 760 new Hubbers in 2021 alone. This past year we particularly focused on our goal of making GitHub more equitable. We saw growth in our diversity representation, whose population increased at a higher rate than the company itself. ⌘ [Read more](https://github.blog/2021-10-20-diversity-inclusion-belonging-github-2021/) 2021-10-21T16:00:28Z **GitHub Marketplace welcomes its 10,000th action**
GitHub Marketplace just passed 10,000 published actions! Learn about contributing to this growing open source ecosystem. ⌘ [Read more](https://github.blog/2021-10-21-github-marketplace-welcomes-its-10000th-action/) 2021-10-22T20:23:39Z **GitHub Actions for security and compliance**
GitHub Actions can automate several common security and compliance tasks, even if your CI/CD pipeline is managed by another tool. ⌘ [Read more](https://github.blog/2021-10-22-github-actions-for-security-compliance/) 2021-10-25T21:32:53Z **A peek inside some of the top games from Ludum Dare 49**
The 49th Ludum Dare game jam just wrapped up with almost 3000 entries. Here’s a peek at some of the highest-rated entries that you can play, plus their source code that you can poke around ⌘ [Read more](https://github.blog/2021-10-25-a-peek-inside-some-of-the-top-games-from-ludum-dare-49/) 2021-10-27T15:30:56Z **Everything new from Universe 2021**
Since last year’s GitHub Universe, we’ve shipped more than 20,000 improvements to GitHub for developers, open source communities, and enterprise teams. Here’s a comprehensive overview of what we’re announcing at Universe this week. ⌘ [Read more](https://github.blog/2021-10-27-everything-new-from-universe-2021/) 2021-10-29T08:01:42Z **13 short and scary games plus source to play (or hack) this Halloween 🎃**
It’s that time of year again where I like to share seasonally spooktacular games plus source code—a goldmine of material for (a) those looking for coffee-break entertainment, (b) those interested in learning more about game ⌘ [Read more](https://github.blog/2021-10-29-ten-short-and-scary-games-plus-source-to-play-or-hack-this-halloween/) 2021-11-01T16:00:25Z **GitHub keeps getting better for open source maintainers**
Maintainers can now limit who can approve and request changes on pull requests. You can also close issues and block users via your phone. ⌘ [Read more](https://github.blog/2021-11-01-github-keeps-getting-better-for-open-source-maintainers/) 2021-11-01T17:00:37Z **Cybersecurity spotlight on bug bounty researcher @yvvdwf**
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program: @yvvdwf ⌘ [Read more](https://github.blog/2021-11-01-cybersecurity-spotlight-bug-bounty-researcher-yvvdwf/) 2021-11-01T20:30:06Z **Game Off 2021 theme announcement**
The theme for this year’s Game Off is… …BUG! Your challenge, should you choose to accept it, is to create a game between now and December 1 incorporating the theme somehow, and submit it to ⌘ [Read more](https://github.blog/2021-11-01-game-off-2021-theme-announcement/) 2021-11-02T16:16:01Z **Blue-teaming for Exiv2, part 1: creating a security advisory process**
This blog post is the first in a series about hardening the security of the Exiv2 project. My goal is to share tips that will help you harden the security of your own project. ⌘ [Read more](https://github.blog/2021-11-02-blue-teaming-create-security-advisory-process/) 2021-11-03T15:08:47Z **Building the next phase of GitHub, together**
This morning, I shared the following post with Hubbers in response to Nat’s announcement about his next adventure. I am thrilled to take on the role of CEO to build the next phase of GitHub for our global community of software developers. ⌘ [Read more](https://github.blog/2021-11-03-building-the-next-phase-of-github-together/) 2021-11-03T15:08:17Z **Thank you, GitHub**
This morning, I sent the following post to the GitHub team. TL;DR: I’m moving on to my next adventure, and Thomas Dohmke (currently Chief Product Officer) will be GitHub’s next CEO. ⌘ [Read more](https://github.blog/2021-11-03-thank-you-github/) 2021-11-04T15:57:06Z **10 GitHub Actions resources to bookmark from the basics to CI/CD**
Tips on how to get started using GitHub Actions and resources to learn more about making it work for you. ⌘ [Read more](https://github.blog/2021-11-04-10-github-actions-resources-basics-ci-cd/) 2021-11-04T20:37:09Z **GitHub Availability Report: October 2021**
In October, we experienced one incident resulting in significant impact and degraded state of availability for the GitHub Codespaces service. ⌘ [Read more](https://github.blog/2021-11-04-github-availability-report-october-2021/) 2021-11-09T18:00:46Z **Three rules of bug fixing for better OSS security**
When you're fixing a bug, especially a security vulnerability, you should add a regression test, fix the bug, and find & fix variants. ⌘ [Read more](https://github.blog/2021-11-09-three-rules-bug-fixing-better-oss-security/) 2021-11-09T19:33:49Z **GitHub Enterprise Server 3.3 enhances CI/CD and adds a new security manager role**
This latest release sees the introduction of a new role, a new webhook for GitHub Actions, and a bright edge to dark mode. ⌘ [Read more](https://github.blog/2021-11-09-github-enterprise-server-3-3-enhances-ci-cd-and-adds-a-new-security-manager-role/) 2021-11-10T16:27:54Z **Make your monorepo feel small with Git’s sparse index**
The new sparse index feature makes it feel like you are working in a small repository when working in a focused portion of a monorepo. ⌘ [Read more](https://github.blog/2021-11-10-make-your-monorepo-feel-small-with-gits-sparse-index/) 2021-11-10T18:00:39Z **7 unique software collaboration features in GitHub Discussions**
Here are a few ways our teams use GitHub Discussions internally to build community, simplify workflows, and get key insights into our work. ⌘ [Read more](https://github.blog/2021-11-10-7-unique-software-collaboration-features-in-github-discussions/) 2021-11-12T17:30:15Z **Highlights from GitHub’s security roadmap at Universe 2021**
During Universe, we received a number of security questions ranging from our strategy to our advisories. Here's what we've got planned! ⌘ [Read more](https://github.blog/2021-11-12-highlights-github-security-roadmap-universe-2021/) 2021-11-12T22:00:36Z **Release Radar · October 2021 Edition**
What an incredible month it’s been for GitHub and our communities. Whilst we’ve been busy with GitHub Universe, our communities have been busy coding. It’s been a successful year for Hacktoberfest, with many first-time contributors ⌘ [Read more](https://github.blog/2021-11-12-release-radar-oct-2021/) 2021-11-15T17:42:15Z **Highlights from Git 2.34**
To celebrate this most recent release, here's GitHub's look at some of the most interesting features and changes introduced since last time. ⌘ [Read more](https://github.blog/2021-11-15-highlights-from-git-2-34/) 2021-11-15T23:00:52Z **GitHub’s commitment to npm ecosystem security**
We're sharing details of recent incidents on the npm registry, our investigations, and how we’re continuing to invest in the security of npm. ⌘ [Read more](https://github.blog/2021-11-15-githubs-commitment-to-npm-ecosystem-security/) 2021-11-16T14:00:01Z **The 2021 State of the Octoverse**
The State of the Octoverse analyzes data from millions of developers & repos to share trends across working habits, productivity, and career satisfaction. ⌘ [Read more](https://github.blog/2021-11-16-the-2021-state-of-the-octoverse/) 2021-11-16T18:00:02Z **Blue-teaming for Exiv2: adding custom CodeQL queries to code scanning**
The Exiv2 team tightened our security by enabling GitHub’s code scanning feature and adding custom queries tailored to the Exiv2 code base. ⌘ [Read more](https://github.blog/2021-11-16-adding-custom-codeql-queries-code-scanning/) 2021-11-16T21:00:47Z **GraphQL global ID migration update**
All newly created GraphQL objects now have IDs that conform to a new format, which we refer to as "next IDs." Learn how to migrate older IDs to the new format and why we're making the change. ⌘ [Read more](https://github.blog/2021-11-16-graphql-global-id-migration-update/) 2021-11-17T17:00:36Z **GitHub’s developer-first approach to content moderation**
GitHub puts the needs of developers at the core of our content moderation policies. Learn more about our approach and how you can contribute. ⌘ [Read more](https://github.blog/2021-11-17-githubs-developer-first-approach-to-content-moderation/) 2021-11-18T17:06:45Z **7 advanced workflow automation features with GitHub Actions**
Check out some advanced automation and CI/CD capabilities you can use today with GitHub Actions on any GitHub account. ⌘ [Read more](https://github.blog/2021-11-18-7-advanced-workflow-automation-features-with-github-actions/) 2021-11-19T18:41:19Z **What’s new from GitHub Changelog? October 2021 recap**
A public beta of the new GitHub Issues, a "security manager" role for organizations, a command palette beta, and lots more. ⌘ [Read more](https://github.blog/2021-11-19-whats-new-from-github-changelog-october-2021-recap/) 2021-11-19T21:21:48Z **In case you missed it, GitHub Education at Universe 2021!**
A recap of all the GitHub Education news from Universe 2021, including the new Intro to Web Dev Experience. ⌘ [Read more](https://github.blog/2021-11-19-in-case-you-missed-it-github-education-at-universe-2021/) 2021-11-22T17:27:15Z **Accelerate security adoption in your organization**
The GitHub Services Engineers have released the Advanced Security Enforcer GitHub Action to enable organizations to utilize code scanning in a consistent and automated way. ⌘ [Read more](https://github.blog/2021-11-22-accelerate-security-adoption-in-your-organization/) 2021-11-23T16:47:28Z **The Copyright Office expands your security research rights**
Recently, the Copyright Office responded to the calls to clarify the scope of protected security research. ⌘ [Read more](https://github.blog/2021-11-23-copyright-office-expands-security-research-rights/) 2021-11-23T17:37:46Z **How to squash bugs by enrolling in OSS-Fuzz**
OSS-Fuzz is Google’s awesome fuzzing service for open source projects. GitHub Security Lab's @kevinbackhouse describes enrolling a project. ⌘ [Read more](https://github.blog/2021-11-23-how-to-squash-bugs-by-enrolling-in-oss-fuzz/) 2021-11-23T20:16:17Z **Secure deployments with OpenID Connect & GitHub Actions now generally available**
GitHub Actions now supports OpenID Connect for secure deployment to different cloud providers via short-lived, auto-rotated tokens. ⌘ [Read more](https://github.blog/2021-11-23-secure-deployments-openid-connect-github-actions-generally-available/) 2021-11-29T17:38:13Z **GitHub Actions: reusable workflows is generally available**
DRY your Actions configuration with reusable workflows (and more!) ⌘ [Read more](https://github.blog/2021-11-29-github-actions-reusable-workflows-is-generally-available/) 2021-11-30T17:09:28Z **5 DevOps tips to speed up your developer workflow**
From learning YAML to scripting with Bash, here are a few simple tips for developers who want to speed up their workflows. ⌘ [Read more](https://github.blog/2021-11-30-5-devops-tips-to-speed-up-your-developer-workflow/) 2021-12-01T03:30:25Z **GitHub Externships: enabling India’s next generation of developers**
Are you a student in India? Applications are open for the GitHub Externships Winter Cohort! ⌘ [Read more](https://github.blog/2021-11-30-github-externships-enabling-indias-next-generation-of-developers/) 2021-12-01T18:01:09Z **Using ChatOps to help Actions on-call engineers**
You can multiply the impact of your domain experts by building their common workflows into ChatOps. ⌘ [Read more](https://github.blog/2021-12-01-using-chatops-to-help-actions-on-call-engineers/) 2021-12-01T20:14:04Z **GitHub Availability Report: November 2021**
In November, we experienced one incident resulting in significant impact and degraded state of availability for multiple services. ⌘ [Read more](https://github.blog/2021-12-01-github-availability-report-november-2021/) 2021-12-03T22:00:35Z **Release Radar · November 2021 Edition**
The end of the year is getting closer, and our communities are busy working away on their projects. While you’ve all been busy maintaining open source projects and shipping releases, we’ve created a new open ⌘ [Read more](https://github.blog/2021-12-03-release-radar-nov-2021/) 2021-12-06T17:30:08Z **Safeguard your containers with new container signing capability in GitHub Actions**
GitHub has partnered with the OpenSSF and Project Sigstore to add container image signing to our default “Publish Docker Container” workflow. ⌘ [Read more](https://github.blog/2021-12-06-safeguard-container-signing-capability-actions/) 2021-12-06T22:30:11Z **Write more secure code with the OWASP Top 10 Proactive Controls**
This lesser-known OWASP project aims to help developers prevent vulnerabilities from being introduced in the first place. ⌘ [Read more](https://github.blog/2021-12-06-write-more-secure-code-owasp-top-10-proactive-controls/) 2021-12-07T17:00:09Z **Enrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcement**
Today we're introducing enhanced login verification to the npm registry, and we will begin a staged rollout to maintainers beginning Dec 7. ⌘ [Read more](https://github.blog/2021-12-07-enrolling-npm-publishers-enhanced-login-verification-two-factor-authentication-enforcement/) 2021-12-08T01:04:26Z **GitHub Enterprise Server 3.3 is generally available**
GitHub Enterprise Server is now generally available for all customers. This release improves performance for CI/CD and for customers with large repositories. ⌘ [Read more](https://github.blog/2021-12-07-github-enterprise-server-3-3-is-generally-available/) 2021-12-08T17:00:01Z **Improving GitHub code search**
Today, we are rolling out a technology preview for GitHub code search, the next iteration for search, discovery, and navigation on GitHub. ⌘ [Read more](https://github.blog/2021-12-08-improving-github-code-search/) 2021-12-09T17:00:40Z **Introducing stack graphs**
Precise code navigation is powered by stack graphs, a new open source framework that lets you define the name binding rules for a programming language. ⌘ [Read more](https://github.blog/2021-12-09-introducing-stack-graphs/) 2021-12-09T17:00:28Z **Precise code navigation for Python, and code navigation in pull requests**
Code navigation is now available in PRs, and code navigation results for Python are now more precise. ⌘ [Read more](https://github.blog/2021-12-09-precise-code-navigation-python-code-navigation-pull-requests/) 2021-12-13T17:01:07Z **GitHub at the UN Internet Governance Forum**
Last week, GitHub joined the Internet Governance Forum to spread awareness of developers’ initiatives and public policy interests. ⌘ [Read more](https://github.blog/2021-12-13-github-at-the-un-internet-governance-forum/) 2021-12-13T17:45:31Z **What’s new from GitHub Changelog? November 2021 recap**
We shipped a ton of updates in November, from the push notification for PR review activities on the go, to an easy way to create Markdown links. ⌘ [Read more](https://github.blog/2021-12-13-whats-new-from-github-changelog-november-2021-recap/) 2021-12-13T19:06:34Z **GitHub’s response to Log4j vulnerability CVE-2021-44228**
On Thursday, December 9, 2021, GitHub was made aware of a vulnerability in the Log4j logging framework, CVE-2021-44228. ⌘ [Read more](https://github.blog/2021-12-13-githubs-response-to-log4j-vulnerability-cve-2021-44228/) 2021-12-14T17:11:00Z **How to define security requirements for your OSS project**
Defining your security requirements is the most important proactive control you can implement for your project. Here's how. ⌘ [Read more](https://github.blog/2021-12-14-how-to-define-security-requirements-for-your-oss-project/) 2021-12-14T19:46:00Z **Using GitHub’s security features to help identify Log4j exposure in your codebase**
Use GitHub’s security features to assess Apache Log4j exposure and, where possible, mitigate this vulnerability within your GitHub repositories. ⌘ [Read more](https://github.blog/2021-12-14-using-githubs-security-features-identify-log4j-exposure-codebase/) 2021-12-15T18:35:29Z **A brief history of code search at GitHub**
This blog post tells the story of why we built a new search engine optimized for code. ⌘ [Read more](https://github.blog/2021-12-15-a-brief-history-of-code-search-at-github/) 2021-12-16T17:04:20Z **5 automations every developer should be running**
Looking to avoid security vulnerabilities, buttons that don’t work, slow site speeds, or manually writing release notes? This one's for you. ⌘ [Read more](https://github.blog/2021-12-16-5-automations-every-developer-should-be-running/) 2021-12-16T17:59:56Z **Technical interviews via Codespaces**
Codespaces is a great tool for technical hiring exercises and helps level the playing field for candidates. ⌘ [Read more](https://github.blog/2021-12-16-technical-interviews-via-codespaces/) 2021-12-17T17:35:29Z **Getting started with GitHub Actions just got easier!**
When you want to create a workflow in the Actions tab of your repository, the recommendations are now based on an analysis of repo content. ⌘ [Read more](https://github.blog/2021-12-17-getting-started-with-github-actions-just-got-easier/) 2021-12-20T17:47:15Z **How to leverage security frameworks and libraries for secure code**
In this post, I’ll discuss how to apply OWASP Proactive Control C2: Leverage security frameworks and libraries. ⌘ [Read more](https://github.blog/2021-12-20-how-to-leverage-security-frameworks-and-libraries-for-secure-code/) 2021-12-21T17:55:56Z **How GitHub contributed to the Santa Clara Principles update**
GitHub was honored to contribute to the Santa Clara Principles on Transparency and Accountability in Content Moderation 2.0. ⌘ [Read more](https://github.blog/2021-12-21-how-github-contributed-santa-clara-principles-update/) 2021-12-28T17:00:37Z **GitHub’s top 10 blog posts of 2021**
As the year winds down, we're highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers. ⌘ [Read more](https://github.blog/2021-12-28-githubs-top-10-blog-posts-of-2021/) 2022-01-05T18:18:04Z **How the community powers GitHub Advanced Security with CodeQL queries**
The GitHub Security Lab’s CodeQL bounty program fuels GitHub Advanced Security with queries written by the open source community. ⌘ [Read more](https://github.blog/2022-01-05-how-the-community-powers-github-advanced-security-with-codeql-queries/) 2022-01-05T21:34:45Z **GitHub Availability Report: December 2021**
In December, we experienced no incidents resulting in service downtime to our core services. ⌘ [Read more](https://github.blog/2022-01-05-github-availability-report-december-2021/) 2022-01-12T17:56:11Z **How we ship GitHub Mobile every week**
Learn how the GitHub Mobile Team automates their release process with GitHub Actions. ⌘ [Read more](https://github.blog/2022-01-12-how-we-ship-github-mobile-every-week/) 2022-01-13T10:00:24Z **The Open Source Software Security Summit: securing the world’s code together**
My colleague Stormy Peters and I are proud to represent GitHub at the White House’s Open Source Software Security Summit to share how securing open source begins by empowering developers. ⌘ [Read more](https://github.blog/2022-01-13-open-source-software-security-summit-securing-the-worlds-code-together/) 2022-01-13T17:14:21Z **How five open source communities are using GitHub Discussions**
From answering questions about a new release to fielding feature requests, here’s how five open source communities use GitHub Discussions. ⌘ [Read more](https://github.blog/2022-01-13-how-five-open-source-communities-are-using-github-discussions/) 2022-01-13T20:23:31Z **Top-rated entries from Game Off 2021**
Here are the top games created in our annual game jam as rated and reviewed by the developers that made them. Game On! 🤘🏻 ⌘ [Read more](https://github.blog/2022-01-13-top-entries-from-game-off-2021/) 2022-01-18T17:41:41Z **How open source is supporting NASA’s new eyes in space**
With the successful liftoff of the James Webb Space Telescope, we ask our very own Arfon Smith about the history of open source and space science. ⌘ [Read more](https://github.blog/2022-01-18-how-open-source-is-supporting-nasas-new-eyes-in-space/) 2022-01-19T15:00:02Z **Reducing security risk in open source software with GitHub Actions and OpenSSF Scorecards V4**
We’re excited to announce the V4 release of the OpenSSF’s Scorecard project in partnership with Google. ⌘ [Read more](https://github.blog/2022-01-19-reducing-security-risk-oss-actions-opensff-scorecards-v4/) 2022-01-20T16:58:28Z **Open source creates value, but how do you measure it?**
When digital infrastructure is overlooked by governments, it isn't just a missed opportunity: policies may inadvertently endanger open source collaboration. ⌘ [Read more](https://github.blog/2022-01-20-open-source-creates-value-but-how-do-you-measure-it/) 2022-01-21T23:00:29Z **Release Radar · December 2021 Edition**
Many of us were wrapping up projects, emails, events, and getting ready for Christmas. While we were all busy getting ready for the festive season, our community was still hard at work shipping open source ⌘ [Read more](https://github.blog/2022-01-21-release-radar-dec-2021/) 2022-01-24T20:00:43Z **Highlights from Git 2.35**
The open source Git project just released Git 2.35. Here's GitHub's look at some of the most interesting features and changes introduced since last time. ⌘ [Read more](https://github.blog/2022-01-24-highlights-from-git-2-35/) 2022-02-04T23:00:58Z **Release Radar · January 2022 Edition**
Here's January's top staff picks on projects that shipped major version releases. ⌘ [Read more](https://github.blog/2022-02-04-release-radar-jan-2022/) 2022-02-03T00:00:24Z **GitHub Availability Report: January 2022**
In January, we experienced no incidents resulting in service downtime to our core services. ⌘ [Read more](https://github.blog/2022-02-02-github-availability-report-january-2022/) 2022-02-02T19:48:18Z **How to build a CI/CD pipeline with GitHub Actions in four simple steps**
A quick guide on the advantages of using GitHub Actions as your preferred CI/CD tool—and how to build a CI/CD pipeline with it. ⌘ [Read more](https://github.blog/2022-02-02-build-ci-cd-pipeline-github-actions-four-steps/) 2022-02-02T18:00:04Z **New sponsors-only repositories, custom amounts, and more**
Along with the release of sponsors-only repositories, here’s a look at what’s new and what’s next for Sponsors. ⌘ [Read more](https://github.blog/2022-02-02-new-sponsors-only-repositories-custom-amounts-and-more/) 2022-02-01T17:07:01Z **Code scanning and Ruby: turning source code into a queryable database**
A deep dive into how GitHub adds support for new languages to CodeQL. ⌘ [Read more](https://github.blog/2022-02-01-code-scanning-and-ruby-turning-source-code-into-a-queryable-database/) 2022-02-01T17:00:04Z **Top-100 npm package maintainers now require 2FA, and additional security-focused improvements to npm**
Starting today, we are rolling out mandatory 2FA to all maintainers of top-100 npm packages by dependents. ⌘ [Read more](https://github.blog/2022-02-01-top-100-npm-package-maintainers-require-2fa-additional-security/) 2022-01-31T17:03:37Z **Dependency graph now supports GitHub Actions**
The dependency graph helps developers and maintainers understand the code they depend on, and now includes GitHub Actions! ⌘ [Read more](https://github.blog/2022-01-31-dependency-graph-now-supports-github-actions/) 2022-01-27T23:35:14Z **2021 Transparency Report**
In GitHub's latest transparency report, we’re giving you a by-the-numbers look at how we responded to requests for user info and content removal. ⌘ [Read more](https://github.blog/2022-01-27-2021-transparency-report/) 2022-01-27T21:17:41Z **Thinking beyond SQL injection: OWASP tips for secure database access**
When it comes to secure database access, there's more to consider than SQL injections. OWASP Top 10 Proactive Control C3 offers guidance. ⌘ [Read more](https://github.blog/2022-01-27-beyond-sql-injection-owasp-tips-secure-database-access/) 2022-01-26T17:59:38Z **Get ready for Campus TV Season 2: 🌱 New Beginnings**
Learn new skills, build projects and meet like-minded students with the latest shows from the GitHub Education Stream Team. ⌘ [Read more](https://github.blog/2022-01-26-get-ready-for-campus-tv-season-2-new-beginnings/) 2022-02-08T19:11:24Z **Improving the developer experience for Dependabot alerts**
Today, we’re shipping improvements to Dependabot alerts that make them easier to understand and remediate. ⌘ [Read more](https://github.blog/2022-02-08-improving-developer-experience-dependabot-alerts/) 2022-02-09T20:24:56Z **Coordinated vulnerability disclosure (CVD) for open source projects**
A comprehensive guide for vulnerability reporters. ⌘ [Read more](https://github.blog/2022-02-09-coordinated-vulnerability-disclosure-cvd-open-source-projects/) 2022-02-10T17:56:42Z **How to start using reusable workflows with GitHub Actions**
Reusable workflows offer a simple and powerful way to avoid copying and pasting workflows across your repositories. ⌘ [Read more](https://github.blog/2022-02-10-using-reusable-workflows-github-actions/) 2022-02-11T17:30:43Z **Getting started with project planning on GitHub**
Stop context switching. Keep your team’s project planning next to your code. ⌘ [Read more](https://github.blog/2022-02-11-getting-started-with-project-planning-on-github/) 2022-02-15T17:17:19Z **The GitHub Stars in our eyes ⭐️**
Over the past year, the GitHub Stars have made a tremendous impact in the community with their influence, inspiring and building communities and creating content to help everyone. ⌘ [Read more](https://github.blog/2022-02-15-the-github-stars-in-our-eyes/) 2022-02-15T15:58:09Z **Announcing the 2022 MLH Fellowship Cohort, powered by GitHub**
The MLH Fellowship, powered by GitHub, is a 12-week internship alternative for aspiring software engineers. Meet the 2022 cohort! ⌘ [Read more](https://github.blog/2022-02-15-announcing-2022-mlh-fellowship-cohort-powered-by-github/) 2022-02-14T16:57:42Z **Include diagrams in your Markdown files with Mermaid**
A picture tells a thousand words. Now you can quickly create and edit diagrams in markdown using words with Mermaid support in your Markdown files. ⌘ [Read more](https://github.blog/2022-02-14-include-diagrams-markdown-files-mermaid/) 2022-02-15T23:23:39Z **GitHub Enterprise Server 3.4 improves developer productivity and adds reusable workflows to CI/CD**
The GitHub Enterprise Server 3.4 release candidate delivers enhancements to make life easier and more productive, from keyboard shortcuts to auto-generated release notes! ⌘ [Read more](https://github.blog/2022-02-15-ghes-3-4-developer-productivity-reusable-workflows-ci-cd/) 2022-02-16T17:38:40Z **Encoding and escaping untrusted data to prevent injection attacks**
Practical tips on how to apply OWASP Top 10 Proactive Control C4. ⌘ [Read more](https://github.blog/2022-02-16-encoding-escaping-untrusted-data-prevent-injection-attacks/) 2022-02-16T18:17:15Z **How to make the most out of a mentoring relationship**
Tips from our developer advocates on how and why to find a mentor. ⌘ [Read more](https://github.blog/2022-02-16-how-to-make-the-most-out-of-a-mentoring-relationship/) 2022-02-17T18:00:03Z **Code scanning finds more vulnerabilities using machine learning**
Today we launched new code scanning analysis features powered by machine learning. The experimental analysis finds more of the most common types of vulnerabilities. ⌘ [Read more](https://github.blog/2022-02-17-code-scanning-finds-vulnerabilities-using-machine-learning/) 2022-02-17T17:59:19Z **Leveraging machine learning to find security vulnerabilities**
A behind-the-scenes peek into the machine learning framework powering new code scanning security alerts. ⌘ [Read more](https://github.blog/2022-02-17-leveraging-machine-learning-find-security-vulnerabilities/) 2022-02-22T17:00:43Z **GitHub Advisory Database now open to community contributions**
Anyone can now provide additional information to further the community’s understanding and awareness of security advisories. ⌘ [Read more](https://github.blog/2022-02-22-github-advisory-database-now-open-to-community-contributions/) 2022-02-22T17:18:57Z **Get started with ease using security workflows!**
In-line with the other categories, workflows in the Security category will be recommended based on a repository's content. ⌘ [Read more](https://github.blog/2022-02-22-get-started-using-security-workflows/) 2022-02-23T18:10:01Z **Codespaces for the largest repositories just got faster**
The ability to prebuild codespaces is entering public beta. Enable fast environment creation times, regardless of the size and complexity of your repositories. ⌘ [Read more](https://github.blog/2022-02-23-codespaces-largest-repositories-faster/) 2022-02-23T19:54:16Z **A new way to understand your GitHub-hosted runner capacity**
Explore and understand your overall GitHub-hosted Actions runner capacity with the new runner view. ⌘ [Read more](https://github.blog/2022-02-23-new-way-understand-github-hosted-runner-capacity/) 2022-03-02T21:56:01Z **Our response to the war in Ukraine**
As the global response to the tragedies in Ukraine and other impacted regions continues to evolve, I wanted to share with our community an expansion of the message that I shared earlier this week with our Hubbers. ⌘ [Read more](https://github.blog/2022-03-02-our-response-to-the-war-in-ukraine/) 2022-03-02T23:24:53Z **GitHub Availability Report: February 2022**
In February, we experienced one incident resulting in significant impact to multiple GitHub services. ⌘ [Read more](https://github.blog/2022-03-02-github-availability-report-february-2022/) 2022-03-10T18:36:50Z **Improved management for GitHub Enterprise owners**
We've introduced several new features to help enterprise owners more easily manage their accounts, including two features now in public beta. ⌘ [Read more](https://github.blog/2022-03-10-improved-management-github-enterprise-owners/) 2022-03-16T14:37:06Z **Save time with partial re-runs in GitHub Actions**
It is now possible to re-run only failed jobs or a single job in GitHub Actions workflows. ⌘ [Read more](https://github.blog/2022-03-16-save-time-partial-re-runs-github-actions/) 2022-03-17T23:05:05Z **Release Radar · February 2022 Edition**
Our community has shipped lots of open source project updates in the last month. Here's a few of our staff picks. ⌘ [Read more](https://github.blog/2022-03-17-release-radar-feb-2022/) 2022-03-21T17:41:59Z **Validate all the things: improve your security with input validation!**
If there's one habit that can make software more secure, it's probably input validation. Here's how to apply OWASP Proactive Control C5 (Validate All Inputs) to your code. ⌘ [Read more](https://github.blog/2022-03-21-validate-all-things-input-validation/) 2022-03-21T21:20:42Z **Start working on GitHub Issues faster**
You can now create a branch to work on an issue directly from the issue page so that it's easier to get started right away. ⌘ [Read more](https://github.blog/2022-03-21-start-working-on-github-issues-faster/) 2022-03-22T17:48:06Z **Introducing the GHES repository cache**
If you're a GHES customer with heavy read traffic on your monorepo, check out the repository cache, especially if you have CI workloads distributed around the world. ⌘ [Read more](https://github.blog/2022-03-22-introducing-the-ghes-repository-cache/) 2022-03-22T23:47:44Z **Improving your GitHub feed**
Today, we are rolling out a new beta version of GitHub’s home feed, making it easier to discover projects, developers and more across GitHub. ⌘ [Read more](https://github.blog/2022-03-22-improving-your-github-feed/) 2022-03-23T16:30:24Z **GitHub Actions: secure self-hosted runners by limiting them to specific workflows**
You can now enforce consistent usage of self-hosted runner groups across your organization and enterprise. ⌘ [Read more](https://github.blog/2022-03-23-github-actions-secure-self-hosted-runners-specific-workflows/) 2022-03-23T20:39:01Z **An update on recent service disruptions**
Over the past few weeks, we have experienced multiple incidents due to the health of our database. We wanted to share what we know about these incidents while our team continues to address them. ⌘ [Read more](https://github.blog/2022-03-23-an-update-on-recent-service-disruptions/) 2022-03-25T18:00:04Z **Unlock all the GitHub secrets within Next.Tech’s newest experience: Break the Code 2!**
GitHub Education is fired up for the return of Next.Tech’s developer community competition: Break the Code 2. We've hacked in some new enigmas, cheat codes, and easter eggs for digital sleuths to uncover! ⌘ [Read more](https://github.blog/2022-03-25-unlock-github-secrets-next-techs-break-the-code-2/) 2022-03-28T17:00:12Z **How to secure your end-to-end supply chain on GitHub**
Securing your projects is no easy task, but end-to-end supply chain security is more top of mind than ever. We’ve seen bad actors expand their focus to taking over user accounts, commonly used dependencies, and also build systems. Defending against these attacks is hard, because there’s no one thing you can do to protect your […] ⌘ [Read more](https://github.blog/2022-03-28-how-to-secure-your-end-to-end-supply-chain-on-github/) 2022-03-29T16:30:04Z **GitHub Copilot now available for Visual Studio 2022**
GitHub Copilot is now available from Visual Studio 2022 for everyone in the technical preview. ⌘ [Read more](https://github.blog/2022-03-29-github-copilot-now-available-for-visual-studio-2022/) 2022-03-31T17:00:30Z **How GitHub does take home technical interviews**
We believe our technical interviews should be as similar as possible to the way we work at GitHub. ⌘ [Read more](https://github.blog/2022-03-31-how-github-does-take-home-technical-interviews/) 2022-04-04T17:57:12Z **Proactively prevent secret leaks with GitHub Advanced Security secret scanning**
Organizations with GitHub Advanced Security can now proactively protect against secret leaks with secret scanning’s new push protection feature. ⌘ [Read more](https://github.blog/2022-04-04-push-protection-github-advanced-security/) 2022-04-05T15:50:13Z **4 ways we use GitHub Actions to build GitHub**
From automating builds and releases to taking care of large-scale regression testing, here are a few ways we use GitHub Actions to build GitHub. ⌘ [Read more](https://github.blog/2022-04-05-4-ways-we-use-github-actions-to-build-github/) 2022-04-06T15:55:44Z **How Dependabot empowers you to keep your projects secure**
We want to take away the pain and effort of keeping your code secure, so check out how Dependabot empowers developers to keep to their projects secure. ⌘ [Read more](https://github.blog/2022-04-06-how-dependabot-empowers-you-to-keep-your-projects-secure/) 2022-04-06T18:13:40Z **Prevent the introduction of known vulnerabilities into your code**
The new dependency review action and API prevents the introduction of known supply chain vulnerabilities into your code. ⌘ [Read more](https://github.blog/2022-04-06-prevent-introduction-known-vulnerabilities-into-your-code/) 2022-04-06T18:45:52Z **GitHub Availability Report: March 2022**
In March, we experienced several incidents resulting in significant impact to multiple GitHub services. ⌘ [Read more](https://github.blog/2022-04-06-github-availability-report-march-2022/) 2022-04-07T13:18:08Z **Achieving SLSA 3 Compliance with GitHub Actions and Sigstore for Go modules**
Learn how to build packages with SLSA 3 provenance using GitHub Actions. ⌘ [Read more](https://github.blog/2022-04-07-slsa-3-compliance-with-github-actions/) 2022-04-07T18:00:41Z **Git Credential Manager: authentication for everyone**
Ensuring secure access to your source code is more important than ever. Git Credential Manager helps make that easy. ⌘ [Read more](https://github.blog/2022-04-07-git-credential-manager-authentication-for-everyone/) 2022-04-08T17:00:33Z **Release Radar · March 2022 Edition**
Each month, we highlight open source projects that have shipped major updates. These include everything from world-changing technology to developer tooling, and weekend projects. Here are our top staff picks on projects that shipped major version releases in March. Babylon.js 5.0 We featured Babylon.js in the November 2020 Release Radar. Since then, Babylon.js has come […] ⌘ [Read more](https://github.blog/2022-04-08-release-radar-mar-2022/) 2022-04-11T17:20:57Z **Performance at GitHub: deferring stats with rack.after_reply**
How we sped up GitHub.com by moving slow, non-critical code into rack.after\_reply. ⌘ [Read more](https://github.blog/2022-04-11-performance-at-github-deferring-stats-with-rack-after_reply/) 2022-04-12T17:00:32Z **What’s new in GitHub Discussions: Organization Discussions, polls, and more**
Today, we’re excited to bring you a few new features that will help you communicate, collaborate, and connect seamlessly with teams and communities about the software you’re building with the help of GitHub Discussions. ⌘ [Read more](https://github.blog/2022-04-12-whats-new-in-github-discussions-organization-discussions-polls-and-more/) 2022-04-12T17:51:41Z **Git security vulnerability announced**
Upgrade your local installation of Git, especially if you are using Git for Windows, or you use Git on a multi-user machine. ⌘ [Read more](https://github.blog/2022-04-12-git-security-vulnerability-announced/) 2022-04-14T16:30:11Z **Dependabot alerts now surface if your code is calling a vulnerability**
Today, we're shipping a new feature for Dependabot alerts which helps you better understand how you're affected by a vulnerability. ⌘ [Read more](https://github.blog/2022-04-14-dependabot-alerts-now-surface-if-code-is-calling-vulnerability/) 2022-04-15T22:35:02Z **Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators**
On April 12, GitHub Security began an investigation that uncovered evidence that an attacker abused stolen OAuth user tokens issued to two third-party OAuth integrators, Heroku and Travis-CI, to download data from dozens of organizations, including npm. Read on to learn more about the impact to GitHub, npm, and our users. ⌘ [Read more](https://github.blog/2022-04-15-security-alert-stolen-oauth-user-tokens/) 2022-04-18T16:44:50Z **Highlights from Git 2.36**
Another new release of Git is here! Take a look at some of our highlights on what's new in Git 2.36. ⌘ [Read more](https://github.blog/2022-04-18-highlights-from-git-2-36/) 2022-04-19T17:00:02Z **Sharing security expertise through CodeQL packs (Part I)**
Introducing CodeQL packs to help you codify and share your knowledge of vulnerabilities. ⌘ [Read more](https://github.blog/2022-04-19-sharing-security-expertise-through-codeql-packs-part-i/) 2022-04-20T16:00:57Z **Codespaces for multi-repository and monorepo scenarios**
We’re releasing exciting improvements that will streamline your Codespaces experience when working with multi-repository projects and monorepos. ⌘ [Read more](https://github.blog/2022-04-20-codespaces-multi-repository-monorepo-scenarios/) 2022-04-20T18:38:24Z **Organization profiles leading the way**
Organization profiles can now display custom content visible only to members of the organization. A new Member view can be tailored to show an alternative README and pinned private repositories. ⌘ [Read more](https://github.blog/2022-04-20-organization-profiles-leading-the-way/) 2022-04-21T16:30:04Z **Improving Git push times through faster server side hooks**
The history of pre-receive hooks, how we discovered that the performance was problematic, and how we went about safely replacing them. ⌘ [Read more](https://github.blog/2022-04-21-improving-git-push-times-through-faster-server-side-hooks/) 2022-04-21T21:14:55Z **Your guide to GitHub InFocus: Improving the way software development teams work in 2022**
We’re kicking off InFocus, a global virtual event focused on accelerating, securing, and improving the way software development teams work. ⌘ [Read more](https://github.blog/2022-04-21-guide-to-github-infocus-2022/) 2022-04-22T14:59:28Z **5 simple things every developer can do to ship more secure code**
From plug-and-play automations to protected branches, here are simple ways any developer can build more secure software on GitHub—all with a free account. ⌘ [Read more](https://github.blog/2022-04-22-5-simple-things-every-developer-can-do-to-ship-more-secure-code/) 2022-04-22T16:30:31Z **Removing the stigma of a CVE**
Do you worry that a CVE will hurt the reputation of your project? In reality, CVEs are a tracking number, and nothing more. Here's how we think of them at GitHub. ⌘ [Read more](https://github.blog/2022-04-22-removing-the-stigma-of-a-cve/) 2022-04-23T07:01:13Z **Celebrating 40 years of ZX Spectrum ❤️ 💛 💚 💙**
The ZX Spectrum, one of the best-selling microcomputers of all time, celebrates its 40 years anniversary today. Read more about how the community is still active - creating new content, archiving old content, and hacking on all sorts of hardware. ⌘ [Read more](https://github.blog/2022-04-23-zx-spectrum-40-year-anniversary/) 2022-04-26T16:00:26Z **GitHub Desktop 3.0 brings better integration for your pull requests**
GitHub Desktop 3.0 brings better integration with your GitHub Pull Requests. You can now receive real time notifications and review the status of your check runs for your pull request. ⌘ [Read more](https://github.blog/2022-04-26-github-desktop-3-0-brings-better-integration-for-your-pull-requests/) 2022-04-28T15:55:56Z **Best practices to keep your projects secure on GitHub**
These days software is subject to an ever-changing threat landscape. Check out the many ways you can keep your projects secure on GitHub today. ⌘ [Read more](https://github.blog/2022-04-28-best-practices-to-keep-your-projects-secure-on-github/) 2022-04-29T15:00:02Z **Bringing code navigation to communities**
Thanks to the efforts of the Elixir community, GitHub supports code navigation for Elixir repositories. Read how favorite language can add this support too! ⌘ [Read more](https://github.blog/2022-04-29-bringing-code-navigation-to-communities/) 2022-05-02T16:26:29Z **Being friendly: Strategies for friendly fork management**
This is the second and final post in a series describing friendly forks and alternative strategies for managing them. ⌘ [Read more](https://github.blog/2022-05-02-friend-zone-strategies-friendly-fork-management/) 2022-05-04T15:04:37Z **Software security starts with the developer: Securing developer accounts with 2FA**
GitHub will require all users who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. ⌘ [Read more](https://github.blog/2022-05-04-software-security-starts-with-the-developer-securing-developer-accounts-with-2fa/) 2022-05-04T22:01:17Z **GitHub Availability Report: April 2022**
In April, we experienced two distinct incidents resulting in significant impact and degraded state of availability for Codespaces and GitHub Packages. ⌘ [Read more](https://github.blog/2022-05-04-github-availability-report-april-2022/) 2022-05-05T17:00:25Z **The ReadME Project Q&A: What you need to know about teaching technical skills**
Teaching is a great way to not only help others but to better learn a topic yourself. ⌘ [Read more](https://github.blog/2022-05-05-the-readme-project-qa-what-you-need-to-know-about-teaching-technical-skills/) 2022-05-05T20:37:07Z **20 of our favorite games + source code from Ludum Dare 50**
20 of our favorite games plus source code from the latest Ludum Dare competition. ⌘ [Read more](https://github.blog/2022-05-05-ludum-dare-50/) 2022-05-06T15:52:42Z **Today’s most common security vulnerabilities explained**
We're taking a look at some of the most common security vulnerabilities and detailing how developers can best protect themselves. ⌘ [Read more](https://github.blog/2022-05-06-todays-most-common-security-vulnerabilities-explained/) 2022-05-09T15:00:00Z **Prepare for next semester with GitHub Global Campus and Codespaces**
Teachers, it is now your turn to join GitHub Global Campus with our student community! Get access to exclusive benefits, programs, and the Power of Codespaces at no cost in GitHub Classroom! ⌘ [Read more](https://github.blog/2022-05-09-prepare-for-next-semester-with-github-global-campus-and-codespaces/) 2022-05-09T16:00:53Z **Supercharging GitHub Actions with Job Summaries**
You can now output and group custom Markdown content on the Actions run summary page. ⌘ [Read more](https://github.blog/2022-05-09-supercharging-github-actions-with-job-summaries/) 2022-05-10T16:00:41Z **Enhanced 2FA experience for your npm account**
Late last year, in response to an unprecedented series of account takeovers resulting from the compromise of developer accounts without 2FA enabled, we committed to a variety of enhancements to the npm registry to make two-factor authentication (2FA) adoption easier for developers. Today, we are launching a public beta for a significantly improved 2FA experience […] ⌘ [Read more](https://github.blog/2022-05-10-enhanced-2fa-experience-for-your-npm-account/) 2022-05-11T15:00:36Z **Open Source Monthly – May 2022 Edition**
Introduction Open Sauced, GitHub’s Explore page, Hacktoberfest, and First Timers Only help folks discover open source projects. This monthly series–Open Source Monthly—will add to these efforts by helping: First-time contributors find the right project to contribute to Corporations and individuals find a new project to sponsor Open source maintainers gain more consistent contributors and sponsors […] ⌘ [Read more](https://github.blog/2022-05-11-open-source-monthly-may-2022-edition/) 2022-05-11T18:00:20Z **Graduation is here! Celebrate the Class of 2022, and join GitHub on June 11 🎓**
This year, thousands of students from around the world came together and redefined the world we live in, how we learn, and how we move forward. We are honored to be part of the experience and eager to celebrate this milestone. So on June 11 we celebrate the Class of 2022 and welcome them to […] ⌘ [Read more](https://github.blog/2022-05-11-graduation-is-here-celebrate-the-class-of-2022-and-join-github-on-june-11/) 2022-05-16T16:02:19Z **How we’re using projects to build projects**
At GitHub we use GitHub to build our own products, and the new projects experience is no different. Check out how our team uses projects to build powerful project planning for developers. ⌘ [Read more](https://github.blog/2022-05-16-how-were-using-projects-to-build-projects/) 2022-05-16T16:00:51Z **GitHub Achieves ISO/IEC 27001:2013 Certification!**
GitHub’s Information Security Management System (ISMS) has been certified against ISO 27001:2013, an internationally recognized standard for security program best practices. ⌘ [Read more](https://github.blog/2022-05-16-github-achieves-iso-iec-270012013-certification/) 2022-05-16T22:29:48Z **How to measure innersource across your organization**
The innersource contribution percentage is the rate of contributions from people outside the team that originally authored the software. Let’s dive into what it can look like for your organization. ⌘ [Read more](https://github.blog/2022-05-16-how-to-measure-innersource-across-your-organization/) 2022-05-18T21:50:03Z **Securing and delivering high-quality code with innersource metrics**
With innersource, it’s important to measure both the amount of innersource activity and the quality of the code being created. Here’s how. ⌘ [Read more](https://github.blog/2022-05-18-securing-and-delivering-high-quality-code-with-innersource-metrics/) 2022-05-19T16:48:04Z **How we’re continuing to enable all developers to build**
Learn about what GitHub is doing to make their products more inclusive, and what’s next. ⌘ [Read more](https://github.blog/2022-05-19-how-were-continuing-to-enable-all-developers-to-build/) 2022-05-19T17:41:03Z **Math support in Markdown**
Mathematical expressions are key to information sharing amongst engineers, scientists, data scientists, and mathematicians. Today we are pleased to announce that math expressions can be rendered in Markdown on GitHub using $$ as a delimiter for code blocks with math content or the $ delimiter for inline math expressions. ⌘ [Read more](https://github.blog/2022-05-19-math-support-in-markdown/) 2022-05-20T15:27:38Z **Action needed by GitHub Connect customers using GHES 3.1 and older to adopt new authentication token format updates**
Upgrade to GHES 3.2 or newer by June 3rd to continue using GitHub Connect. ⌘ [Read more](https://github.blog/2022-05-20-action-needed-by-github-connect-customers-using-ghes-3-1-and-older-to-adopt-new-authentication-token-format-updates/) 2022-05-20T16:00:05Z **Release Radar · April 2022 Edition**
Each month, we highlight open source projects that have shipped major updates. These include everything from world-changing technology to developer tooling, and weekend projects. Here are our top staff picks on projects that shipped major version releases in April. Flyte 1.0 I was lucky enough to discover Flyte during Hacktoberfest last year. Now, Flyte has […] ⌘ [Read more](https://github.blog/2022-05-20-release-radar-apr-2022/) 2022-05-23T17:54:46Z **Eight years of the GitHub Security Bug Bounty program**
It was another record year for our Security Bug Bounty program. We're excited to highlight some achievements we’ve made together with the bounty community from 2021! ⌘ [Read more](https://github.blog/2022-05-23-eight-years-of-the-github-security-bug-bounty-program/) 2022-05-24T03:30:37Z **GitHub Sponsors launches in India**
GitHub Sponsors is now available to all developers in India – no more waitlist, you can sign up right away! ⌘ [Read more](https://github.blog/2022-05-23-github-sponsors-launches-in-india/) 2022-05-24T16:00:53Z **Improved REST API documentation**
We’re excited to announce some big improvements to our REST API documentation. We know developers rely on this documentation to integrate with GitHub, and we are committed to making it trustworthy, easy to find, and easy to use. ⌘ [Read more](https://github.blog/2022-05-24-improved-rest-api-documentation/) 2022-05-25T22:22:22Z **How we use Dependabot to secure GitHub**
A two-part story about how GitHub’s Product Security Engineering team rolled out Dependabot internally to track vulnerable dependencies, and how GitHub tracks and prioritizes technical debt. ⌘ [Read more](https://github.blog/2022-05-25-how-we-use-dependabot-to-secure-github/) 2022-05-27T04:37:28Z **npm security update: Attack campaign using stolen OAuth tokens**
npm's impact analysis of the attack campaign using stolen OAuth tokens and additional findings. ⌘ [Read more](https://github.blog/2022-05-26-npm-security-update-oauth-tokens/) 2022-05-31T08:00:03Z **Top games + source code from Gamedev.js Jam 2022**
The recently-ended Gamedev.js Jam 2022 encouraged game developers to create web games and share their sources on GitHub. GitHub Star ⭐️ @end3r shares the best 13 entries and sees what experts and other participants think of them. ⌘ [Read more](https://github.blog/2022-05-31-top-games-source-code-from-gamedev-js-jam-2022/) 2022-05-31T16:36:05Z **GitHub Enterprise Server 3.5 is now generally available**
GitHub Enterprise Server 3.5 is available now, including access to the Container registry, the addition of Dependabot, enhanced administrator capabilities, and features for GitHub Advanced Security. ⌘ [Read more](https://github.blog/2022-05-31-github-enterprise-server-3-5-is-now-generally-available/) 2022-06-01T13:00:43Z **GitHub Sponsors launches in Brazil**
GitHub Sponsors is now available in Brazil—an exciting expansion for one of our fastest growing developer communities. ⌘ [Read more](https://github.blog/2022-06-01-github-sponsors-launches-in-brazil/) 2022-06-01T16:28:58Z **Connecting to a private network from GitHub-hosted Actions runners**
Several ways for GitHub-hosted Actions runners to connect to resources on your private network. ⌘ [Read more](https://github.blog/2022-06-01-connecting-to-a-private-network-from-github-hosted-actions-runners/) 2022-06-01T18:55:09Z **GitHub Availability Report: May 2022**
In May, we experienced three distinct incidents resulting in significant impact to multiple services across GitHub.com. This report also sheds light into the billing incident that impacted Actions and Codespaces users in April. ⌘ [Read more](https://github.blog/2022-06-01-github-availability-report-may-2022/) 2022-06-01T19:10:48Z **Welcome to Maintainer Month! 🎉**
During the month of June, we’re holding space for open source maintainers to gather, share, and be celebrated. ⌘ [Read more](https://github.blog/2022-06-01-welcome-to-maintainer-month/) 2022-06-01T21:09:27Z **GitHub Team or Free? How to choose the right plan**
Read about all the features you may not have known come on the GitHub Free plan, and how to choose the right plan for you. ⌘ [Read more](https://github.blog/2022-06-01-github-team-or-free-how-to-choose-the-right-plan/) 2022-06-02T16:52:14Z **What’s new in security and user management for GitHub Enterprise**
Learn how you can securely manage users with the latest ships for GitHub Enterprise. ⌘ [Read more](https://github.blog/2022-06-02-whats-new-in-security-and-user-management-for-github-enterprise/) 2022-06-03T17:31:19Z **A beginner’s guide to CI/CD and automation on GitHub**
CI/CD and workflow automation are native capabilities on GitHub platform. Here’s how to start using them and speed up your workflows. ⌘ [Read more](https://github.blog/2022-06-03-a-beginners-guide-to-ci-cd-and-automation-on-github/) 2022-06-06T16:15:52Z **Introducing GitHub Skills**
Today, we’re announcing GitHub Skills, a new learning experience to help you throughout your GitHub journey. ⌘ [Read more](https://github.blog/2022-06-06-introducing-github-skills/) 2022-06-07T19:55:45Z **One developer’s journey bringing Dependabot to GitHub Enterprise Server**
A personal story about building the feature you want and sharing it with the world. ⌘ [Read more](https://github.blog/2022-06-07-one-developers-journey-bringing-dependabot-to-github-enterprise-server/) 2022-06-08T15:00:23Z **Sunsetting Atom**
We are archiving Atom and all projects under the Atom organization for an official sunset on December 15, 2022. ⌘ [Read more](https://github.blog/2022-06-08-sunsetting-atom/) 2022-06-09T15:00:55Z **Introducing Entitlements: GitHub’s open source Identity and Access Management solution**
We're excited to announce that we're open sourcing our Identity and Access Management solution: Entitlements. ⌘ [Read more](https://github.blog/2022-06-09-introducing-entitlements-githubs-open-source-identity-and-access-management-solution/) 2022-06-09T15:00:28Z **Introducing Achievements: recognizing the many stages of a developer’s coding journey**
Available in public beta today, we're announcing Achievements as a new way to commemorate milestones on GitHub. ⌘ [Read more](https://github.blog/2022-06-09-introducing-achievements-recognizing-the-many-stages-of-a-developers-coding-journey/) 2022-06-09T20:47:19Z **Dependabot Updates hit GA in GHES**
Dependabot is generally available in GitHub Enterprise Server 3.5. Here is how to set up Dependabot on your instance. ⌘ [Read more](https://github.blog/2022-06-09-dependabot-updates-hit-ga-in-ghes/) 2022-06-10T18:37:03Z **How we think about browsers**
Discover how GitHub thinks about browser support, look at usage patterns, and learn about the tools we use to make sure our customers are getting the best experience. ⌘ [Read more](https://github.blog/2022-06-10-how-we-think-about-browsers/) 2022-06-10T19:12:59Z **Implementing a robust digital identity**
How can you robustly assert and identify a user’s identity? ⌘ [Read more](https://github.blog/2022-06-10-implementing-a-robust-digital-identity/) 2022-06-13T20:47:28Z **Open Source Monthly: June 2022 Edition**
June's Open Source Monthly features Mondos–a community-focused company building software and hardware that designs digital devices with respect for users' time, attention, and well-being. ⌘ [Read more](https://github.blog/2022-06-13-open-source-monthly-june-2022-edition/) 2022-06-14T16:55:42Z **How can the United States build its Open Source Software policy?**
We share a recap of a recent roundtable event about what a federal open source software policy could look like in the United States. ⌘ [Read more](https://github.blog/2022-06-14-how-can-the-united-states-build-its-open-source-software-policy/) 2022-06-14T19:04:41Z **Accelerating GitHub theme creation with color tooling**
Learn why the GitHub Design Infrastructure team built a dedicated color tool and how they use it to create new color palettes for GitHub. ⌘ [Read more](https://github.blog/2022-06-14-accelerating-github-theme-creation-with-color-tooling/) 2022-06-15T15:46:26Z **GitHub now publishes malware advisories in the GitHub Advisory Database**
To combat the prevalence of malware in the open source ecosystem, GitHub now publishes malware occurrences in the GitHub Advisory Database. These advisories power Dependabot alerts and remain forever free and usable by the community. ⌘ [Read more](https://github.blog/2022-06-15-github-now-publishes-malware-advisories-in-the-github-advisory-database/) 2022-06-15T17:00:27Z **Prebuilding codespaces is generally available**
Teams and GHEC customers can now create blazing fast codespaces, even for your largest and most complex projects. ⌘ [Read more](https://github.blog/2022-06-15-prebuilding-codespaces-is-generally-available/) 2022-06-16T00:29:33Z **Git Merge 2022**
Git Merge, the conference dedicated to bringing the Git community together returns on September 14-15 in Chicago, Illinois. ⌘ [Read more](https://github.blog/2022-06-15-git-merge-2022/) 2022-06-16T16:00:52Z **The Android kernel mitigations obstacle race**
In this post I’ll exploit CVE-2022-22057, a use-after-free in the Qualcomm gpu kernel driver, to gain root and disable SELinux from the untrusted app sandbox on a Samsung Z flip 3. I’ll look at various mitigations that are implemented on modern Android devices and how they affect the exploit. ⌘ [Read more](https://github.blog/2022-06-16-the-android-kernel-mitigations-obstacle-race/) 2022-06-16T22:05:03Z **Release Radar · May 2022 Edition**
Each month, we highlight open source projects that have shipped major updates. These projects can include everything from world-changing technology to developer tooling, and weekend hobbies. We cover what the project is and some of their breaking changes. Read about the project, and browse their repositories. Without further ado, here are our top staff picks […] ⌘ [Read more](https://github.blog/2022-06-16-release-radar-may-2022/) 2022-06-17T19:00:48Z **Creating a more comprehensive dependency graph with build time detection**
Expand the completeness of your dependency graph by using the dependency submission API, which will create more comprehensive alerts on supply chain vulnerabilities ⌘ [Read more](https://github.blog/2022-06-17-creating-comprehensive-dependency-graph-build-time-detection/) 2022-06-20T17:00:12Z **GitHub enables the development of functional safety applications by adding support for coding standards AUTOSAR C++ and CERT C++**
GitHub is excited to announce the release of CodeQL queries that implement the standards CERT C++ and AUTOSAR C++. These queries can aid developers looking to demonstrate ISO 26262 Part 6 process compliance. ⌘ [Read more](https://github.blog/2022-06-20-adding-support-for-coding-standards-autosar-c-and-cert-c/) 2022-06-21T16:04:44Z **GitHub Copilot is generally available to all developers**
We’re making GitHub Copilot, an AI pair programmer that suggests code in your editor, generally available to all developers for $10 USD/month or $100 USD/year. It will also be free to use for verified students and maintainers of popular open source projects. ⌘ [Read more](https://github.blog/2022-06-21-github-copilot-is-generally-available-to-all-developers/) 2022-06-22T21:04:19Z **What’s new in Codespaces for Organizations**
We’re releasing exciting functionalities that will enable organizations to confidently manage and scale with Codespaces. ⌘ [Read more](https://github.blog/2022-06-22-whats-new-in-codespaces-for-organizations/) 2022-06-24T15:32:25Z **Thank you to our maintainers**
To celebrate Maintainer Month, GitHub has invested an additional $500,000 to help sponsor the open source projects that it depends on. ⌘ [Read more](https://github.blog/2022-06-24-thank-you-to-our-maintainers/) 2022-06-27T18:01:23Z **Highlights from Git 2.37**
The open source Git project just released Git 2.37. Take a look at some of our highlights from the latest release. ⌘ [Read more](https://github.blog/2022-06-27-highlights-from-git-2-37/) 2022-06-27T20:24:52Z **GitHub Advisory Database now supports Erlang and Elixir packages!**
We’re excited to announce that the GitHub Advisory Database now includes curated security advisories on Erlang, Elixir, and more. ⌘ [Read more](https://github.blog/2022-06-27-github-advisory-database-now-supports-erlang-and-elixir-packages/) 2022-06-28T17:00:06Z **Improving Git protocol security on GitHub Enterprise Server**
The recent changes to improve protocol security on GitHub.com are now coming to GitHub Enterprise Server, starting with version 3.6. ⌘ [Read more](https://github.blog/2022-06-28-improving-git-protocol-security-on-github-enterprise-server/) 2022-06-29T17:00:02Z **Improve Git monorepo performance with a file system monitor**
Monorepo performance can suffer due to the sheer number of files in your working directory. Git’s new builtin file system monitor makes it easy to speed up monorepo performance. ⌘ [Read more](https://github.blog/2022-06-29-improve-git-monorepo-performance-with-a-file-system-monitor/) 2022-06-29T18:39:46Z **The Chromium super (inline cache) type confusion**
In this post I'll exploit CVE-2022-1134, a type confusion in Chrome that I reported in March 2022, which allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site. I'll also look at some past vulnerabilities of this type and some implementation details of inline cache in V8, the JavaScript engine of Chrome. ⌘ [Read more](https://github.blog/2022-06-29-the-chromium-super-inline-cache-type-confusion/) 2022-06-30T15:11:39Z **What to do when your open source project becomes a community?**
Maintainers answer your questions about how to manage an open source project that grows into a community. ⌘ [Read more](https://github.blog/2022-06-30-what-to-do-when-your-open-source-project-becomes-a-community/) 2022-06-30T15:00:47Z **Announcing the summer 2022 MLH Fellowship GitHub Contributors**
Meet the 2022 MLH Fellowship cohort! This 12-week internship alternative is for aspiring software engineers, and powered by GitHub. ⌘ [Read more](https://github.blog/2022-06-30-announcing-the-summer-2022-mlh-fellowship-github-contributors/) 2022-06-30T19:34:33Z **Write Better Commits, Build Better Projects**
High-quality Git commits are the key to a maintainable and collaborative open- or closed-source project. Learn strategies to improve and use commits to streamline your development process. ⌘ [Read more](https://github.blog/2022-06-30-write-better-commits-build-better-projects/) 2022-07-01T15:22:53Z **How the GitHub Security Team uses projects and GitHub Actions for planning, tracking, and more**
Can projects and GitHub Actions be used by your non-developer teams? They absolutely can. Check out how our Security Team uses GitHub to run the department effortlessly. ⌘ [Read more](https://github.blog/2022-07-01-how-the-github-security-team-uses-projects-and-github-actions-for-planning-tracking-and-more/) 2022-07-01T17:00:20Z **Extend your dependency information in the GitHub Dependency Graph with new GitHub Actions**
New Actions from Anchore, NowSecure, SBT, and Trivy are now available to create a more comprehensive GitHub Dependency Graph. ⌘ [Read more](https://github.blog/2022-07-01-extend-your-dependency-information-in-the-github-dependency-graph-with-new-github-actions/) 2022-07-06T08:00:15Z **Managing a game dev community with GitHub Actions**
A Little Game Called Mario is an open source, collectively developed hell project. Anyone and everyone is welcome to contribute their unique talents to make both the player and developer experience more enjoyable. Find out how the collective leverages GitHub Actions to manage this wonderful little community. ⌘ [Read more](https://github.blog/2022-07-06-managing-a-game-dev-community/) 2022-07-06T16:00:13Z **GitHub Availability Report: June 2022**
In June, we experienced four incidents resulting in significant impact to multiple GitHub.com services. This report also sheds light into an incident that impacted several GitHub.com services in May. ⌘ [Read more](https://github.blog/2022-07-06-github-availability-report-june-2022/) 2022-07-07T18:00:44Z **Top tips for creating a healthy and sustainable open source community**
Read about the six key themes, and tips for each, that ensure sustainable and healthy open source communities. ⌘ [Read more](https://github.blog/2022-07-07-healthy-and-sustainable-communities/) 2022-07-14T16:05:19Z **Research: How GitHub Copilot helps improve developer productivity**
We surveyed more than 2,000 developers about whether GitHub Copilot helped them be more productive and improved their coding. Then, we matched this qualitative feedback and subjective perception with quantitative data around objective usage measurements and productivity. ⌘ [Read more](https://github.blog/2022-07-14-research-how-github-copilot-helps-improve-developer-productivity/) 2022-07-18T16:06:57Z **Open Source Monthly: July 2022 Edition**
July's Open Source Monthly features Zag.js, which leverages state machines to make framework agnostic components. ⌘ [Read more](https://github.blog/2022-07-18-open-source-monthly-july-2022-edition/) 2022-07-19T16:15:27Z **6 strategic ways to level up your CI/CD pipeline**
From incorporating accessibility testing to implementing blue-green deployment models, here are six practical and strategic ways to improve your CI/CD pipeline. ⌘ [Read more](https://github.blog/2022-07-19-6-strategic-ways-to-level-up-your-ci-cd-pipeline/) 2022-07-20T15:58:14Z **Here’s how academic research is shaping GitHub Discussions**
We strive to understand how developers collaborate and work on GitHub, and we sometimes partner with academics to better understand how we can improve our products. Here's how we did that to build and evolve GitHub Discussions. ⌘ [Read more](https://github.blog/2022-07-20-heres-how-academic-research-is-shaping-github-discussions/) 2022-07-21T16:00:51Z **Tips & tricks for using GitHub projects for personal productivity**
GitHub Issues is a core component of how developers get things done and, as we built more project planning capabilities into GitHub, we’ve found some fun and unique ways to use the new projects experience for personal productivity. ⌘ [Read more](https://github.blog/2022-07-21-tips-tricks-for-using-github-projects-for-personal-productivity/) 2022-07-26T16:00:06Z **Introducing even more security enhancements to npm**
New npm security enhancements include an improved login and publish experience with the npm CLI, connected GitHub and Twitter accounts, and a new CLI command to verify the integrity of packages in npm. ⌘ [Read more](https://github.blog/2022-07-26-introducing-even-more-security-enhancements-to-npm/) 2022-07-26T17:00:36Z **Launching GitHub Community: Powered by GitHub Discussions**
Today, we’re launching GitHub Community, which brings together GitHub Community Forum, GitHub Education Forum, and product feedback into a free, in-product, single space for all user-to-user interactions. ⌘ [Read more](https://github.blog/2022-07-26-launching-github-community-powered-by-github-discussions/) 2022-07-27T16:00:10Z **Planning next to your code – GitHub Projects is now generally available**
Today, we are announcing the general availability of the new and improved Projects powered by GitHub Issues. GitHub Projects connects your planning directly to the work your teams are doing in GitHub and flexibly adapts to whatever your team needs at any point. ⌘ [Read more](https://github.blog/2022-07-27-planning-next-to-your-code-github-projects-is-now-generally-available/) 2022-07-27T17:00:35Z **Corrupting memory without memory corruption**
In this post I’ll exploit CVE-2022-20186, a vulnerability in the Arm Mali GPU kernel driver and use it to gain arbitrary kernel memory access from an untrusted app on a Pixel 6. This then allows me to gain root and disable SELinux. This vulnerability highlights the strong primitives that an attacker may gain by exploiting errors in the memory management code of GPU drivers. ⌘ [Read more](https://github.blog/2022-07-27-corrupting-memory-without-memory-corruption/) 2022-07-27T17:10:05Z **Release Radar · June 2022 Edition**
It’s been a crazy couple of months with the end of financial year and lots of products shipping. Our community has been hard at work shipping projects too. These projects can include everything from world-changing technology to developer tooling, and weekend hobbies. Here are some of these open source projects that released major updates this […] ⌘ [Read more](https://github.blog/2022-07-27-release-radar-jun-2022/) 2022-07-28T13:00:07Z **GitHub Sponsors available in 30 new regions**
GitHub Sponsors expands globally with 30 newly supported regions, bringing the total to 68. ⌘ [Read more](https://github.blog/2022-07-28-github-sponsors-available-in-30-new-regions-2/) 2022-07-28T17:00:14Z **Marketing for maintainers: Promote your project to users and contributors**
Marketing your open source project can be intimidating, but three experts share their insider tips and tricks for how to get your hard work on the right people’s radars. ⌘ [Read more](https://github.blog/2022-07-28-marketing-for-maintainers-how-to-promote-your-project-to-both-users-and-contributors/) 2022-08-02T13:00:52Z **Streamline virtual hackathon events with the new Hackathon In The Cloud Experience**
Attention all students! Make managing your virtual hackathon events even easier with the new Hackathon In The Cloud Experience. ⌘ [Read more](https://github.blog/2022-08-02-streamline-virtual-hackathon-events-with-the-new-hackathon-in-the-cloud-experience/) 2022-08-03T16:00:30Z **GitHub Availability Report: July 2022**
In July, we experienced one incident that resulted in degraded performance for Codespaces. This report also acknowledges two incidents that impacted multiple GitHub.com services in June. ⌘ [Read more](https://github.blog/2022-08-03-github-availability-report-july-2022/) 2022-08-04T16:00:08Z **5 simple things you can do with GitHub Packages to level up your workflows**
From hosting private packages in a private repository to tightening your security profile with GITHUB\_TOKEN, here are five simple ways you can streamline your workflow with GitHub Packages. ⌘ [Read more](https://github.blog/2022-08-04-5-simple-things-you-can-do-with-github-packages-to-level-up-your-workflows/) 2022-08-05T17:00:38Z **Release Radar · July 2022 Edition**
While some of us have been wrapping up the financial year, and enjoying vacation time, others have been hard at work shipping open source projects and releases. These projects include everything from world-changing technology to developer tooling, and weekend hobbies. Here are some of the open source projects that released major version updates this July. […] ⌘ [Read more](https://github.blog/2022-08-05-release-radar-jul-2022/) 2022-08-08T15:00:11Z **All GitHub Enterprise users now have access to the security overview**
Today, we’re expanding access to the GitHub security overview! All GitHub Enterprise customers now have access to the security overview, not just those with GitHub Advanced Security. Additionally, all users within an enterprise can now access the security overview, not just admins and security managers. ⌘ [Read more](https://github.blog/2022-08-08-all-github-enterprise-users-now-have-access-to-the-security-overview/) 2022-08-08T16:22:23Z **New request for comments on improving npm security with Sigstore is now open**
Supply chain attacks exploit our implicit trust of open source to hurt developers and our customers. Read our proposal for how npm will significantly reduce supply chain attacks by signing packages with Sigstore. ⌘ [Read more](https://github.blog/2022-08-08-new-request-for-comments-on-improving-npm-security-with-sigstore-is-now-open/) 2022-08-09T15:00:27Z **Dependabot now alerts for vulnerable GitHub Actions**
GitHub Actions gives teams access to powerful, native CI/CD capabilities right next to their code hosted in GitHub. Starting today, GitHub will send a Dependabot alert for vulnerable GitHub Actions, making it even easier to stay up to date and fix security vulnerabilities in your actions workflows. ⌘ [Read more](https://github.blog/2022-08-09-dependabot-now-alerts-for-vulnerable-github-actions/) 2022-08-10T16:00:29Z **GitHub Pages now uses Actions by default**
As GitHub Pages, home to 16 million websites, approaches its 15th anniversary, we’re excited to announce that all sites now build and deploy with GitHub Actions. ⌘ [Read more](https://github.blog/2022-08-10-github-pages-now-uses-actions-by-default/) 2022-08-15T15:00:07Z **The next step for LGTM.com: GitHub code scanning!**
Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com. ⌘ [Read more](https://github.blog/2022-08-15-the-next-step-for-lgtm-com-github-code-scanning/) 2022-08-16T21:00:21Z **2022 Transparency Report: January to June**
We’re reporting on a six-month period rather than annually to increase our level of transparency. For this report, we’ve continued with the more granular reporting we began in our 2021 reports. ⌘ [Read more](https://github.blog/2022-08-16-2022-transparency-report-january-to-june/) 2022-08-17T13:00:01Z **GitHub Enterprise Server 3.6 is now generally available**
GitHub Discussions and Audit Log Streaming, new automation features, and security enhancements are available now in GitHub Enterprise Server 3.6. ⌘ [Read more](https://github.blog/2022-08-17-github-enterprise-server-3-6-is-now-generally-available/) 2022-08-17T16:00:28Z **GitHub Discussions is now available on GitHub Enterprise Server**
As part of GitHub Enterprise Server 3.6, enterprise customers will now be able to use GitHub Discussions. ⌘ [Read more](https://github.blog/2022-08-17-github-discussions-is-now-available-on-github-enterprise-server/) 2022-08-23T13:00:23Z **The full lineup for Git Merge 2022 revealed**
We are pleased to announce the full lineup of talks and workshops for this year’s Git Merge conference in Chicago. 17 talks, 3 workshops, 1 panel, and some great company! ⌘ [Read more](https://github.blog/2022-08-23-the-full-lineup-for-git-merge-2022-revealed/) 2022-08-25T13:00:25Z **Open Source Monthly: August 2022 Edition**
This month's featured open source project, Open Sauced, connects contributors and maintainers through analytical insights. ⌘ [Read more](https://github.blog/2022-08-25-open-source-monthly-august-2022-edition/) 2022-08-25T14:16:34Z **Introducing Trilogy: a new database adapter for Ruby on Rails**
We've open sourced Trilogy, the database adapter we use to connect Ruby on Rails to MySQL-compatible database servers. ⌘ [Read more](https://github.blog/2022-08-25-introducing-trilogy-a-new-database-adapter-for-ruby-on-rails/) 2022-08-25T17:00:22Z **Keeping your skillset fresh as a developer**
Whether you’re committing 30 minutes or 3 hours a day to learning, consistency is key. Klint Finley asks 3 tech professionals at different stages in their career for more advice. ⌘ [Read more](https://github.blog/2022-08-25-keeping-your-skillset-fresh-as-a-developer/) 2022-08-26T16:00:50Z **3 ways every company can get started with an open-source software strategy**
The future of software development does not exist without open source. However, to maintain today’s software and create the software of the future, the largest organizations and beneficiaries of open source need to expand their collaboration with the community and help it grow. ⌘ [Read more](https://github.blog/2022-08-26-3-ways-every-company-can-get-started-with-an-open-source-software-strategy/) 2022-08-29T13:00:06Z **Git’s database internals I: packed object store**
This blog series will examine Git’s internals to help make your engineering system more efficient. Part I discusses how Git stores its data in packfiles using custom compression techniques. ⌘ [Read more](https://github.blog/2022-08-29-gits-database-internals-i-packed-object-store/) 2022-08-30T16:00:11Z **Git’s database internals II: commit history queries**
This post explores Git commit history as a database where ‘git log’ is the query language. Learn about Git’s custom query index – the commit-graph file – and how to make sure it's enabled in your repositories. ⌘ [Read more](https://github.blog/2022-08-30-gits-database-internals-ii-commit-history-queries/) 2022-08-31T14:00:42Z **Git’s Database Internals III: File History Queries**
Git’s file history queries use specialized algorithms that are tailored to common developer behavior. Level up your history spelunking skills by learning how different history modes behave and which ones to use when you need them. ⌘ [Read more](https://github.blog/2022-08-31-gits-database-internals-iii-file-history-queries/) 2022-08-31T16:00:42Z **What you can expect at GitHub Universe 2022: cloud, security, community, and AI**
Register now to attend GitHub Universe virtually or in-person at the Yerba Buena Center for the Arts in San Francisco on November 9-10. ⌘ [Read more](https://github.blog/2022-08-31-what-you-can-expect-at-github-universe-2022-cloud-security-community-and-ai/) 2022-09-01T13:00:20Z **Git’s database internals IV: distributed synchronization**
We're examining Git’s internals to help make your engineering system more efficient. This post views Git as a distributed database and looks into its synchronization techniques, specifically ‘git fetch’ and ‘git push’. ⌘ [Read more](https://github.blog/2022-09-01-gits-database-internals-iv-distributed-synchronization/) 2022-09-01T16:00:20Z **GitHub Actions: introducing the new, larger GitHub-hosted runners beta**
Now your team can spend less time managing infrastructure and more time writing code. ⌘ [Read more](https://github.blog/2022-09-01-github-actions-introducing-the-new-larger-github-hosted-runners-beta/) 2022-09-01T16:08:20Z **GitHub Actions: introducing the new, larger GitHub-hosted runners beta**
Now your team can spend less time managing infrastructure and more time writing code. ⌘ [Read more](https://github.blog/2022-09-01-github-actions-introducing-the-new-larger-github-hosted-runners-beta/) 2022-09-02T13:05:05Z **Git’s database internals V: scalability**
This fifth and final part of our blog series exploring Git's internals shows several strategies for scaling your Git repositories that match related database sharding techniques. ⌘ [Read more](https://github.blog/2022-09-02-gits-database-internals-v-scalability/) 2022-09-02T23:13:06Z **Release Radar · August 2022 Edition**
We’ve been gearing up to launch GitHub Universe 2022 and our community has been launching cool projects left right and center.  These projects include everything from world-changing technology to developer tooling, and weekend hobbies. Here are some of the open source projects that released major version updates this August. Read more about these projects in […] ⌘ [Read more](https://github.blog/2022-09-02-release-radar-aug-2022/) 2022-09-06T13:30:26Z **Contributing to open source at GitHub**
A software engineer’s personal journey to becoming an open source contributor. ⌘ [Read more](https://github.blog/2022-09-06-contributing-to-open-source-at-github/) 2022-09-06T16:00:05Z **Join us for OctogatosConf 2022**
Live on September 15, 2022, with talks by industry experts in Spanish, Portuguese, and English, on topics including software development, security, technical project management, community, open source, professional development and best practices. ⌘ [Read more](https://github.blog/2022-09-06-join-us-for-octogatosconf-2022/) 2022-09-07T16:00:28Z **Research: quantifying GitHub Copilot’s impact on developer productivity and happiness**
When the GitHub Copilot Technical Preview launched just over one year ago, we wanted to know one thing: Is this tool helping developers? Our research, using a combination of surveys and experiments, led us to expected and unexpected answers. ⌘ [Read more](https://github.blog/2022-09-07-research-quantifying-github-copilots-impact-on-developer-productivity-and-happiness/) 2022-09-07T18:00:24Z **GitHub Availability Report: August 2022**
In August, we experienced one incident resulting in significant impact to Codespaces. We’re still investigating that incident and will include it in next month’s report. This report also sheds light into an incident that impacted Codespaces in July. ⌘ [Read more](https://github.blog/2022-09-07-github-availability-report-august-2022/) 2022-09-08T07:00:33Z **Research: open source software in India, Kenya, Egypt, and Mexico**
Read the new GitHub report on OSS in India, Kenya, Egypt, and Mexico. Available now in English, and in Spanish and Arabic later this year. ⌘ [Read more](https://github.blog/2022-09-08-research-open-source-software-in-india-kenya-egypt-and-mexico/) 2022-09-08T18:00:49Z **GitHub Copilot now available for teachers**
After a year in technical preview, GitHub Copilot, an AI pair programmer, is now free for all teachers verified on GitHub Global Campus. ⌘ [Read more](https://github.blog/2022-09-08-github-copilot-now-available-for-teachers/) 2022-09-09T15:16:13Z **SCA vs SAST: what are they and which one is right for you?**
We’re taking a look at two commonly-used security tools and detailing how they can help secure your projects. ⌘ [Read more](https://github.blog/2022-09-09-sca-vs-sast-what-are-they-and-which-one-is-right-for-you/) 2022-09-12T19:17:17Z **Gear-up and unlock the newest GitHub Global Campus features**
Calling all students and teachers! With semester change coming soon, now is the time to start using the latest features within GitHub Education and Global Campus! ⌘ [Read more](https://github.blog/2022-09-12-gear-up-and-unlock-the-newest-github-global-campus-features/) 2022-09-13T13:30:56Z **Join GitHub at the Grace Hopper Celebration 2022**
We’re thrilled to be back at the Grace Hopper Celebration at Open Source Day, the largest celebration of women in open source. Stop by and say hi at one of our workshops. ⌘ [Read more](https://github.blog/2022-09-13-join-github-at-the-grace-hopper-celebration-2022/) 2022-09-13T16:00:49Z **Scaling Git’s garbage collection**
A tour of recent work to re-engineer Git’s garbage collection process to scale to our largest and most active repositories. ⌘ [Read more](https://github.blog/2022-09-13-scaling-gits-garbage-collection/) 2022-09-14T16:00:43Z **8 things you didn’t know you could do with GitHub Copilot**
Developers all over the world are using GitHub Copilot to help speed up their development and increase developer productivity. With GitHub Copilot available to developers everywhere, we’ve found some fun and useful examples of how developers can use GitHub Copilot for things you may not be thinking about. ⌘ [Read more](https://github.blog/2022-09-14-8-things-you-didnt-know-you-could-do-with-github-copilot/) 2022-09-16T15:31:30Z **How we tripled max concurrent jobs to boost performance of GitHub Actions**
The GitHub Actions team has done lots of work to improve the performance and resource consumption of Actions on GHES in the past year. ⌘ [Read more](https://github.blog/2022-09-16-how-we-tripled-max-concurrent-jobs-to-boost-performance-of-github-actions/) 2022-09-19T16:28:44Z **5 tips for prioritizing Dependabot alerts**
Dependabot alerts can give you the ability to secure your project by keeping dependency-based vulnerabilities out of your code. Here are some tips to more efficiently prioritize and take action on your alerts, so you can get back to building. ⌘ [Read more](https://github.blog/2022-09-19-5-tips-for-prioritizing-dependabot-alerts/) 2022-09-19T18:02:39Z **5 steps to convince your boss to send you to GitHub Universe**
Here are some actionable tips on how to ask your manager to send you to GitHub Universe this year—with a free template included! ⌘ [Read more](https://github.blog/2022-09-19-5-steps-to-convince-your-boss-to-send-you-to-github-universe/) 2022-09-19T19:15:58Z **Meet the GitHub Campus Experts selected for the fall 2022 MLH Fellowship Cohort, powered by GitHub**
Three new Campus Experts are joining the fall 2022 batch of the MLH Fellowship to work with open source maintainers and get real-world experience. ⌘ [Read more](https://github.blog/2022-09-19-meet-the-github-campus-experts-selected-for-the-fall-2022-mlh-fellowship-cohort-powered-by-github/) 2022-09-20T16:00:50Z **“If you don’t make it beautiful, it’s for sure doomed”: putting the Vault in GitHub’s Arctic Code Vault**
GitHub this month installed a massive steel vault, etched with striking AI-generated art, deep within an Arctic mountain, finalizing its Arctic Code Vault. This vault contains the 188 reels of hardened archival film which will preserve the 02/02/202 snapshot of every active public GitHub repository for 1,000 years. It also now includes a ... ⌘ [Read more](https://github.blog/2022-09-20-if-you-dont-make-it-beautiful-its-for-sure-doomed-putting-the-vault-in-githubs-arctic-code-vault/) 2022-09-20T18:00:31Z **Transform your software engineering practices with GitHub Enterprise**
Go beyond knowing GitHub as the home of open source and explore how GitHub Enterprise can help you transform your software engineering organization and practices. ⌘ [Read more](https://github.blog/2022-09-20-transform-your-software-engineering-practices-with-github-enterprise/) 2022-09-21T13:30:32Z **Why we signed the Copenhagen Pledge on Tech for Democracy**
As the home for developers, we understand the key role our communities play in steering digital transformation and maintaining societal infrastructure. That's why we choose to drive and support policies and initiatives like the Copenhagen Pledge on Tech for Democracy. We're committed to working with like-minded organizations, governments, and civil society to make digital technologies work for democracy and human rights, ... ⌘ [Read more](https://github.blog/2022-09-21-why-we-signed-the-copenhagen-pledge-on-tech-for-democracy/) 2022-09-21T14:00:21Z **The ReadME Project: Built for you!**
The ReadME Project & Podcast evolve with community expert voices and topics to stoke discussion about the culture and craft of software development. ⌘ [Read more](https://github.blog/2022-09-21-the-readme-project-built-for-you/) 2022-09-21T16:00:36Z **Applications for micro-mentoring at GitHub Universe 2022 are now live**
Students have the opportunity to connect with GitHub employees at GitHub Universe 2022 through Micro-Mentoring sessions hosted by GitHub Social Impact. ⌘ [Read more](https://github.blog/2022-09-21-applications-for-micro-mentoring-at-github-universe-2022-are-now-live/) 2022-09-21T21:49:50Z **Security alert: new phishing campaign targets GitHub users**
On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself was not affected, the campaign has impacted many victim organizations. ⌘ [Read more](https://github.blog/2022-09-21-security-alert-new-phishing-campaign-targets-github-users/) 2022-09-22T16:00:13Z **GitHub for Startups is generally available**
We’re launching GitHub for Startups to give your startup the tools needed to go from idea to unicorn status on the world's largest developer platform. ⌘ [Read more](https://github.blog/2022-09-22-github-for-startups-is-generally-available/) 2022-09-23T16:56:19Z **Meet the GitHub Campus Experts selected for the fall 2022 MLH Fellowship Cohort, powered by GitHub**
Three new Campus Experts are joining the fall 2022 batch of the MLH Fellowship to work with open source maintainers and get real-world experience. ⌘ [Read more](https://github.blog/2022-09-23-meet-the-github-campus-experts-selected-for-the-fall-2022-mlh-fellowship-cohort-powered-by-github/) 2022-09-28T16:00:38Z **Best practices on rolling out code scanning at enterprise scale**
Learn best practices on how to roll out centrally managed, developer-centric application security with a third party CI/CD system like Jenkins or ADO. ⌘ [Read more](https://github.blog/2022-09-28-best-practices-on-rolling-out-code-scanning-at-enterprise-scale/) 2022-09-29T16:00:27Z **After the offer: staying in tech long-term**
Tech can be a tricky industry (to say the least). We talked with three tech professionals who share why they stay, what has helped them the most, and the power of switching things up. ⌘ [Read more](https://github.blog/2022-09-29-after-the-offer-staying-in-tech-long-term/) 2022-09-29T19:11:29Z **GitHub supports internet freedom and global availability in Iran**
Access to the open internet is essential to defending human rights, and developers have an important role in promoting freedom of expression and transparency. GitHub is committed to keeping Iranians connected to the global developer community. ⌘ [Read more](https://github.blog/2022-09-29-github-supports-internet-freedom-and-global-availability-in-iran/) 2022-10-03T18:01:04Z **Highlights from Git 2.38**
Another new release of Git is here! Take a look at some of our highlights on what's new in Git 2.38. ⌘ [Read more](https://github.blog/2022-10-03-highlights-from-git-2-38/) 2022-10-04T12:00:20Z **Expand your open source contributions during Hacktoberfest 2022**
Give back to open source projects during the month of October! This year, we’re encouraging more than code contributions: writing, design, advocacy, and financial donations. ⌘ [Read more](https://github.blog/2022-10-04-expand-your-open-source-contributions-during-hacktoberfest-2022/) 2022-10-05T13:01:44Z **Two ways you can experience GitHub Universe**
GitHub Universe is back and more robust than ever, with two great ways to engage with everything this global developer event has to offer. ⌘ [Read more](https://github.blog/2022-10-05-two-ways-you-can-experience-github-universe/) 2022-10-05T15:00:22Z **Working on a creative project? Unleash your originality and start to tinker with the Aspiring Creatives Experience**
Develop your design and collaboration skills to get your clever intentions off the ground. ⌘ [Read more](https://github.blog/2022-10-05-working-on-a-creative-project-unleash-your-originality-and-start-to-tinker-with-the-aspiring-creatives-experience/) 2022-10-05T16:00:34Z **GitHub Availability Report: September 2022**
In September, we experienced one incident that resulted in degraded performance across GitHub services. We also experienced one incident resulting in significant impact to Codespaces. We are still investigating that incident and will include it in next month’s report. This report also sheds light into an incident that impacted Codespaces in August and an incident that impacted Actions in August. ⌘ [Read more](https://github.blog/2022-10-05-github-availability-report-september-2022/) 2022-10-05T18:00:51Z **Detect secrets in your code more accurately with dry runs for custom patterns now available in GitHub Advanced Security**
Learn how you can seamlessly define trusted custom secret patterns to detect secrets unique to your organization with GitHub Advanced Security. ⌘ [Read more](https://github.blog/2022-10-05-detect-secrets-in-your-code-more-accurately-with-dry-runs-for-custom-patterns/) 2022-10-06T07:01:42Z **js13kGames 2022 winners 🏆**
The eleventh annual js13kGames coding competition, challenging participants to create games in 13kB or less of JavaScript in a month, just wrapped up. This post highlights the top thirteen entries. ⌘ [Read more](https://github.blog/2022-10-06-js13k-2022-winners/) 2022-10-06T18:00:44Z **GitHub’s supply chain security features now support Dart**
Cross-platform apps built with the popular Flutter toolkit can now benefit from Dependabot alerts. ⌘ [Read more](https://github.blog/2022-10-06-githubs-supply-chain-security-features-now-support-dart/) 2022-10-06T21:00:36Z **Developers are now included in the WIPO Global Innovation Index**
We’re excited that the World Intellectual Property Organization (WIPO) has launched the 2022 edition of its Global Innovation Index (GII) with an indicator of developer creative outputs based on GitHub commits. ⌘ [Read more](https://github.blog/2022-10-06-developers-are-now-included-in-the-wipo-global-innovation-index/) 2022-10-11T16:00:52Z **On the go with GitHub Projects on GitHub Mobile (public beta)**
Stay connected and up to date on your work with GitHub Projects on GitHub Mobile, now in public beta. ⌘ [Read more](https://github.blog/2022-10-11-on-the-go-with-github-projects-on-github-mobile-public-beta/) 2022-10-11T19:39:36Z **The GitHub Universe 2022 agenda is live**
Explore 80+ content sessions delivered by over 120 different speakers, across two days and four content tracks, all designed to level up your skills. ⌘ [Read more](https://github.blog/2022-10-11-the-github-universe-2022-agenda-is-live/) 2022-10-13T15:00:12Z **The Story of Scalar**
New to Git v2.38, Scalar is a built-in repository manager for large repos. Here, we’ll tell the story of how Scalar went from a rough VFS for Git successor to a fully-integrated Git tool, with all of the engineering lessons learned in the process. ⌘ [Read more](https://github.blog/2022-10-13-the-story-of-scalar/) 2022-10-13T19:25:03Z **Introducing GitHub Advanced Security SIEM integrations for security professionals**
Learn about using GitHub Advanced Security (GHAS) alerts with Security Information and Events Management (SIEM) tools. Check out the integrations, and read more about getting started. ⌘ [Read more](https://github.blog/2022-10-13-introducing-github-advanced-security-siem-integrations-for-security-professionals/) 2022-10-14T16:00:41Z **OSI’s Deep Dive is an essential discussion on the future of AI and open source**
GitHub is sponsoring Open Source Initiative’s Deep Dive: AI because we think it’s important for the community to unpack how open source software, process, and principles can help best deliver on the promise of AI. ⌘ [Read more](https://github.blog/2022-10-14-osis-deep-dive-is-an-essential-discussion-on-the-future-of-ai-and-open-source/) 2022-10-17T15:00:47Z **5 tips for embedding security into your workflows**
Having a robust security plan is key to innovation. These tips will empower you to gain the upper hand on cyberattacks, so you can ship quickly and innovate with ease. ⌘ [Read more](https://github.blog/2022-10-17-5-tips-for-embedding-security-into-your-workflows/) 2022-10-17T17:00:54Z **GitHub at the 77th United Nations General Assembly**
Read about how the GitHub Social Impact, Tech for Social Good and Policy teams participated in the 77th session of the United Nations General Assembly, including events we hosted with the World Health Organization and the UN Development Programme. ⌘ [Read more](https://github.blog/2022-10-17-github-at-the-77th-united-nations-general-assembly/) 2022-10-17T20:29:45Z **Git security vulnerabilities announced**
Upgrade your local installation of Git, especially when cloning with \`--recurse-submodules\` from untrusted repositories, or if you use \`git shell\` interactive mode. ⌘ [Read more](https://github.blog/2022-10-17-git-security-vulnerabilities-announced/) 2022-10-18T15:35:02Z **Introducing fine-grained personal access tokens for GitHub**
Fine-grained personal access tokens offer enhanced security to developers and organization owners, to reduce the risk to your data of compromised tokens. ⌘ [Read more](https://github.blog/2022-10-18-introducing-fine-grained-personal-access-tokens-for-github/) 2022-10-18T17:11:45Z **Git security vulnerabilities announced**
Upgrade your local installation of Git, especially when cloning with --recurse-submodules from untrusted repositories, or if you use git shell interactive mode. ⌘ [Read more](https://github.blog/2022-10-18-git-security-vulnerabilities-announced/) 2022-10-20T16:00:00Z **Improving navigation for GitHub Actions**
GitHub Actions changed how developers automate workflows with GitHub. Today, we’re introducing a new navigation to manage your GitHub Actions experience, improving discoverability and accessibility as well as opening up future feature opportunities. ⌘ [Read more](https://github.blog/2022-10-20-improving-navigation-for-github-actions/) 2022-10-20T18:00:58Z **Unboxing fork improvements and unwrapping fork docs**
We’re always trying to improve the GitHub developer experience in meaningful ways, and we love learning from our customers. In the last several months we released several new fork capabilities, and we’re publishing revised fork documentation that gives more details with clearer explanations to make fork concepts easier to understand. ⌘ [Read more](https://github.blog/2022-10-20-unboxing-fork-improvements-and-unwrapping-fork-docs/) 2022-10-21T07:30:25Z **Build a game this November with Game Off 2022**
Save the date! Game Off returns on November 1 for it’s 10th year! 🎉 ⌘ [Read more](https://github.blog/2022-10-21-build-a-game-this-november-with-game-off-2022/) 2022-10-21T16:00:11Z **Git Merge 2022 – that’s a wrap! 🎬**
Git Merge 2022 just wrapped up bringing the community together for 16 talks, three workshops, one Git Contributor Summit, and lots of great conversations over two days. Read on for more info, photos from the event, and all of the session recordings. ⌘ [Read more](https://github.blog/2022-10-21-git-merge-2022-mission-report/) 2022-10-21T17:30:25Z **Build a game this November with Game Off 2022**
Save the date! Game Off returns on November 1 for it’s 10th year! 🎉 ⌘ [Read more](https://github.blog/2022-10-21-build-a-game-this-november-with-game-off-2022/) 2022-10-25T13:02:35Z **Why we’re excited about the Sigstore general availability**
The Sigstore GA means you can protect your software supply chain today with GitHub Actions, and will power new npm security capabilities in the near future. ⌘ [Read more](https://github.blog/2022-10-25-why-were-excited-about-the-sigstore-general-availability/) 2022-10-26T14:00:25Z **Why and how GitHub encrypts sensitive database columns using ActiveRecord::Encryption**
You may know that GitHub encrypts your source code at rest, but you may not have known that we encrypt sensitive database columns as well. Read about our column encryption strategy and our decision to adopt the Rails column encryption standard. ⌘ [Read more](https://github.blog/2022-10-26-why-and-how-github-encrypts-sensitive-database-columns-using-activerecordencryption/) 2022-10-26T16:00:04Z **3 strategies for consolidating your toolkit and boosting productivity**
Explore how GitHub Enterprise can help you transform your software engineering organization and practices. ⌘ [Read more](https://github.blog/2022-10-26-3-strategies-for-consolidating-your-toolkit-and-boosting-productivity/) 2022-10-27T13:13:22Z **Diversity, inclusion, and belonging at GitHub in 2022**
As GitHub continues to grow, our vision of being the home for all developers continues to materialize, expanding our progress, perspectives, and responsibility to the world. ⌘ [Read more](https://github.blog/2022-10-27-diversity-inclusion-and-belonging-at-github-in-2022/) 2022-10-27T15:00:42Z **What we learned from the Security Lab’s Community Office Hours**
TheGitHub Security Lab provided office hours for open source projects looking to improve their security posture and reduce the risk of breach. Here’s what we learned and how you can also participate. ⌘ [Read more](https://github.blog/2022-10-27-what-we-learned-from-the-security-labs-community-office-hours/) 2022-10-27T18:54:54Z **Choose your own GitHub Universe 2022 adventure**
You can now build your agenda on GitHubUniverse.com! Whether you’re just getting started or you’re a seasoned industry professional, there’s a session for you. ⌘ [Read more](https://github.blog/2022-10-27-choose-your-own-github-universe-2022-adventure/) 2022-10-28T18:00:17Z **Release Radar · September 2022 Edition**
Hackatoberfest, hackathons, and open source contributions. It’s been a hectic month with so many community pull requests to all kinds of projects. So many in fact that we had to spend hours going through all the submissions for this blog post. We almost didn’t get it out before the end of October. Nevertheless, we are […] ⌘ [Read more](https://github.blog/2022-10-28-release-radar-sept-2022/) 2022-10-28T18:34:58Z **Cybersecurity spotlight on bug bounty researcher @ahacker1**
As we wrap up Cybersecurity Awareness Month, the GitHub bug bounty team is excited to spotlight one of the security researchers who participates in the GitHub Security Bug Bounty Program. ⌘ [Read more](https://github.blog/2022-10-28-cybersecurity-spotlight-on-bug-bounty-researcher-ahacker1/) 2022-10-29T07:01:32Z **13 tiny, terrific, and terrifying games to hack, slay, and play this Halloween 🧛🏻‍♀️**
Some seriously spooktacular open source games for the web, Windows, macOS, and Linux with all sorts of fun hacks for infinite lives, invulnerability, and playing with time. ⌘ [Read more](https://github.blog/2022-10-29-thirteen-tiny-terrific-and-terrifying-games-to-hack-slay-and-play-this-halloween/) 2022-10-31T17:09:47Z **Creating a more inclusive security research field**
A glimpse into the backgrounds and day-to-day work of several GitHub employees in cybersecurity roles. ⌘ [Read more](https://github.blog/2022-10-31-creating-a-more-inclusive-security-research-field/) 2022-11-01T15:15:11Z **All In for Students: expanding the next generation of open source leaders**
We are pleased to announce the expansion of All In for Students! All In for Students introduces college students to open source and provides them with the education, technical training and career development to prepare them for a summer internship in tech. ⌘ [Read more](https://github.blog/2022-11-01-all-in-for-students-expanding-the-next-generation-of-open-source-leaders/) 2022-11-01T19:00:20Z **Preview: referencing public code in GitHub Copilot**
We will begin to introduce several new capabilities to GitHub Copilot in 2023 to continue delivering responsible innovation and true happiness at the keyboard. ⌘ [Read more](https://github.blog/2022-11-01-preview-referencing-public-code-in-github-copilot/) 2022-11-01T20:37:41Z **Game Off 2022 theme announcement**
It’s the moment you’ve all been waiting for. Are you ready? ⌘ [Read more](https://github.blog/2022-11-01-game-off-2022-theme-announcement/) 2022-11-02T16:00:33Z **GitHub Availability Report: October 2022**
In October, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in September. ⌘ [Read more](https://github.blog/2022-11-02-github-availability-report-october-2022/) 2022-11-02T18:39:04Z **GitHub partners with Arm to revolutionize Internet of Things software development with GitHub Actions**
Developers creating Internet of Things software use a complex stack of software that needs to be custom built into their CI/CD platform. Arm is leveraging the simplicity and scalability of GitHub Actions with a native integration that will revolutionize IoT software development. ⌘ [Read more](https://github.blog/2022-11-02-github-partners-with-arm-to-revolutionize-internet-of-things-software-development-with-github-actions/) 2022-11-03T12:53:42Z **How GitHub converts previously encrypted and unencrypted columns to ActiveRecord encrypted columns**
This post is the second part in a series about ActiveRecord::Encryption that shows how GitHub upgrades previously encrypted and unencrypted columns to ActiveRecord::Encryption. ⌘ [Read more](https://github.blog/2022-11-03-how-github-converts-previously-encrypted-and-unencrypted-columns-to-activerecord-encrypted-columns/) 2022-11-03T16:00:28Z **Advocating for developers to the US Copyright Office**
How GitHub advocated for developer interests at the US Copyright Office technical measures consultations ⌘ [Read more](https://github.blog/2022-11-03-advocating-for-developers-to-the-us-copyright-office/) 2022-11-04T15:30:16Z **How to mitigate OWASP vulnerabilities while staying in the flow**
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ [Read more](https://github.blog/2022-11-04-how-to-mitigate-owasp-vulnerabilities-while-staying-in-the-flow/) 2022-11-08T17:37:58Z **GitHub Enterprise Server 3.7 is now generally available**
GitHub Enterprise Server 3.7 is available now, including a single view of code risk, new forking and repository policies, and security enhancements to the management console. ⌘ [Read more](https://github.blog/2022-11-08-github-enterprise-server-3-7-is-now-generally-available/) 2022-11-09T16:29:48Z **Understanding the social impact of open source technologies**
Here's how nonprofits and the social sector are using open source to drive social good. ⌘ [Read more](https://github.blog/2022-11-09-the-social-impact-of-open-source/) 2022-11-09T16:29:45Z **The changing nature of governmental policies around open source**
In 2022, governments and the policy community spent a lot of time thinking about open source. Here's what that means and why it matters. ⌘ [Read more](https://github.blog/2022-11-09-open-source-government-policies/) 2022-11-09T16:29:27Z **Why more companies are investing in open source program offices**
By our estimation at GitHub, over 30% of Fortune 100 companies have now implemented OSPOs. Here's what that means for open source. ⌘ [Read more](https://github.blog/2022-11-09-why-companies-are-starting-ospos/) 2022-11-09T16:29:25Z **The importance of improving supply chain security in open source**
We think a lot about a high-profile supply chain attack that might cause developers, teams, and organizations to lose trust in open source. That’s why we’re investing in new ways to protect the open source ecosystem. ⌘ [Read more](https://github.blog/2022-11-09-improving-open-source-supply-chain-security/) 2022-11-09T16:29:06Z **Bringing greater financial sustainability to open source communities**
We know that companies benefit from open source. That's why we’re making it easier for companies to financially support projects. ⌘ [Read more](https://github.blog/2022-11-09-financial-sustainability-in-open-source/) 2022-11-09T17:35:39Z **An open source economy–built by developers, for developers**
Investing in our open source future by supporting the maintainers of today. ⌘ [Read more](https://github.blog/2022-11-09-an-open-source-economy-built-by-developers-for-developers/) 2022-11-09T17:35:22Z **Everything new from GitHub Universe 2022**
See what we're building to enhance the most integrated developer platform that allows developers and enterprises to drive innovation with ease. ⌘ [Read more](https://github.blog/2022-11-09-everything-new-from-github-universe-2022/) 2022-11-09T17:49:49Z **Todas as novidades do GitHub Universe 2022**
Veja o que estamos construindo para aprimorar a plataforma de desenvolvimento mais integrada e que permite que pessoas desenvolvedoras e empresas impulsionem a inovação com mais facilidade. Quinze anos atrás, estava sendo escrita a primeira linha de código para a construção do GitHub. Desde então, o objetivo tem sido equipar as pessoas desenvolvedoras com tudo […] ⌘ [Read more](https://github.blog/2022-11-09-todas-as-novidades-do-github-universe-2022/) 2022-11-10T16:00:16Z **What’s new with Codespaces from GitHub Universe 2022**
We’re giving GitHub users 60 free hours each month on Codespaces. Learn what else we shipped for Codespaces at Universe this year. ⌘ [Read more](https://github.blog/2022-11-10-whats-new-with-codespaces-from-github-universe-2022/) 2022-11-10T17:00:19Z **Introducing GitHub Actions Importer**
GitHub Actions Importer helps you forecast, plan, and facilitate migrations from your current CI/CD tool to GitHub Actions. ⌘ [Read more](https://github.blog/2022-11-10-introducing-github-actions-importer/) 2022-11-15T18:50:57Z **The journey of your work has never been clearer**
In July, we launched the general availability of GitHub Projects, and now we are excited to bring you even more features designed to make it easier to plan and track in the same place you build! ⌘ [Read more](https://github.blog/2022-11-15-the-journey-of-your-work-has-never-been-clearer/) 2022-11-15T19:51:04Z **A better way to search, navigate, and understand code on GitHub**
Reading code is a hugely important task for developers. That’s why we built GitHub’s new code search—to help developers search, navigate, and understand code written by them, their team, and the world. ⌘ [Read more](https://github.blog/2022-11-15-a-better-way-to-search-navigate-and-understand-code-on-github/) 2022-11-15T20:51:23Z **The power of GitHub in the palm of your hand**
GitHub Mobile helps keep work going while you're going. Untether yourself from your office. ⌘ [Read more](https://github.blog/2022-11-15-the-power-of-github-in-the-palm-of-your-hand/) 2022-11-17T19:56:26Z **Octoverse 2022: 10 years of tracking open source**
How is open source changing the world and impacting businesses? In this year's Octoverse report, we identified three big trends to watch. ⌘ [Read more](https://github.blog/2022-11-17-octoverse-2022-10-years-of-tracking-open-source/) 2022-11-22T19:00:35Z **Exciting New GitHub Features Powering Machine Learning**
Discover the exciting enhancements in GitHub that empower Machine Learning practitioners to do more. ⌘ [Read more](https://github.blog/2022-11-22-exciting-new-github-features-powering-machine-learning/) 2022-11-28T20:17:10Z **To infinity and beyond: enabling the future of GitHub’s REST API with API versioning**
We’re introducing calendar-based versioning for our REST API, so we can keep evolving our API, whilst still giving integrators a smooth migration path and plenty of time to update their integrations. ⌘ [Read more](https://github.blog/2022-11-28-to-infinity-and-beyond-enabling-the-future-of-githubs-rest-api-with-api-versioning/) 2022-12-01T17:00:07Z **An enterprise account is coming to all Enterprise customers**
Administrators, or enterprise owners, have the increased responsibility of managing their account and keeping it secure. We are excited to introduce what is new with enterprise accounts and what is coming soon. ⌘ [Read more](https://github.blog/2022-12-01-an-enterprise-account-is-coming-to-all-enterprise-customers/) 2022-12-01T20:07:23Z **How empowering developers helps teams ship secure software faster**
AppSec expert Niroshan Rajadurai says putting developers at the center of everything will enable you to meet your security goals. ⌘ [Read more](https://github.blog/2022-12-01-how-empowering-developers-helps-teams-ship-secure-software-faster/) 2022-12-02T16:16:15Z **Introducing Mona Sans and Hubot Sans**
Learn how to use and express yourself with GitHub’s open source variable fonts, Mona Sans and Hubot Sans. ⌘ [Read more](https://github.blog/2022-12-02-introducing-mona-sans-and-hubot-sans/) 2022-12-02T17:44:01Z **GitHub, accessibility, and the disability divide**
We just published our vision for GitHub accessibility at accessibility.github.com. Here’s the TL;DR: the prime directive of the GitHub accessibility program is to empower people with disabilities to build cool technology. ⌘ [Read more](https://github.blog/2022-12-02-github-accessibility-and-the-disability-divide/) 2022-12-05T19:11:50Z **ICYMI: A look back at GitHub Universe 2022**
Catch up on everything we announced and see what else happened during this year’s GitHub Universe conference that took place November 9-10. ⌘ [Read more](https://github.blog/2022-12-05-icymi-a-look-back-at-github-universe-2022/) 2022-12-06T17:42:23Z **New npm features for secure publishing and safe consumption**
Now you can create tokens with fine-grained permissions for automating your publishing and organization management workflows. And a new code explorer allows you to view content of a package directly in the npm portal. ⌘ [Read more](https://github.blog/2022-12-06-new-npm-features-for-secure-publishing-and-safe-consumption/) 2022-12-07T17:00:37Z **GitHub Availability Report: November 2022**
In November, we experienced two incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in October. ⌘ [Read more](https://github.blog/2022-12-07-github-availability-report-november-2022/) 2022-12-07T17:34:23Z **GitHub Copilot is generally available for businesses**
GitHub Copilot for Business is officially here with simple license management, organization-wide policy controls, and industry-leading privacy—all for $19 USD per user per month. ⌘ [Read more](https://github.blog/2022-12-07-github-copilot-is-generally-available-for-businesses/) 2022-12-08T17:00:06Z **Git Commit Uruguay: Lowering barriers to make software development more inclusive and diverse**
We delivered two different courses specifically designed to help students in the lowest-income neighborhood of Montevideo, Uruguay learn how to use GitHub and understand the value of open source. ⌘ [Read more](https://github.blog/2022-12-08-git-commit-uruguay-lowering-barriers-to-make-software-development-more-inclusive-and-diverse/) 2022-12-08T16:59:59Z **Hello from GitHub’s new Chief Product Officer**
GitHub is in an exciting phase of our journey as the developer community grows significantly every day, and the needs of the community grow and change with it. Today we’re introducing our new Chief Product officer. ⌘ [Read more](https://github.blog/2022-12-08-hello-from-githubs-new-chief-product-officer/) 2022-12-08T18:00:02Z **Experiment: The hidden costs of waiting on slow build times**
How much does it really cost to buy more powerful cloud compute resources for development work? A lot less than you think. ⌘ [Read more](https://github.blog/2022-12-08-experiment-the-hidden-costs-of-waiting-on-slow-build-times/) 2022-12-09T19:00:32Z **Release Radar · October 2022 Edition**
Before you say it, yes, the October Release Radar was supposed to be shared in November. But with Hackatoberfest, GitHub Universe, Turkey Day, and in real life (IRL) conferences returning to their pre-COVID frequency, we’ve all been so busy. And our community has been hustling to ship all kinds of open source projects. We wanted […] ⌘ [Read more](https://github.blog/2022-12-09-release-radar-october-2022/) 2022-12-12T15:50:38Z **Highlights from Git 2.39**
Another new release of Git is here to end the year! Take a look at some of our highlights on what's new in Git 2.39. ⌘ [Read more](https://github.blog/2022-12-12-highlights-from-git-2-39/) 2022-12-13T16:08:24Z **Creating an accessible search experience with the QueryBuilder component**
GitHub’s search inputs have several complex accessibility considerations. Let’s dive into what those are, how we addressed them, and talk about the standalone, reusable component that was ultimately built. ⌘ [Read more](https://github.blog/2022-12-13-creating-an-accessible-search-experience-with-the-querybuilder-component/) 2022-12-14T17:00:15Z **Raising the bar for software security: next steps for GitHub.com 2FA**
GitHub will require all users who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Learn more about our approach, when we’ll begin our rollout, and what you can expect as we begin requiring 2FA. ⌘ [Read more](https://github.blog/2022-12-14-raising-the-bar-for-software-security-next-steps-for-github-com-2fa/) 2022-12-15T17:00:52Z **Leaked a secret? Check your GitHub alerts…for free**
GitHub now allows you to track any leaked secrets in your public repository, for free. With secret scanning alerts, you can track and action on leaked secrets directly within GitHub. ⌘ [Read more](https://github.blog/2022-12-15-leaked-a-secret-check-your-github-alerts-for-free/) 2022-12-15T17:00:38Z **GitHub Advanced Security customers can now push protect their custom patterns**
With just one click, admins in GitHub Advanced Security organizations can protect their custom patterns on push. ⌘ [Read more](https://github.blog/2022-12-15-github-advanced-security-customers-can-now-push-protect-their-custom-patterns/) 2022-12-16T19:00:22Z **Release Radar · November 2022 Edition**
We promised we’d be back soon and here we are! There has been an incredible amount of open source projects shipping major version releases before the year wraps up. I can’t believe we are all saying that now. “When the year wraps up!” or “See you next year!” What happened to 2022? Well, we know […] ⌘ [Read more](https://github.blog/2022-12-16-release-radar-nov-2022/) 2022-12-19T15:14:22Z **[Video] How has open source changed in the last 10 years?**
What’s the state of open source and how has it changed over the last decade? GitHub’s VP of Developer Relations, Martin Woodward, tackles that question and more in a 2022 keynote. ⌘ [Read more](https://github.blog/2022-12-19-video-how-has-open-source-changed-in-the-last-10-years/) 2022-12-20T17:00:33Z **How we use GitHub to be more productive, collaborative, and secure**
Our engineering and security teams have done some incredible work in 2022. Let’s take a look at how we use GitHub to be more productive, build collaboratively, and shift security left. ⌘ [Read more](https://github.blog/2022-12-20-how-we-use-github-to-be-more-productive-collaborative-and-secure/) 2022-12-20T18:00:26Z **Increase developer productivity, save time on developer onboarding, and drive ROI in 2023**
Forrester's Total Economic Impact™ study dives into how GitHub Enterprise Cloud and GitHub Advanced Security help businesses drive ROI, increase developer productivity, and save time on developer onboarding. ⌘ [Read more](https://github.blog/2022-12-20-increase-developer-productivity-save-time-on-developer-onboarding-and-drive-roi-in-2023/) 2022-12-21T16:06:49Z **GitHub Gives 2022: Creating positive, lasting contributions in our communities**
This year, we took GitHub Gives, our company-wide giving campaign, to new heights and wanted to share our learnings to provide best practices in programming a successful hybrid giving campaign for employees. ⌘ [Read more](https://github.blog/2022-12-21-github-gives-2022-creating-positive-lasting-contributions-in-our-communities/) 2022-12-23T17:00:11Z **What’s with all the ducks?**
What in the world do rubber ducks have to do with programming? And why were they everywhere at GitHub Universe? A lot of you asked, so I’m here to help explain. ⌘ [Read more](https://github.blog/2022-12-23-whats-with-all-the-ducks/) 2022-12-29T17:00:44Z **GitHub’s top 10 blog posts of 2022**
As the year winds down, we're highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers. ⌘ [Read more](https://github.blog/2022-12-29-githubs-top-10-blog-posts-of-2022/) 2022-12-30T17:00:31Z **GitHub and the Ekoparty 2022 Capture the Flag**
Learn about the design behind, and solutions to, several of GitHub’s CTF challenge for Ekoparty’s 2022 event! ⌘ [Read more](https://github.blog/2022-12-30-github-and-the-ekoparty-2022-capture-the-flag/) 2023-01-04T17:20:40Z **GitHub Availability Report: December 2022**
In December, we did not experience any incidents that resulted in degraded performance across GitHub services. This report sheds light into an incident that impacted customers using GitHub Packages and GitHub Pages in November. ⌘ [Read more](https://github.blog/2023-01-04-github-availability-report-december-2022/) 2023-01-09T18:00:55Z **Default setup: A new way to enable GitHub code scanning**
Default setup is a new way to automatically set up code scanning on your repository, without the use of a .yaml file. ⌘ [Read more](https://github.blog/2023-01-09-default-setup-a-new-way-to-enable-github-code-scanning/) 2023-01-09T21:54:49Z **GitHub Discussions just got better with Category Forms!**
Category Forms allow maintainers to create templates for their GitHub Discussions, which means that users can start new discussions with all the necessary information already included. ⌘ [Read more](https://github.blog/2023-01-09-github-discussions-just-got-better-with-category-forms/) 2023-01-10T19:37:32Z **Introducing required workflows and configuration variables to GitHub Actions**
Now, you can standardize and enforce CI/CD best practices across all repositories in your organization to reduce duplication and secure your DevOps processes. ⌘ [Read more](https://github.blog/2023-01-10-introducing-required-workflows-and-configuration-variables-to-github-actions/) 2023-01-11T16:00:11Z **Passwordless deployments to the cloud**
Discovering passwords in our codebase is probably one of our worst fears. But what if you didn’t need passwords at all, and could deploy to your cloud provider another way? In this post, we explore how you can use OpenID Connect to trust your cloud provider, enabling you to deploy easily, securely and safely, while minimizing the operational overhead associated with secrets (for example, key rotations). ⌘ [Read more](https://github.blog/2023-01-11-passwordless-deployments-to-the-cloud/) 2023-01-12T17:56:25Z **A smarter, quieter Dependabot**
Dependabot is getting a little smarter—and, a little quieter—by reducing bot-based noise from repositories based on your interaction with Dependabot. ⌘ [Read more](https://github.blog/2023-01-12-a-smarter-quieter-dependabot/) 2023-01-13T17:00:04Z **New GitHub CLI extension tools**
Support for GitHub CLI extensions has been expanded with new authorship tools and more ways to discover and install custom commands. Learn how to write powerful extensions in Go and find new commands to install. ⌘ [Read more](https://github.blog/2023-01-13-new-github-cli-extension-tools/) 2023-01-14T03:00:02Z **Game Off 2022 winners 🏆**
All of the winners and some of the best games from Game Off 2022. ⌘ [Read more](https://github.blog/2023-01-13-game-off-2022-winners/) 2023-01-17T17:00:05Z **3 common DevOps antipatterns and cloud native strategies that can help**
Explore how GitHub and cloud native strategies can help you address common DevOps pipeline and team antipatterns. ⌘ [Read more](https://github.blog/2023-01-17-3-common-devops-antipatterns-and-cloud-native-strategies-that-can-help/) 2023-01-17T18:31:50Z **Git security vulnerabilities announced**
Git users are encouraged to upgrade to the latest version, especially if they use \`git archive\`, work in untrusted repositories, or use Git GUI on Windows. ⌘ [Read more](https://github.blog/2023-01-17-git-security-vulnerabilities-announced-2/) 2023-01-17T20:19:26Z **Dependabot alerts are now visible to more developers**
Default settings will allow developers with write and maintain access to see and resolve Dependabot alerts. ⌘ [Read more](https://github.blog/2023-01-17-dependabot-alerts-are-now-visible-to-more-developers/) 2023-01-19T17:00:43Z **Remediation made simple: Introducing new validity checks for GitHub tokens**
GitHub now tells you whether GitHub tokens found by secret scanning are active so you can prioritize and escalate remediation efforts. ⌘ [Read more](https://github.blog/2023-01-19-remediation-made-simple-introducing-new-validity-checks-for-github-tokens/) 2023-01-19T19:30:16Z **How GitHub coordinates product releases with GitHub Projects and GitHub Actions**
When teams work cross-functionally, good things happen. See how our teams use GitHub Projects to coordinate and ship new products and features. ⌘ [Read more](https://github.blog/2023-01-19-how-github-coordinates-product-releases-with-github-projects-and-github-actions/) 2023-01-19T20:24:01Z **Unlocking security updates for transitive dependencies with npm**
How Dependabot integrated with npm to address security vulnerabilities on transitive dependencies and increase the likelihood of success for JavaScript security updates by 40%. ⌘ [Read more](https://github.blog/2023-01-19-unlocking-security-updates-for-transitive-dependencies-with-npm/) 2023-01-20T17:00:41Z **Bringing GitHub Actions to GitHub Mobile**
How to tap into the power of GitHub Actions from anywhere with GitHub Mobile! ⌘ [Read more](https://github.blog/2023-01-20-bringing-github-actions-to-github-mobile/) 2023-01-20T18:00:45Z **Sunsetting Subversion support**
On January 8, 2024, GitHub will remove support for Subversion. ⌘ [Read more](https://github.blog/2023-01-20-sunsetting-subversion-support/) 2023-01-20T19:00:20Z **Unpacking the value of open source and code collaboration**
We’re more excited than ever about what the future holds and the role open source will continue to play in solving critical societal challenges. ⌘ [Read more](https://github.blog/2023-01-20-unpacking-the-value-of-open-source-and-code-collaboration/) 2023-01-23T15:05:19Z **Pwning the all Google phone with a non-Google bug**
It turns out that the first “all Google” phone includes a non-Google bug. Learn about the details of CVE-2022-38181, a vulnerability in the Arm Mali GPU. Join me on my journey through reporting the vulnerability to the Android security team, and the exploit that used this vulnerability to gain arbitrary kernel code execution and root on a Pixel 6 from an Android app. ⌘ [Read more](https://github.blog/2023-01-23-pwning-the-all-google-phone-with-a-non-google-bug/) 2023-01-23T17:00:58Z **Introducing the GitHub Bug Bounty swag store**
We're excited to share the newest addition to our GitHub Bug Bounty Program! ⌘ [Read more](https://github.blog/2023-01-23-introducing-the-github-bug-bounty-swag-store/) 2023-01-25T17:52:46Z **100 million developers and counting**
There are now 100 million developers around the world using GitHub. Here’s what this means—and why it’s just the beginning. ⌘ [Read more](https://github.blog/2023-01-25-100-million-developers-and-counting/) 2023-01-26T17:00:18Z **Setting the foundations for compliance**
Laying the groundwork for developer-enabled compliance. ⌘ [Read more](https://github.blog/2023-01-26-setting-the-foundations-for-compliance/) 2023-01-27T16:00:49Z **Bypassing OGNL sandboxes for fun and charities**
Object Graph Notation Language (OGNL) is a popular, Java-based, expression language used in popular frameworks and applications, such as Apache Struts and Atlassian Confluence. Learn more about bypassing certain OGNL injection protection mechanisms including those used by Struts and Atlassian Confluence, as well as different approaches to analyzing this form of protection so you can harden similar systems. ⌘ [Read more](https://github.blog/2023-01-27-bypassing-ognl-sandboxes-for-fun-and-charities/) 2023-01-30T18:01:58Z **Action needed for GitHub Desktop and Atom users**
Update to the latest version of Desktop and previous version of Atom before February 2. ⌘ [Read more](https://github.blog/2023-01-30-action-needed-for-github-desktop-and-atom-users/) 2023-01-31T22:41:29Z **Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities**
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities. ⌘ [Read more](https://github.blog/2023-01-31-skilling-for-the-future-how-github-is-advancing-diversity-equity-and-inclusion-within-open-source-communities/) 2023-02-01T16:00:30Z **GitHub Availability Report: January 2023**
In January, we experienced two incidents, one that resulted in degraded performance for Packages and Pages and another that impacted Git users. ⌘ [Read more](https://github.blog/2023-02-01-github-availability-report-january-2023/) 2023-02-01T18:01:36Z **Open source’s impact on the world’s 100 million developers**
We’re taking a look at how open source software has evolved on GitHub, and how the role of a maintainer and contributor has changed alongside the massive growth in open source software. ⌘ [Read more](https://github.blog/2023-02-01-open-sources-impact-on-the-worlds-100-million-developers/) 2023-02-01T23:00:15Z **Announcing the launch of the All In for Maintainers DEI Resource Hub**
The DEI Resource Hub is a vetted collection of resources, tools, and best practices designed to help open source maintainers create and maintain inclusive and diverse open source communities. ⌘ [Read more](https://github.blog/2023-02-01-announcing-the-launch-of-the-all-in-for-maintainers-dei-resource-hub/) 2023-02-02T18:03:36Z **Enabling branch deployments through IssueOps with GitHub Actions**
What if developers want to leverage branch deployments but don't have a full ChatOps stack integrated with their repositories? We wanted to set out to find a way for all developers to be able to take advantage of branch deployments with ease, right from their GitHub repository, and so the branch-deploy Action was born! ⌘ [Read more](https://github.blog/2023-02-02-enabling-branch-deployments-through-issueops-with-github-actions/) 2023-02-02T19:00:54Z **How the GitHub Docs team uses GitHub Projects**
Explore how the GitHub Docs team uses GitHub Projects for content coordination, reviews, and publishing. ⌘ [Read more](https://github.blog/2023-02-02-how-the-github-docs-team-uses-github-projects/) 2023-02-03T13:00:58Z **Europe’s chance to be a leader in the age of AI**
Below are my prepared remarks delivered at the EU Open Source Policy Summit in Brussels on Feb 3rd. ⌘ [Read more](https://github.blog/2023-02-03-europes-chance-to-be-a-leader-in-the-age-of-ai/) 2023-02-04T01:55:37Z **Ludum Dare 52 staff picks 🕹**
We’ve got ten top games from the latest Ludum Dare game jam plus source code for you to check out. Pun intended. ⌘ [Read more](https://github.blog/2023-02-03-ludum-dare-52-staff-picks/) 2023-02-06T15:02:16Z **How to mitigate OWASP vulnerabilities while staying in the flow**
Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities ⌘ [Read more](https://github.blog/2023-02-06-how-to-mitigate-owasp-vulnerabilities-while-staying-in-the-flow/) 2023-02-06T17:00:46Z **The technology behind GitHub’s new code search**
A look at what went into building the world's largest public code search index. ⌘ [Read more](https://github.blog/2023-02-06-the-technology-behind-githubs-new-code-search/) 2023-02-08T23:05:03Z **Release Radar, Festive Edition · December 2022 – January 2023**
Welcome to our special edition of the Release Radar 🎄. Between Christmas festivities, end of the year parties, Chinese New Year, or simply enjoying some time off, almost everyone has been celebrating – us too! Now we’re taking a moment to celebrate these awesome open source projects that shipped major version releases during December and […] ⌘ [Read more](https://github.blog/2023-02-08-release-radar-dec-2022-jan-2023/) 2023-02-13T17:00:55Z **Yout amicus: fighting for developers’ right to innovate**
Our mission to accelerate human progress through developer collaboration requires us, from time to time, to fight against legal developments that would needlessly impair developers’ right to innovate. That’s why GitHub has filed an amicus brief in the appeal of Yout LLC v. Recording Industry of America, Inc. ⌘ [Read more](https://github.blog/2023-02-13-yout-amicus-fighting-for-developers-right-to-innovate/) 2023-02-14T17:56:01Z **GitHub Copilot now has a better AI model and new capabilities**
We’re launching new improvements to GitHub Copilot to make it more powerful and more responsive for developers. ⌘ [Read more](https://github.blog/2023-02-14-github-copilot-now-has-a-better-ai-model-and-new-capabilities/) 2023-02-14T17:55:33Z **GitHub Copilot for Business is now available**
GitHub Copilot is the world’s first at-scale AI developer tool and we’re now offering it to every developer, team, organization, and enterprise. ⌘ [Read more](https://github.blog/2023-02-14-github-copilot-for-business-is-now-available/) 2023-02-14T18:45:56Z **Git security vulnerabilities announced**
Git users are encouraged to upgrade to the latest version, especially if they use \`git apply\` or \`git clone\` against untrusted patches or repositories. ⌘ [Read more](https://github.blog/2023-02-14-git-security-vulnerabilities-announced-3/) 2023-02-15T20:50:30Z **2022 Transparency Report**
Looking back over a year’s worth of developer-first content moderation and, new in this report, making our data more accessible to researchers. ⌘ [Read more](https://github.blog/2023-02-15-2022-transparency-report/) 2023-02-16T16:54:25Z **ICYMI: CodeQL enhancements**
Learn about CodeQL's improved user experience and enhancements that let you scan new languages, detect new types of CWEs, and perform deeper analyses of your applications. ⌘ [Read more](https://github.blog/2023-02-16-icymi-codeql-enhancements/) 2023-02-21T17:00:45Z **Update on the future stability of source code archives and hashes**
A look at what happened on January 30, what measures we’re putting in place to prevent surprises, and how we’ll handle future changes. ⌘ [Read more](https://github.blog/2023-02-21-update-on-the-future-stability-of-source-code-archives-and-hashes/) 2023-02-22T16:24:13Z **Responsible AI pair programming with GitHub Copilot**
GitHub Copilot boosts developer productivity, but using it responsibly still requires good developer and DevSecOps practices. ⌘ [Read more](https://github.blog/2023-02-22-responsible-ai-pair-programming-with-github-copilot/) 2023-02-23T17:00:00Z **The code that wasn’t there: Reading memory on an Android device by accident**
CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space level of pages, and how the GitHub Security Lab used the kernel space information leak to construct a KASLR bypass. ⌘ [Read more](https://github.blog/2023-02-23-the-code-that-wasnt-there-reading-memory-on-an-android-device-by-accident/) 2023-02-23T21:25:07Z **Measuring government policy on open source with a new dataset**
Policymakers around the world are developing policies that impact how software gets built and who gets to build it, see the latest now. ⌘ [Read more](https://github.blog/2023-02-23-measuring-government-policy-on-open-source-with-a-new-dataset/) 2023-02-24T19:00:37Z **3 ways to meet compliance needs without slowing down agility**
Learn how to enable developer productivity and collaboration while staying secure and compliant. Stay compliant without slowing down your business. From security to CI/CD, automate every step of your software workflow—so your developers can stay focused on what matters most: building. ⌘ [Read more](https://github.blog/2023-02-24-3-ways-to-meet-compliance-needs-without-slowing-down-agility/) 2023-02-28T17:00:16Z **Secret scanning alerts are now available (and free) for all public repositories**
Secret scanning alerts are now generally available for all public repositories. Admins can now turn on the alert experience with one click. ⌘ [Read more](https://github.blog/2023-02-28-secret-scanning-alerts-are-now-available-and-free-for-all-public-repositories/) 2023-02-28T18:00:50Z **10 things you didn’t know you could do with GitHub Codespaces**
Unlock the full potential of GitHub Codespaces with these 10 tips and tricks! From generating AI images to running self-guided coding workshops, discover how to optimize your software development workflow with this powerful tool. ⌘ [Read more](https://github.blog/2023-02-28-10-things-you-didnt-know-you-could-do-with-github-codespaces/) 2023-02-28T19:00:19Z **How to build a consistent workflow for development and operations teams**
Explore how using GitHub and HashiCorp together enables enterprises to develop and ship to their customers faster and more secure with consistent workflows and actions. ⌘ [Read more](https://github.blog/2023-02-28-how-to-build-a-consistent-workflow-for-development-and-operations-teams/) 2023-03-01T16:00:04Z **GitHub Actions: Introducing faster GitHub-hosted x64 macOS runners**
Speed up your GitHub Actions jobs on macOS with all new, faster GitHub-hosted macOS runners for x64. ⌘ [Read more](https://github.blog/2023-03-01-github-actions-introducing-faster-github-hosted-x64-macos-runners/) 2023-03-01T17:00:18Z **GitHub Actions Importer is now generally available**
We’re excited to announce the general availability of GitHub Actions Importer. GitHub Actions Importer helps you plan, forecast, and automate migrations from Azure DevOps, CircleCI, GitLab, Jenkins, and Travis CI to GitHub Actions. This product is an extension of the official GitHub CLI and is available for free to any GitHub user starting today. Migrating […] ⌘ [Read more](https://github.blog/2023-03-01-github-actions-importer-is-now-generally-available/) 2023-03-01T21:35:48Z **GitHub Availability Report: February 2023**
In February, we experienced three incidents that resulted in degraded performance across GitHub services. This report also sheds light into a January incident that resulted in degraded performance for GitHub Packages and GitHub Pages and another January incident that impacted Git users. ⌘ [Read more](https://github.blog/2023-03-01-github-availability-report-february-2023/) 2023-03-02T19:11:10Z **Why Python keeps growing, explained**
A deep dive into why more people are using Python than ever, its key use cases, and why it’s still so popular 30-plus years after it was first released. ⌘ [Read more](https://github.blog/2023-03-02-why-python-keeps-growing-explained/) 2023-03-03T18:59:24Z **GitHub Desktop 3.2: Preview your pull request**
GitHub Desktop helps you feel confident in your Git and GitHub workflows. ⌘ [Read more](https://github.blog/2023-03-03-github-desktop-3-2-preview-your-pull-request/) 2023-03-03T19:53:01Z **GitHub Security Lab audited DataHub: Here’s what they found**
The GitHub Security Lab audited DataHub, an open source metadata platform, and discovered several vulnerabilities in the platform's authentication and authorization modules. These vulnerabilities could have enabled an attacker to bypass authentication and gain access to sensitive data stored on the platform. ⌘ [Read more](https://github.blog/2023-03-03-github-security-lab-audited-datahub-heres-what-they-found/) 2023-03-05T23:50:43Z **Release Radar · February 2023 Edition**
Our community—along with ourselves—took a much needed break over the festive season. Now everyone is back into the full swing of work, and the open source community is showing us it’s all hands on deck. We had dozens of submissions for the February Release Radar—a testament to the amount of code being shipped by the […] ⌘ [Read more](https://github.blog/2023-03-05-release-radar-feb-2023/) 2023-03-06T17:27:47Z **How to automate your dev environment with dev containers and GitHub Codespaces**
GitHub Codespaces enables you to start coding faster when coupled with dev containers. Learn how to automate a portion of your development environment by adding a dev container to an open source project using GitHub Codespaces. ⌘ [Read more](https://github.blog/2023-03-06-how-to-automate-your-dev-environment-with-dev-containers-and-github-codespaces/) 2023-03-07T04:30:31Z **Unleash your potential with GitHub Octernships: a path to a thriving tech career**
Empowering the next generation of students in tech with real-world industry experience. ⌘ [Read more](https://github.blog/2023-03-06-unleash-your-potential-with-github-octernships-a-path-to-a-thriving-tech-career/) 2023-03-07T16:00:38Z **File editing on GitHub Mobile keeps leveling up**
Commit an update to a pull request, or start a new branch to squash a bug at any time, wherever you are using the GitHub Mobile apps. ⌘ [Read more](https://github.blog/2023-03-07-file-editing-on-github-mobile-keeps-leveling-up/) 2023-03-07T22:51:24Z **GitHub Enterprise Server 3.8 is now generally available**
With updates to GitHub Actions, repositories, and GitHub Advanced Security, this new version of GitHub Enterprise Server is focused on bringing the best developer experience to companies. ⌘ [Read more](https://github.blog/2023-03-07-github-enterprise-server-3-8-is-now-generally-available/) 2023-03-08T16:36:21Z **GitHub Galaxy 2023: your guide to building a more flexible and productive software development cycle**
Join us virtually on March 28-31 for GitHub Galaxy, a global enterprise event focused on improving efficiency, security, and developer productivity. ⌘ [Read more](https://github.blog/2023-03-08-github-galaxy-2023-your-guide-to-building-a-more-flexible-and-productive-software-development-cycle/) 2023-03-08T20:36:34Z **Application security orchestration with GitHub Advanced Security**
Learn how teams can leverage the power of GitHub Advanced Security’s code scanning and GitHub Actions to integrate the right security testing tools at the right time. ⌘ [Read more](https://github.blog/2023-03-08-application-security-orchestration-with-github-advanced-security/) 2023-03-09T15:00:27Z **Multi-repository variant analysis: a powerful new way to perform security research across GitHub**
Multi-repository variant analysis lets you scale security research across thousands of repositories, giving you a powerful tool to find and respond to newly discovered vulnerabilities. ⌘ [Read more](https://github.blog/2023-03-09-multi-repository-variant-analysis-a-powerful-new-way-to-perform-security-research-across-github/) 2023-03-09T16:00:47Z **How GitHub Docs’ new search works**
GitHub Docs recently changed its site-search to Elasticsearch. Here’s how it was implemented. ⌘ [Read more](https://github.blog/2023-03-09-how-github-docs-new-search-works/) 2023-03-09T17:00:21Z **Raising the bar for software security: GitHub 2FA begins March 13**
On March 13, we will officially begin rolling out our initiative to require all developers who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Read on to learn about what the process entails and how you can help secure the software supply chain with 2FA. ⌘ [Read more](https://github.blog/2023-03-09-raising-the-bar-for-software-security-github-2fa-begins-march-13/) 2023-03-09T18:00:44Z **How GitHub accelerates development for embedded systems**
In a world where software and hardware is ubiquitous, GitHub can help enable secure development for mission-critical embedded systems. ⌘ [Read more](https://github.blog/2023-03-09-how-github-accelerates-development-for-embedded-systems/) 2023-03-10T17:00:57Z **Don’t leave developers behind in the Section 230 debate**
Developers are at the heart of our online world and at the forefront of creating solutions for global challenges, working to make the software that underpins our digital infrastructure more secure, reliable, and safe. ⌘ [Read more](https://github.blog/2023-03-10-dont-leave-developers-behind-in-the-section-230-debate/) 2023-03-10T18:00:59Z **Introducing GitHub vulnerability management integrations for security professionals**
Learn about using GitHub Advanced Security alerts with vulnerability management tools. Check out the integrations and learn about how to get started. ⌘ [Read more](https://github.blog/2023-03-10-introducing-github-vulnerability-management-integrations-for-security-professionals/) 2023-03-13T16:00:49Z **Introducing Activating Developers and the new Digital Public Goods Open Source Community Manager Program**
The Social Impact, Tech for Social Good team is launching a new Open Source Community Manager Program to support digital public goods. This is part of their new Activating Developers initiative. ⌘ [Read more](https://github.blog/2023-03-13-introducing-activating-developers-and-the-new-digital-public-goods-open-source-community-manager-program/) 2023-03-13T17:00:34Z **An open source project to empower OSPOs everywhere**
We are open sourcing our own OSPO policies, tools, and guides to help other OSPOs get started. ⌘ [Read more](https://github.blog/2023-03-13-an-open-source-project-to-empower-ospos-everywhere/) 2023-03-13T17:57:15Z **Highlights from Git 2.40**
The first Git release of the year is here! Take a look at some of our highlights on what's new in Git 2.40. ⌘ [Read more](https://github.blog/2023-03-13-highlights-from-git-2-40/) 2023-03-14T18:32:00Z **GitHub celebrates the ingenuity of developers with disabilities in new video series**
Learn how developers with disabilities are pushing the boundaries of accessibility with ingenuity, open source, and generative AI on The ReadME Project. ⌘ [Read more](https://github.blog/2023-03-14-github-celebrates-the-ingenuity-of-developers-with-disabilities-in-new-video-series/) 2023-03-15T21:18:11Z **How the Grafana Alerting team scales their issue management with GitHub Projects**
Hear from Grafana’s Armand Grillet about how his team uses GitHub Projects. ⌘ [Read more](https://github.blog/2023-03-15-how-the-grafana-alerting-team-scales-their-issue-management-with-github-projects/) 2023-03-16T19:14:31Z **Godot 4.0 Release Party 🎉**
We are delighted to host the Godot 4.0 Release Party at GitHub HQ on Wednesday, March 22 from 6:30 pm to 9:30 pm. And you're invited! ⌘ [Read more](https://github.blog/2023-03-16-godot-4-0-release-party/) 2023-03-17T15:35:42Z **Partnering with EU policymakers to ensure the Cyber Resilience Act works for developers**
We’re looking forward to working with policymakers to improve cybersecurity and support developers. ⌘ [Read more](https://github.blog/2023-03-17-partnering-with-eu-policymakers-to-ensure-the-cyber-resilience-act-works-for-developers/) 2023-03-22T13:58:21Z **GitHub Copilot X: The AI-powered developer experience**
GitHub Copilot is evolving to bring chat and voice interfaces, support pull requests, answer questions on docs, and adopt OpenAI’s GPT-4 for a more personalized developer experience. ⌘ [Read more](https://github.blog/2023-03-22-github-copilot-x-the-ai-powered-developer-experience/) 2023-03-23T16:00:15Z **Build a secure code mindset with the GitHub Secure Code Game**
Writing secure code is as much of an art as writing functional code, and it is the only way to write quality code. Learn how our Secure Code Game can provide you with hands-on training to spot and fix security issues in your code so that you can build a secure code mindset. ⌘ [Read more](https://github.blog/2023-03-23-build-a-secure-code-mindset-with-the-github-secure-code-game/) 2023-03-24T05:27:46Z **We updated our RSA SSH host key**
At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com. ⌘ [Read more](https://github.blog/2023-03-23-we-updated-our-rsa-ssh-host-key/) 2023-03-28T15:09:56Z **Announcing the GitHub Actions extension for VS Code**
Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension, which provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE. ⌘ [Read more](https://github.blog/2023-03-28-announcing-the-github-actions-extension-for-vs-code/) 2023-03-28T17:25:20Z **Introducing self-service SBOMs**
Developers and compliance teams get a new SBOM generation tool for cloud repositories. ⌘ [Read more](https://github.blog/2023-03-28-introducing-self-service-sboms/) 2023-03-28T17:23:01Z **GitHub Galaxy 2023: Empower developer teams with a new developer experience**
Learn how GitHub’s one, integrated platform–powered by AI and secure at every step—helps developer teams be more productive, collaborative, and efficient. ⌘ [Read more](https://github.blog/2023-03-28-github-galaxy-2023-empower-developer-teams-with-a-new-developer-experience/) 2023-03-30T16:00:23Z **Improvements to CodeQL’s data flow library for C++**
These changes will improve the experience for custom query authors and enable better precision in some of our standard queries. Learn how to enable them for your custom queries. ⌘ [Read more](https://github.blog/2023-03-30-improvements-to-codeqls-data-flow-library-for-c/) 2023-03-31T17:19:39Z **CodeQL zero to hero part 1: the fundamentals of static analysis for vulnerability research**
Learn more about static analysis and how to use it for security research!
In this blog post series, we will take a closer look at static analysis concepts, present GitHub’s static analysis tool CodeQL, and teach you how to leverage static analysis for security research by writing custom CodeQL queries. ⌘ [Read more](https://github.blog/2023-03-31-codeql-zero-to-hero-part-1-the-fundamentals-of-static-analysis-for-vulnerability-research/) 2023-04-03T16:00:18Z **Calling all open source maintainers**
We are building a private space for maintainers to connect with peers, preview features, and learn from each other! ⌘ [Read more](https://github.blog/2023-04-03-calling-all-open-source-maintainers/) 2023-04-03T19:00:21Z **Level up monitoring and reporting for your enterprise**
A high-quality audit log is an essential tool for enterprises to ensure compliance, maintain security, investigate issues, and promote accountability. ⌘ [Read more](https://github.blog/2023-04-03-level-up-monitoring-and-reporting-for-your-enterprise/) 2023-04-04T16:07:30Z **What’s new with GitHub Sponsors**
GitHub Sponsors is now generally available for organizations. Also, new tooling for bulk sponsorships and an update on how we’re ensuring sustainability for GitHub Sponsors. ⌘ [Read more](https://github.blog/2023-04-04-whats-new-with-github-sponsors/) 2023-04-05T15:00:36Z **Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions**
Many of us are aware of the benefits that a strong focus on automation can bring, particularly in our development workflow and DevOps lifecycle. But silos across businesses can lead to duplication of effort, and potential to lose out on best practices. In this post, we’ll explore how CI/CD can be shared across your entire organization alongside polici ... ⌘ [Read more](https://github.blog/2023-04-05-building-organization-wide-governance-and-re-use-for-ci-cd-and-automation-with-github-actions/) 2023-04-05T16:00:48Z **GitHub Availability Report: March 2023**
In March, we experienced six incidents that resulted in degraded performance across GitHub services. This report also sheds light into a February incident that resulted in degraded performance for GitHub Codespaces. ⌘ [Read more](https://github.blog/2023-04-05-github-availability-report-march-2023/) 2023-04-05T17:00:48Z **Bring your enterprise together with enterprise accounts for all**
With enterprise accounts for all, your organization can take advantage of all that GitHub Enterprise has to offer, from GitHub Actions and GitHub Advanced Security, to Copilot. ⌘ [Read more](https://github.blog/2023-04-05-bring-your-enterprise-together-with-enterprise-accounts-for-all/) 2023-04-06T16:00:48Z **Pwning Pixel 6 with a leftover patch**
In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes. ⌘ [Read more](https://github.blog/2023-04-06-pwning-pixel-6-with-a-leftover-patch/) 2023-04-06T18:05:43Z **Building GitHub with Ruby and Rails**
Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily. We deploy as often as 20 times a day, and nearly every week one of those deploys is a Rails upgrade. Upgrading Rails weekly Every […] ⌘ [Read more](https://github.blog/2023-04-06-building-github-with-ruby-and-rails/) 2023-04-07T15:00:32Z **What developers need to know about generative AI**
Generative AI has been dominating the news lately—but what exactly is it? Here’s what you need to know, and what it means for developers. ⌘ [Read more](https://github.blog/2023-04-07-what-developers-need-to-know-about-generative-ai/) 2023-04-07T14:32:11Z **Game Bytes · April 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ [Read more](https://github.blog/2023-04-07-game-bytes-april-2023/) 2023-04-11T02:00:26Z **How enabling developers can help drive financial inclusion**
Explore how creating a great developer experience can help provide a more inclusive financial services environment. ⌘ [Read more](https://github.blog/2023-04-10-how-enabling-developers-can-help-drive-financial-inclusion/) 2023-04-11T16:36:40Z **Generative AI-enabled compliance for software development**
Explore how generative AI may soon help enable optimizing some of the foundational components of compliance. ⌘ [Read more](https://github.blog/2023-04-11-generative-ai-enabled-compliance-for-software-development/) 2023-04-11T19:22:01Z **Introducing the newest GitHub Shop collection**
From dog bowl bottles to fanny packs, explore the latest and greatest GitHub merchandise. ⌘ [Read more](https://github.blog/2023-04-11-introducing-the-newest-github-shop-collection/) 2023-04-12T16:00:46Z **GitHub Accelerator: our first cohort and what’s next**
Meet the individuals that make up the first GitHub Accelerator cohort and learn about how GitHub is helping bring their visions to reality. ⌘ [Read more](https://github.blog/2023-04-12-github-accelerator-our-first-cohort-and-whats-next/) 2023-04-13T16:04:37Z **Ensuring compliance in developer workflows**
How GitHub Enterprise ensures secure and compliant developer workflows for highly regulated industries. ⌘ [Read more](https://github.blog/2023-04-13-ensuring-compliance-in-developer-workflows/) 2023-04-14T15:15:50Z **How generative AI is changing the way developers work**
Rapid advancements in generative AI coding tools like GitHub Copilot are accelerating the next wave of software development. Here’s what you need to know. ⌘ [Read more](https://github.blog/2023-04-14-how-generative-ai-is-changing-the-way-developers-work/) 2023-04-14T17:48:51Z **3 benefits of migrating and consolidating your source code**
Explore how migrating your source code and collaboration history to GitHub can lead to some surprising benefits. ⌘ [Read more](https://github.blog/2023-04-14-3-benefits-of-migrating-and-consolidating-your-source-code/) 2023-04-17T18:13:41Z **Multi-repository enablement: effortlessly scale code scanning across your repositories**
We’ve gotten great feedback on default setup, a simple way to set up code scanning on your repository. Now, you have the ability to use default setup across your organization's repositories, in just one click. ⌘ [Read more](https://github.blog/2023-04-17-multi-repository-enablement-effortlessly-scale-code-scanning-across-your-repositories/) 2023-04-18T16:26:11Z **GitHub joins industry commitment to curb cyber mercenaries**
GitHub is proud to join 40 companies endorsing the Cybersecurity Tech Accord principles limiting offensive operations in cyberspace. ⌘ [Read more](https://github.blog/2023-04-18-github-joins-industry-commitment-to-curb-cyber-mercenaries/) 2023-04-19T16:00:41Z **Private vulnerability reporting now generally available**
Open source maintainers and security researchers embrace a new best practice to report and fix vulnerabilities. ⌘ [Read more](https://github.blog/2023-04-19-private-vulnerability-reporting-now-generally-available/) 2023-04-19T16:00:18Z **Introducing npm package provenance**
How to verifiably link npm packages to their source repository and build instructions. ⌘ [Read more](https://github.blog/2023-04-19-introducing-npm-package-provenance/) 2023-04-20T16:00:09Z **Announcing GitHub Actions Deployment Protection Rules, now in public beta**
Create and share your own deployment protection rules, or use the rules from our great partners, like Datadog, Honeycomb, New Relic, NodeSource, Sentry, and ServiceNow, to control your deployments with more confidence. And the API is open for the community to build their own rules to make GitHub Enterprise Cloud even better. ⌘ [Read more](https://github.blog/2023-04-20-announcing-github-actions-deployment-protection-rules-now-in-public-beta/) 2023-04-25T14:00:50Z **Shaping the GitHub of the future as COO**
GitHub is driving the future of software development and, after 10 years as a Hubber, I’m more energized than ever as I take on the role of COO to help bring our vision to life. ⌘ [Read more](https://github.blog/2023-04-25-shaping-the-github-of-the-future-as-coo/) 2023-04-25T16:00:30Z **Gearing up for Maintainer Month this May!**
Are you looking for ways to support open source maintainers? Maintainer Month is the perfect opportunity! ⌘ [Read more](https://github.blog/2023-04-25-gearing-up-for-maintainer-month-this-may/) 2023-04-25T17:13:36Z **Git security vulnerabilities announced**
A new set of Git releases were published to address a variety of security vulnerabilities. All users are encouraged to upgrade. Take a look at GitHub’s view of the latest round of releases. ⌘ [Read more](https://github.blog/2023-04-25-git-security-vulnerabilities-announced-4/) 2023-04-26T16:00:18Z **CLI tricks every developer should know**
Learn some tips, tricks, and tools for mastering the command line from GitHub’s own developers. ⌘ [Read more](https://github.blog/2023-04-26-cli-tricks-every-developer-should-know/) 2023-04-28T16:00:45Z **This month on The ReadME Podcast: exploring the fusion of technology and progress**
Open source’s impact on nuclear fusion research, adapting to technological change, and mastering GitHub essentials. ⌘ [Read more](https://github.blog/2023-04-28-this-month-on-the-readme-podcast-exploring-the-fusion-of-technology-and-progress/) 2023-05-02T20:36:16Z **Dependabot relieves alert fatigue from npm devDependencies**
A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives. ⌘ [Read more](https://github.blog/2023-05-02-dependabot-relieves-alert-fatigue-from-npm-devdependencies/) 2023-05-03T16:00:42Z **More than meets the pull request: maintainers talk contributions**
Creating an open source project can feel a bit like sending out an open invite to a party—will it be a roaring good time, or will you unbegrudginly dine on leftover junk food for the following week after nobody shows? When the first guest arrives, you breathe a sigh of relief. The party’s a success, […] ⌘ [Read more](https://github.blog/2023-05-03-more-than-meets-the-pull-request-maintainers-talk-contributions/) 2023-05-03T21:00:32Z **GitHub Availability Report: April 2023**
In April, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into three March incidents that resulted in degraded performance across GitHub services. ⌘ [Read more](https://github.blog/2023-05-03-github-availability-report-april-2023/) 2023-05-04T17:35:32Z **All In for Students 2023 cohort: our biggest group of open source leaders yet!**
The second cohort of All In for Students has graduated! With a cohort 12 times as large as the pilot, learn about how this group of college students is leaning into the future of technology. ⌘ [Read more](https://github.blog/2023-05-04-all-in-for-students-2023-cohort-our-biggest-group-of-open-source-leaders-yet/) 2023-05-04T18:34:24Z **Manage your application security stack effectively with the tool status page**
Code scanning’s tool status gives you a bird's eye view of your application security stack, allowing you to quickly confirm everything is working, or troubleshoot any tool in your application security arsenal. ⌘ [Read more](https://github.blog/2023-05-04-manage-your-application-security-stack-effectively-with-the-tool-status-page/) 2023-05-05T14:07:04Z **Web Summit Rio 2023: Building an app in 18 minutes with GitHub Copilot X**
GitHub CEO Thomas Domke demonstrated the power of GitHub Copilot X live on stage. ⌘ [Read more](https://github.blog/2023-05-05-web-summit-rio-2023-building-an-app-in-18-minutes-with-github-copilot-x/) 2023-05-05T16:49:40Z **Building a more inclusive GitHub Global Campus**
Every student and teacher deserves the same access to GitHub Education offerings. We’ve enlisted GitHub’s Accessibility team to help identify areas for improving inclusivity. ⌘ [Read more](https://github.blog/2023-05-05-building-a-more-inclusive-github-global-campus/) 2023-05-08T15:00:05Z **Building a culture of innovation in your business with GitHub**
Consider the typical software development practices in an organization. Projects are commonly closed, and causes friction across engineering teams. But open source communities work asynchronously, openly, remotely and at global-scale. What if our internal teams could reuse those same practices? ⌘ [Read more](https://github.blog/2023-05-08-building-a-culture-of-innovation-in-your-business-with-github/) 2023-05-08T16:00:37Z **GitHub code search is generally available**
The world’s code is now at your fingertips. ⌘ [Read more](https://github.blog/2023-05-08-github-code-search-is-generally-available/) 2023-05-08T18:21:40Z **How we work: inclusive retrospectives for the GitHub Accessibility leadership team**
Learn about tools and processes the GitHub Accessibility leadership team uses for retrospectives that fully engage every team member. ⌘ [Read more](https://github.blog/2023-05-08-how-we-work-inclusive-retrospectives-for-the-github-accessibility-leadership-team/) 2023-05-09T16:00:10Z **Push protection is generally available, and free for all public repositories**
Announcing the general availability of push protection–a feature that proactively prevents secret leaks in your public and private repositories. ⌘ [Read more](https://github.blog/2023-05-09-push-protection-is-generally-available-and-free-for-all-public-repositories/) 2023-05-09T17:40:33Z **How to fix a ReDoS**
Code scanning detects ReDoS vulnerabilities automatically, but fixing them isn’t always easy. This blog post describes a 4-step strategy for fixing ReDoS bugs. ⌘ [Read more](https://github.blog/2023-05-09-how-to-fix-a-redos/) 2023-05-09T19:42:51Z **How companies are boosting productivity with generative AI**
Explore how generative AI coding tools are changing the way developers and companies build software. ⌘ [Read more](https://github.blog/2023-05-09-how-companies-are-boosting-productivity-with-generative-ai/) 2023-05-10T15:29:40Z **Game Bytes · May 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ [Read more](https://github.blog/2023-05-10-game-bytes-may-2023/) 2023-05-10T19:09:40Z **Revolutionize your open source workflows: the top 3 reasons why GitHub Codespaces is a must-have for maintainers**
GitHub Codespaces is reliable, accessible, and always-ready. Try it out during Maintainer Month and take your projects to new heights! ⌘ [Read more](https://github.blog/2023-05-10-revolutionize-your-open-source-workflows-the-top-3-reasons-why-github-codespaces-is-a-must-have-for-maintainers/) 2023-05-11T17:56:27Z **Unlocking inclusive design: how Primer’s color system is making GitHub.com more inclusive**
How Primer’s updated light and dark theme color contrast strategy resolved hundreds of color-contrast-related accessibility issues over one thousand use cases. ⌘ [Read more](https://github.blog/2023-05-11-unlocking-inclusive-design-how-primers-color-system-is-making-github-com-more-inclusive/) 2023-05-11T20:20:05Z **Navigation and search improvements for accessibility**
Discover the accessibility features within our new navigation and code search which make it easier to use for many more people. ⌘ [Read more](https://github.blog/2023-05-11-navigation-and-search-improvements-for-accessibility/) 2023-05-12T16:00:32Z **How I used GitHub Copilot to build a browser extension**
Here’s how, in seven steps, I built my first browser extension with GitHub Copilot—and my three major takeaways about learning and pair programming in the age of AI. ⌘ [Read more](https://github.blog/2023-05-12-how-i-used-github-copilot-to-build-a-browser-extension/) 2023-05-12T18:04:03Z **This month on The ReadME Podcast: Balancing openness and control**
Open vs. control: the paradox of open source. We take a look at the expectations of open source, how the definition has evolved, and when ‘closed to contributions’ is the right move. Tune in to the latest episode of The ReadME Podcast for more. ⌘ [Read more](https://github.blog/2023-05-12-this-month-on-the-readme-podcast-balancing-openness-and-control/) 2023-05-16T18:33:22Z **Addressing GitHub’s recent availability issues**
GitHub recently experienced several availability incidents, both long running and shorter duration. We have since mitigated these incidents and all systems are now operating normally. Read on for more details about what caused these incidents and what we’re doing to mitigate in the future. ⌘ [Read more](https://github.blog/2023-05-16-addressing-githubs-recent-availability-issues/) 2023-05-17T15:30:00Z **Design’s journey towards accessibility**
Design can have a significant impact on delivering accessible experiences to our users. It takes a cultural shift, dedicated experts, and permission to make progress over perfection in order to build momentum. We’ve got a long way to go, but we’re starting to see a real shift in our journey to make GitHub a true home for all developers. ⌘ [Read more](https://github.blog/2023-05-17-designs-journey-towards-accessibility/) 2023-05-17T17:32:32Z **Inside GitHub: Working with the LLMs behind GitHub Copilot**
Developers behind GitHub Copilot discuss what it was like to work with OpenAI’s large language model and how it informed the development of Copilot as we know it today. ⌘ [Read more](https://github.blog/2023-05-17-inside-github-working-with-the-llms-behind-github-copilot/) 2023-05-17T17:32:16Z **How GitHub Copilot is getting better at understanding your code**
With a new Fill-in-the-Middle paradigm, GitHub engineers improved the way GitHub Copilot contextualizes your code. By continuing to develop and test advanced retrieval algorithms, they’re working on making our AI tool even more advanced. ⌘ [Read more](https://github.blog/2023-05-17-how-github-copilot-is-getting-better-at-understanding-your-code/) 2023-05-18T13:00:09Z **GitHub celebrates developers with disabilities on Global Accessibility Awareness Day**
GitHub is the home for all developers and on this Global Accessibility Awareness Day we are thrilled to celebrate the achievements of disabled developers and recent ships that help them build on GitHub. ⌘ [Read more](https://github.blog/2023-05-18-github-celebrates-developers-with-disabilities-on-global-accessibility-awareness-day/) 2023-05-18T16:28:25Z **9 tips to go from attendee to speaker at a tech conference**
Here’s what you need to know to write a compelling session proposal and get on stage. ⌘ [Read more](https://github.blog/2023-05-18-9-tips-to-go-from-attendee-to-speaker-at-a-tech-conference/) 2023-05-23T15:00:43Z **Announcing the public preview of GitHub Advanced Security for Azure DevOps**
GitHub Advanced Security for Azure DevOps is now available for public preview, making GitHub’s same application security testing tools natively available on Azure Repos. ⌘ [Read more](https://github.blog/2023-05-23-announcing-the-public-preview-of-github-advanced-security-for-azure-devops/) 2023-05-24T16:00:53Z **Kelsey Hightower on leadership in open source and the future of Kubernetes**
In this special episode of The ReadME Podcast, dedicated to GitHub’s Maintainer Month, Kelsey Hightower joins hosts Martin Woodward and Neha Batra to discuss his philosophy on fostering thriving open source communities and the importance of empathy to a maintainer’s success. ⌘ [Read more](https://github.blog/2023-05-24-kelsey-hightower-on-leadership-in-open-source-and-the-future-of-kubernetes/) 2023-05-24T18:04:56Z **How to automate a Microsoft Power Platform deployment using GitHub Actions**
Low-code enables developers and non-developers to build custom applications and solutions with less effort. In this blog, we show you how to automate your low-code deployments using GitHub Actions. ⌘ [Read more](https://github.blog/2023-05-24-how-to-automate-a-microsoft-power-platform-deployment-using-github-actions/) 2023-05-25T16:00:59Z **Rooting with root cause: finding a variant of a Project Zero bug**
In this blog, I’ll look at CVE-2022-46395, a variant of CVE-2022-36449 (Project Zero issue 2327), and use it to gain arbitrary kernel code execution and root privileges from the untrusted app domain on an Android phone that uses the Arm Mali GPU. I’ll also explain how root cause analysis of CVE-2022-36449 led to the discovery of CVE-2022-46395. ⌘ [Read more](https://github.blog/2023-05-25-rooting-with-root-cause-finding-a-variant-of-a-project-zero-bug/) 2023-05-25T17:00:28Z **The 2023 Open Source Program Office (OSPO) Survey is live!**
Help quantify the state of enterprise open source by taking the 2023 OSPO survey. ⌘ [Read more](https://github.blog/2023-05-25-the-2023-open-source-program-office-ospo-survey-is-live/) 2023-06-01T16:34:28Z **Highlights from Git 2.41**
The open-source Git project just released Git 2.41. Take a look at our highlights on what’s new in Git 2.41. ⌘ [Read more](https://github.blog/2023-06-01-highlights-from-git-2-41/) 2023-06-01T17:46:43Z **Elevating open source contributors to open source maintainers**
Experts explain how to recruit and onboard co-maintainers. ⌘ [Read more](https://github.blog/2023-06-01-elevating-open-source-contributors-to-open-source-maintainers/) 2023-06-02T17:30:50Z **Applying GitOps principles to your operations**
Could we use our Git repository as the source of truth for operational tasks, and somehow reconcile changes with our real-world view? ⌘ [Read more](https://github.blog/2023-06-02-applying-gitops-principles-to-your-operations/) 2023-06-05T16:17:57Z **Announcing the Stale Repos Action**
A tool to help you keep your open source catalog organized and up to date. ⌘ [Read more](https://github.blog/2023-06-05-announcing-the-stale-repos-action/) 2023-06-06T16:01:34Z **Swift support brings broader mobile application security to GitHub Advanced Security**
We’ve launched the beta of code scanning support for Swift. This launch, paired with our launch of Kotlin support in November, means that CodeQL covers both IOS and Android development languages, bringing a heightened level of security to the mobile application development process. ⌘ [Read more](https://github.blog/2023-06-06-swift-support-brings-broader-mobile-application-security-to-github-advanced-security/) 2023-06-07T16:57:53Z **Announcing the All In CHAOSS DEI Badging pilot initiative**
Take part in All in for Maintainers' new pilot program that helps open source project maintainers highlight ongoing efforts in advancing diversity, equity, and inclusion within their communities. ⌘ [Read more](https://github.blog/2023-06-07-announcing-the-all-in-chaoss-dei-badging-pilot-initiative/) 2023-06-08T19:23:53Z **Developer experience: what is it and why should you care?**
Explore how investing in a better developer experience frees developers to do what matters most: building great software. ⌘ [Read more](https://github.blog/2023-06-08-developer-experience-what-is-it-and-why-should-you-care/) 2023-06-08T21:01:23Z **Maintainer Month 2023: How the community gathered to spread some maintainer love**
Maintainer Month is a time for open source maintainers to gather, share, and be celebrated. Over 31 days, 16 organizations came together to offer 42 activities convening and celebrating maintainers. ⌘ [Read more](https://github.blog/2023-06-08-maintainer-month-2023-how-the-community-gathered-to-spread-some-maintainer-love/) 2023-06-12T16:04:24Z **Cloud migration made easy: introducing GitHub Enterprise Importer**
With GitHub Enterprise Importer, you can seamlessly move to GitHub Enterprise Cloud, bringing your code and collaboration history with you so your team doesn’t miss a beat. ⌘ [Read more](https://github.blog/2023-06-12-cloud-migration-made-easy-introducing-github-enterprise-importer/) 2023-06-12T17:00:34Z **Make your GitHub projects more accessible with accessibility-alt-text-bot**
The accessibility-alt-text-bot leaves automated reminders in a comment when a user shares an image without providing meaningful alt text. ⌘ [Read more](https://github.blog/2023-06-12-make-your-github-projects-more-accessible-with-accessibility-alt-text-bot/) 2023-06-12T18:59:28Z **Survey reveals AI’s impact on the developer experience**
We surveyed 500 U.S.-based developers at companies with 1,000-plus employees about how managers should consider developer productivity, collaboration, and AI coding tools. ⌘ [Read more](https://github.blog/2023-06-12-survey-reveals-ais-impact-on-the-developer-experience/) 2023-06-12T19:51:14Z **GitHub’s revamped VIP Bug Bounty Program**
GitHub’s VIP Bug Bounty Program has been updated to include a clear and accessible criteria for receiving an invitation to the program and more. Learn more about the program and how you can become a Hacktocat, and join our community of researchers who are contributing to GitHub’s security with fun perks and access to staff and beta features! ⌘ [Read more](https://github.blog/2023-06-12-githubs-revamped-vip-bug-bounty-program/) 2023-06-13T15:00:28Z **Survey reveals AI’s impact on the developer experience**
We surveyed 500 U.S.-based developers at companies with 1,000-plus employees about how managers should consider developer productivity, collaboration, and AI coding tools. ⌘ [Read more](https://github.blog/2023-06-13-survey-reveals-ais-impact-on-the-developer-experience/) 2023-06-14T18:56:07Z **GitHub Availability Report: May 2023**
In May, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into three April incidents that resulted in degraded performance across GitHub services. ⌘ [Read more](https://github.blog/2023-06-14-github-availability-report-may-2023/) 2023-06-15T12:53:54Z **CodeQL zero to hero part 2: getting started with CodeQL**
Learn the basics of CodeQL and how to use it for security research! In this blog, we will teach you how to leverage GitHub’s static analysis tool CodeQL to write custom CodeQL queries. ⌘ [Read more](https://github.blog/2023-06-15-codeql-zero-to-hero-part-2-getting-started-with-codeql/) 2023-06-15T16:20:30Z **Exploring GitHub with the redesigned navigation, now in public beta**
GitHub’s redesigned navigation is enabled for all users as a public beta. ⌘ [Read more](https://github.blog/2023-06-15-exploring-github-with-the-redesigned-navigation-now-in-public-beta/) 2023-06-19T19:34:18Z **Developers need the right to challenge junk patents**
The United States Patent and Trademark Office (USPTO) recently proposed rule changes that will make it harder to challenge low quality patents. Without the ability to quickly and efficiently challenge wrongly granted patents, innovation and developers suffer. ⌘ [Read more](https://github.blog/2023-06-19-developers-need-the-right-to-challenge-junk-patents/) 2023-06-20T16:00:08Z **How to use GitHub Copilot: Prompts, tips, and use cases**
In this prompt guide for GitHub Copilot, two GitHub developer advocates, Rizel and Michelle, will share examples and best practices for communicating your desired results to the AI pair programmer. ⌘ [Read more](https://github.blog/2023-06-20-how-to-write-better-prompts-for-github-copilot/) 2023-06-21T17:35:17Z **Crafting a better, faster code view**
The new GitHub Code View brings users many new features to improve the code reading and exploration experiences, and we overcame a number of unique technical hurdles in order to deliver those features without compromising performance. ⌘ [Read more](https://github.blog/2023-06-21-crafting-a-better-faster-code-view/) 2023-06-21T20:44:06Z **Bridging code and community**
Explore the impact of non-code contributions—and why they are often undervalued, the challenges of using open source in regulated environments, and the art of managing projects at the scale of Kubernetes, now on The ReadME Podcast. ⌘ [Read more](https://github.blog/2023-06-21-bridging-code-and-community/) 2023-06-21T22:20:30Z **Open Source challenge results from Gamedev.js Jam 2023**
Highlighting 13 of the top games plus source from the latest Gamedev.js jam–by GitHub Star and event organizer, Andrzej Mazur. ⌘ [Read more](https://github.blog/2023-06-21-gamedev-js-2023/) 2023-06-26T16:36:07Z **New tool to secure your GitHub Actions**
Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions. ⌘ [Read more](https://github.blog/2023-06-26-new-tool-to-secure-your-github-actions/) 2023-06-27T16:20:54Z **The economic impact of the AI-powered developer lifecycle and lessons from GitHub Copilot**
Today at Collision Conference we unveiled breaking new research on the economic and productivity impact of generative AI–powered developer tools. The research found that the increase in developer productivity due to AI could boost global GDP by over $1.5 trillion. ⌘ [Read more](https://github.blog/2023-06-27-the-economic-impact-of-the-ai-powered-developer-lifecycle-and-lessons-from-github-copilot/) 2023-06-29T16:45:23Z **GitHub Enterprise Server 3.9 is now generally available**
GitHub Enterprise Server 3.9 is now generally available. Organizations can now take advantage of more features that enable deeper collaboration, greater observability and faster workflows. ⌘ [Read more](https://github.blog/2023-06-29-github-enterprise-server-3-9-is-now-generally-available/) 2023-06-30T17:26:31Z **Game Bytes · June 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ [Read more](https://github.blog/2023-06-30-game-bytes-june-2023/) 2023-07-03T23:00:49Z **Leading your platform migration with developer experience**
Developer experience (DevEx) is a key theme when it comes to transforming businesses with GitHub. ⌘ [Read more](https://github.blog/2023-07-03-leading-your-platform-migration-with-developer-experience/) 2023-07-05T16:00:29Z **Introduction to SELinux**
SELinux is the most popular Linux Security Module used to isolate and protect system components from one another. Learn about different access control systems and Linux security as I introduce the foundations of a popular type system. ⌘ [Read more](https://github.blog/2023-07-05-introduction-to-selinux/) 2023-07-05T18:16:56Z **GitHub achieves ISO/IEC 27701:2019, 27018:2019, and CSA STAR certifications**
GitHub’s Information Security and Privacy Management System (ISPMS) has been certified against ISO/IEC 27701:2019 (PII Processor) and 27018:2019 standards, as well as the Cloud Controls Matrix (CCM). These standards and frameworks are internationally recognized for security and privacy program best practices. ⌘ [Read more](https://github.blog/2023-07-05-github-achieves-iso-iec-277012019-270182019-and-csa-star-certifications/) 2023-07-06T16:00:23Z **Keeping up with big shifts in tech**
Deciding whether or not to adopt a tool can be hard enough, but what about when it seems to break the paradigms you know? ⌘ [Read more](https://github.blog/2023-07-06-keeping-up-with-big-shifts-in-tech/) 2023-07-06T19:00:51Z **Accessibility considerations behind code search and code view**
A look at how we improved the readability of code on GitHub. ⌘ [Read more](https://github.blog/2023-07-06-accessibility-considerations-behind-code-search-and-code-view/) 2023-07-11T16:52:08Z **Demonstrating end-to-end traceability with pull requests**
Reduce developer and auditor friction involved in demonstrating compliance and maintaining end-to-end traceability by focusing your efforts around the pull request. ⌘ [Read more](https://github.blog/2023-07-11-demonstrating-end-to-end-traceability-with-pull-requests/) 2023-07-11T21:52:34Z **GitHub CLI project command is now generally available!**
Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command. ⌘ [Read more](https://github.blog/2023-07-11-github-cli-project-command-is-now-generally-available/) 2023-07-12T15:00:45Z **Introducing passwordless authentication on GitHub.com**
Passkeys are now available in public beta. Opting in lets you upgrade security keys to passkeys, and use those in place of both your password and your 2FA method. ⌘ [Read more](https://github.blog/2023-07-12-introducing-passwordless-authentication-on-github-com/) 2023-07-12T15:02:45Z **Introducing passwordless authentication on GitHub.com**
Passkeys are now available in public beta. Opting in lets you upgrade security keys to passkeys, and use those in place of both your password and your 2FA method. ⌘ [Read more](https://github.blog/2023-07-12-introducing-passwordless-authentication-on-github-com/) 2023-07-12T15:12:52Z **GitHub merge queue is generally available**
Supercharge pull request merges on your busiest branches by enabling your team to queue. ⌘ [Read more](https://github.blog/2023-07-12-github-merge-queue-is-generally-available/) 2023-07-12T18:36:57Z **No cyber resilience without open source sustainability**
Have your say to protect open source in the EU. ⌘ [Read more](https://github.blog/2023-07-12-no-cyber-resilience-without-open-source-sustainability/) 2023-07-12T20:00:32Z **GitHub Availability Report: June 2023**
In June, we experienced two incidents that resulted in degraded performance across GitHub services.  June 7 16:11 UTC (lasting 2 hours 28 minutes) On June 7 at 16:11 UTC, GitHub started experiencing increasing delays in an internal job queue used to process Git pushes. Our monitoring systems alerted our first responders after 19 minutes. During […] ⌘ [Read more](https://github.blog/2023-07-12-github-availability-report-june-2023/) 2023-07-13T13:44:24Z **Moving from a product to a service mindset**
Thanks to DevOps, cloud computing and other industry trends, many organizations are shifting from a product mindset to a service mindset. Here’s how you can implement a service-led strategy. ⌘ [Read more](https://github.blog/2023-07-13-moving-from-a-product-to-a-service-mindset/) 2023-07-13T18:02:52Z **(De)coding conventions**
Navigating the ebb and flow of programming paradigms–from the shifts in the JavaScript ecosystem and TypeScript's rise, to AI's role in advancing accessibility, and strategies for encouraging non-code contributions–tune in to the latest episode of The ReadME Podcast for more. ⌘ [Read more](https://github.blog/2023-07-13-decoding-conventions/) 2023-07-14T00:58:12Z **Release Radar · Spring 2023 Edition**
It’s been a while since we’ve published our Release Radar. You can blame IRL conferences coming back, getting influenza, and being struck down by the weather. But those are just me problems. While I’ve been down or travelling, the community has been hard at work shipping new releases and new projects. So, we thought we’d […] ⌘ [Read more](https://github.blog/2023-07-13-release-radar-spring-23/) 2023-07-17T14:27:15Z **A developer’s guide to prompt engineering and LLMs**
Prompt engineering is the art of communicating with a generative AI model. In this article, we’ll cover how we approach prompt engineering at GitHub, and how you can use it to build your own LLM-based application. ⌘ [Read more](https://github.blog/2023-07-17-prompt-engineering-guide-generative-ai-llms/) 2023-07-18T14:43:24Z **Security alert: social engineering campaign targets technology industry employees**
GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms. No GitHub or npm systems were compromised in this campaign. We’re publishing this blog post as a warning for our customers to prevent exploitation by this threat actor. ⌘ [Read more](https://github.blog/2023-07-18-security-alert-social-engineering-campaign-targets-technology-industry-employees/) 2023-07-19T16:00:04Z **Metrics for issues, pull requests, and discussions**
With the new Issue Metrics GitHub Action, you can now track and monitor important metrics related to issues, pull requests, and discussions, such as time to first response, time to close, and more! ⌘ [Read more](https://github.blog/2023-07-19-metrics-for-issues-pull-requests-and-discussions/) 2023-07-19T17:00:44Z **Exploring developer happiness, inclusion, and productivity at GitHub’s Design Conference**
As a design organization, we have the opportunity to make a significant impact on designing the platform for all developers. How does the emergence of creative AI impact our work? How can we achieve an inclusive experience for a spectrum of all abilities? What does designing for developer happiness look like? ⌘ [Read more](https://github.blog/2023-07-19-exploring-developer-happiness-inclusion-and-productivity-at-githubs-design-conference/) 2023-07-20T15:45:57Z **GitHub Copilot Chat beta now available for every organization**
All GitHub Copilot for Business users now have access to a limited GitHub Copilot Chat beta, bringing the power of conversational coding right to the IDE. ⌘ [Read more](https://github.blog/2023-07-20-github-copilot-chat-beta-now-available-for-every-organization/) 2023-07-24T16:01:58Z **GitHub Repository Rules are now generally available**
Repository rules provide an easy, flexible way to define branch protections and ensure consistency in code across repositories. ⌘ [Read more](https://github.blog/2023-07-24-github-repository-rules-are-now-generally-available/) 2023-07-25T16:00:12Z **How to responsibly adopt GitHub Copilot with the GitHub Copilot Trust Center**
We’re launching the GitHub Copilot Trust Center to provide transparency about how GitHub Copilot works and help organizations innovate responsibly with generative AI. ⌘ [Read more](https://github.blog/2023-07-25-how-to-responsibly-adopt-github-copilot-with-the-github-copilot-trust-center/) 2023-07-25T17:00:23Z **How to build a GPT-3 App with Nextjs, React, and GitHub Copilot**
In this step-by-step tutorial, you will learn how to use GitHub Copilot to build an application with OpenAI’s gpt-3.5-turbo model. ⌘ [Read more](https://github.blog/2023-07-25-how-to-build-a-gpt-3-app-with-nextjs-react-and-github-copilot/) 2023-07-25T19:00:15Z **Game Bytes · July 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! ⌘ [Read more](https://github.blog/2023-07-25-game-bytes-july-2023/) 2023-07-26T07:01:33Z **How to get AI regulation right for open source**
Sharing our coalition paper to inform the final negotiation of the EU AI Act. ⌘ [Read more](https://github.blog/2023-07-26-how-to-get-ai-regulation-right-for-open-source/) 2023-07-27T16:00:54Z **Scaling merge-ort across GitHub**
GitHub switched to performing merges and rebases using merge-ort. Come behind the scenes to see why and how we made this change. ⌘ [Read more](https://github.blog/2023-07-27-scaling-merge-ort-across-github/) 2023-07-28T13:00:59Z **Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform**
This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation. Both vulnerabilities were addressed by the Decidim team with corresponding update releases for the supported versions in May 2023. ⌘ [Read more](https://github.blog/2023-07-28-closing-vulnerabilities-in-decidim-a-ruby-based-citizen-participation-platform/) 2023-07-28T19:24:45Z **Smarter, more efficient coding: GitHub Copilot goes beyond Codex with improved AI model**
We're thrilled to announce two major updates to GitHub Copilot Code Complete's AI capabilities that will help developers work even more efficiently and effectively. ⌘ [Read more](https://github.blog/2023-07-28-smarter-more-efficient-coding-github-copilot-goes-beyond-codex-with-improved-ai-model/) 2023-08-02T12:31:17Z **How we build containerized services at GitHub using GitHub**
Learn about how we build containerized services that power microservices on the GitHub.com platform and many internal tools. ⌘ [Read more](https://github.blog/2023-08-02-how-we-build-containerized-services-at-github-using-github/) 2023-08-02T19:55:12Z **Best practices for organizations and teams using GitHub Enterprise Cloud**
Learn how you can structure your enterprise to get the most value out of GitHub and provide the best experience for your developers! ⌘ [Read more](https://github.blog/2023-08-02-best-practices-for-organizations-and-teams-using-github-enterprise-cloud/) 2023-08-03T16:01:05Z **Introducing code referencing for GitHub Copilot**
Today, we’re announcing a private beta of GitHub Copilot with code referencing that includes a filter to detect code suggestions matching public code on GitHub. ⌘ [Read more](https://github.blog/2023-08-03-introducing-code-referencing-for-github-copilot/) 2023-08-04T16:00:15Z **A checklist and guide to get your repository collaboration-ready**
In the world of software development, collaboration can make the difference between a brittle last-minute release and a reliable, maintainable, pain-free project. Whether you’ve been coding for a day or a decade, your colleagues are there to help strengthen your work. But they can only help if you’ve given them the tools to do so. ⌘ [Read more](https://github.blog/2023-08-04-a-checklist-and-guide-to-get-your-repository-collaboration-ready/) 2023-08-08T14:28:15Z **A guide to designing and shipping AI developer tools**
GitHub’s design experts share 10 tips and lessons for designing magical user experiences for AI applications and AI coding tools. ⌘ [Read more](https://github.blog/2023-08-08-a-guide-to-designing-and-shipping-ai-developer-tools/) 2023-08-09T16:00:15Z **Four tips to keep your GitHub Actions workflows secure**
Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.

The post [Four tips to keep your GitHub Actions workflows secure](https://github.blog/2023-08-09-four-tips-to-keep-your-github-actions-workflows-secure/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-09-four-tips-to-keep-your-github-actions-workflows-secure/) 2023-08-09T18:00:42Z **GitHub Availability Report: July 2023**
In July, we experienced one incident that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: July 2023](https://github.blog/2023-08-09-github-availability-report-july-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-09-github-availability-report-july-2023/) 2023-08-09T19:02:14Z **Enhanced push protection features for developers and organizations**
Introducing two new secret scanning push protection features that will enable individual developers to protect all their pushes and organizations to gain insights and trends across their repositories.

The post [Enhanced push protection features for developers and organizations](https://github.blog/2023-08-09-enhanced-push-protection-features-for-developers-and-organizations/) appeared first on [The GitH ... ⌘ [Read more](https://github.blog/2023-08-09-enhanced-push-protection-features-for-developers-and-organizations/) 2023-08-14T15:21:19Z **Nine years of the GitHub Security Bug Bounty program**
It was another record year for our Security Bug Bounty program! We're excited to highlight some achievements we’ve made together with the bounty community in 2022!

The post [Nine years of the GitHub Security Bug Bounty program](https://github.blog/2023-08-14-nine-years-of-the-github-security-bug-bounty-program/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-14-nine-years-of-the-github-security-bug-bounty-program/) 2023-08-15T16:00:49Z **Hardening repositories against credential theft**
Some best practices and important defenses to prevent common attacks against GitHub Actions that are enabled by stolen personal access tokens, compromised accounts, or compromised GitHub sessions.

The post [Hardening repositories against credential theft](https://github.blog/2023-08-15-hardening-repositories-against-credential-theft/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-15-hardening-repositories-against-credential-theft/) 2023-08-15T18:00:52Z **Release Radar · July 2023 Edition**
After the last Release Radar, I promised the next one wouldn’t be far away, so here it is. This is the low down on some of the best open source projects that shipped major version updates in July. There’s lots of cool stuff from natural language processing, to APIs, money, and SDKs. I won’t spoil […]

The post [Release Radar · July 2023 Edition](https://github.blog/2023-08-15-release-radar-jul-23/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-15-release-radar-jul-23/) 2023-08-15T19:04:09Z **Build for today, transform for tomorrow at GitHub Universe 2023**
Get tickets to our global developer and customer event for 30% off during our Super-Early Bird special, only for a limited time.

The post [Build for today, transform for tomorrow at GitHub Universe 2023](https://github.blog/2023-08-15-build-for-today-transform-for-tomorrow-at-github-universe-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-15-build-for-today-transform-for-tomorrow-at-github-universe-2023/) 2023-08-17T21:22:26Z **mTLS: When certificate authentication is done wrong**
In this post, we'll deep dive into some interesting attacks on mTLS authentication. We'll have a look at implementation vulnerabilities and how developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages.

The post [mTLS: When certificate authentication is done wrong](https://github.blog/2023-08-17-mtls-when-certificate-authentication-is-done-wrong/) appeared first on [The Gi ... ⌘ [Read more](https://github.blog/2023-08-17-mtls-when-certificate-authentication-is-done-wrong/) 2023-08-21T17:45:07Z **Highlights from Git 2.42**
Another new release of Git is here! Take a look at some of our highlights on what's new in Git 2.42.

The post [Highlights from Git 2.42](https://github.blog/2023-08-21-highlights-from-git-2-42/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-21-highlights-from-git-2-42/) 2023-08-23T16:00:54Z **AI-powered impact: GitHub Social Impact’s year ahead**
How GitHub Social Impact is working with nonprofit organizations, employees, and more to create positive, lasting change in global communities.

The post [AI-powered impact: GitHub Social Impact’s year ahead](https://github.blog/2023-08-23-ai-powered-impact-github-social-impacts-year-ahead/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-23-ai-powered-impact-github-social-impacts-year-ahead/) 2023-08-24T16:57:10Z **Unleashing GitHub Codespaces templates to ignite your development**
Learn how to leverage templating features in GitHub Codespaces to streamline your project setup, improve consistency, and simplify collaboration within your development team.

The post [Unleashing GitHub Codespaces templates to ignite your development](https://github.blog/2023-08-24-unleashing-github-codespaces-templates-to-ignite-your-development/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-24-unleashing-github-codespaces-templates-to-ignite-your-development/) 2023-08-24T20:55:48Z **A faster way to manage version updates with Dependabot**
Now, you can group multiple version updates in a single pull request.

The post [A faster way to manage version updates with Dependabot](https://github.blog/2023-08-24-a-faster-way-to-manage-version-updates-with-dependabot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-24-a-faster-way-to-manage-version-updates-with-dependabot/) 2023-08-25T18:11:56Z **Game Bytes · August 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

The post [Game Bytes · August 2023](https://github.blog/2023-08-25-game-bytes-august-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-25-game-bytes-august-2023/) 2023-08-28T16:18:04Z **10 things you didn’t know you could do with GitHub Projects**
Learn how to optimize your usage of GitHub Projects to plan and track your work from idea to production.

The post [10 things you didn’t know you could do with GitHub Projects](https://github.blog/2023-08-28-10-things-you-didnt-know-you-could-do-with-github-projects/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-28-10-things-you-didnt-know-you-could-do-with-github-projects/) 2023-08-29T18:59:00Z **GitHub Enterprise Server 3.10 is now generally available**
Customers using GHES can now ensure secure development is a top priority with enhanced security and compliance controls for their repositories.

The post [GitHub Enterprise Server 3.10 is now generally available](https://github.blog/2023-08-29-github-enterprise-server-3-10-is-now-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-29-github-enterprise-server-3-10-is-now-generally-available/) 2023-08-30T14:00:08Z **Why Rust is the most admired language among developers**
Rust continues to top the charts as the most admired and desired language by developers, and in this post, we dive a little deeper into how (and why) Rust is stealing the hearts of developers around the world.

The post [Why Rust is the most admired language among developers](https://github.blog/2023-08-30-why-rust-is-the-most-admired-language-among-developers/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-30-why-rust-is-the-most-admired-language-among-developers/) 2023-08-31T15:00:52Z **How GitHub reduces costs with upgraded Codespaces**
See how much more you can get out of GitHub Codespaces by taking advantage of the improved processing power and increased headroom the RAM provides.

The post [How GitHub reduces costs with upgraded Codespaces](https://github.blog/2023-08-31-how-github-reduces-costs-with-upgraded-codespaces/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-08-31-how-github-reduces-costs-with-upgraded-codespaces/) 2023-09-01T15:00:01Z **Getting started with edge computing**
Edge computing practitioners answer your questions about when and why to build applications at the edge.

The post [Getting started with edge computing](https://github.blog/2023-09-01-getting-started-with-edge-computing/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-01-getting-started-with-edge-computing/) 2023-09-06T19:04:19Z **How to build an enterprise LLM application: Lessons from GitHub Copilot**
The team behind GitHub Copilot shares its lessons for building an LLM app that delivers value to both individuals and enterprise users at scale.

The post [How to build an enterprise LLM application: Lessons from GitHub Copilot](https://github.blog/2023-09-06-how-to-build-an-enterprise-llm-application-lessons-from-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-06-how-to-build-an-enterprise-llm-application-lessons-from-github-copilot/) 2023-09-12T16:48:44Z **CodeQL team uses AI to power vulnerability detection in code**
Learn how GitHub’s CodeQL leveraged AI modeling and multi-repository variant analysis to discover a new CVE in Gradle.

The post [CodeQL team uses AI to power vulnerability detection in code](https://github.blog/2023-09-12-codeql-team-uses-ai-to-power-vulnerability-detection-in-code/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-12-codeql-team-uses-ai-to-power-vulnerability-detection-in-code/) 2023-09-13T16:00:31Z **Apply now for GitHub Universe 2023 micro-mentoring**
As part of our ongoing commitment to accelerate human progress through Social Impact initiatives, we’re offering students 30-minute, 1:1 micro-mentoring sessions with GitHub employees ahead of Universe.

The post [Apply now for GitHub Universe 2023 micro-mentoring](https://github.blog/2023-09-13-apply-now-for-github-universe-2023-micro-mentoring/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-13-apply-now-for-github-universe-2023-micro-mentoring/) 2023-09-13T19:00:20Z **GitHub Availability Report: August 2023**
In August, we experienced two incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: August 2023](https://github.blog/2023-09-13-github-availability-report-august-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-13-github-availability-report-august-2023/) 2023-09-14T17:34:10Z **Introducing auto-triage rules for Dependabot**
Make quick work of alerts with preset and custom rules.

The post [Introducing auto-triage rules for Dependabot](https://github.blog/2023-09-14-introducing-auto-triage-rules-for-dependabot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-14-introducing-auto-triage-rules-for-dependabot/) 2023-09-18T16:00:22Z **Switching from Bitbucket Server and Bamboo to GitHub just got easier**
Starting today, GitHub Enterprise Importer supports repository migrations from Bitbucket Server and Bitbucket Data Center, and GitHub Actions Importer offers CI/CD migrations from Bitbucket and Bamboo.

The post [Switching from Bitbucket Server and Bamboo to GitHub just got easier](https://github.blog/2023-09-18-switching-from-bitbucket-server-and-bamboo-to-github-just-got-easier/) appeared first on ... ⌘ [Read more](https://github.blog/2023-09-18-switching-from-bitbucket-server-and-bamboo-to-github-just-got-easier/) 2023-09-20T15:00:36Z **Announcing general availability of GitHub Advanced Security for Azure DevOps**
GitHub Advanced Security for Azure DevOps is now generally available. Enable secret scanning, dependency scanning, and code scanning on your organization directly in Azure DevOps configuration settings.

The post [Announcing general availability of GitHub Advanced Security for Azure DevOps](https://github.blog/2023-09-20-announcing-general-availability-of-github-advanced-security-for- ... ⌘ [Read more](https://github.blog/2023-09-20-announcing-general-availability-of-github-advanced-security-for-azure-devops/) 2023-09-20T16:00:28Z **Introducing Learning Paths on Global Campus**
Guiding student developers through skill building foundations, a building block in their learning journey with GitHub Education.

The post [Introducing Learning Paths on Global Campus](https://github.blog/2023-09-20-introducing-learning-paths-on-global-campus/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-20-introducing-learning-paths-on-global-campus/) 2023-09-20T17:00:19Z **GitHub Copilot Chat beta now available for all individuals**
All GitHub Copilot for Individuals users now have access to GitHub Copilot Chat beta, bringing natural language-powered coding to every developer in all languages.

The post [GitHub Copilot Chat beta now available for all individuals](https://github.blog/2023-09-20-github-copilot-chat-beta-now-available-for-all-individuals/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-20-github-copilot-chat-beta-now-available-for-all-individuals/) 2023-09-21T15:00:03Z **Announcing the GitHub Innovation Graph**
Explore a universe of data about how the world is building software together on GitHub.

The post [Announcing the GitHub Innovation Graph](https://github.blog/2023-09-21-announcing-the-github-innovation-graph/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-21-announcing-the-github-innovation-graph/) 2023-09-21T16:00:03Z **Passkeys are generally available**
All GitHub.com users can now register a passkey to sign in without a password.

The post [Passkeys are generally available](https://github.blog/2023-09-21-passkeys-are-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-21-passkeys-are-generally-available/) 2023-09-21T20:56:46Z **The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects**
The GitHub Security Lab audits open source projects for security vulnerabilities and helps maintainers fix them. Recently, we passed the milestone of 500 CVEs disclosed. Let’s take a trip down memory lane with a review of some noteworthy CVEs!

The post [The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects](https://github.blog/2023-09-21-the-github-s ... ⌘ [Read more](https://github.blog/2023-09-21-the-github-security-labs-journey-to-disclosing-500-cves-in-open-source-projects/) 2023-09-25T16:08:06Z **Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI**
In this step-by-step tutorial, we’ll dive into how you can become the next open source contributor to the GitHub Classroom CLI, building commands that you can use to improve your workflow as an educator!

The post [Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI](https://github.blog/2023-09-25-calling-all-teachers-learn-how-to-build-new-comma ... ⌘ [Read more](https://github.blog/2023-09-25-calling-all-teachers-learn-how-to-build-new-commands-on-the-github-classroom-cli/) 2023-09-26T15:00:54Z **Getting RCE in Chrome with incorrect side effect in the JIT compiler**
In this post, I'll exploit CVE-2023-3420, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

The post [Getting RCE in Chrome with incorrect side effect in the JIT compiler](https://github.blog/2023-09-26-getting-rce-in-chrome-with-incorrect-side-effect-in-the-jit-compiler/) appeared first on [The GitHub Blog](ht ... ⌘ [Read more](https://github.blog/2023-09-26-getting-rce-in-chrome-with-incorrect-side-effect-in-the-jit-compiler/) 2023-09-26T16:00:52Z **Your ultimate guide to the GitHub Universe ‘23 agenda**
Get a sneak peek into the must-attend sessions, speakers, workshops, and GitHub certifications available at our global developer event.

The post [Your ultimate guide to the GitHub Universe ‘23 agenda](https://github.blog/2023-09-26-your-ultimate-guide-to-the-github-universe-23-agenda/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-26-your-ultimate-guide-to-the-github-universe-23-agenda/) 2023-09-26T17:30:14Z **How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com**
Recently, we’ve been working to make our CI experience better by leveraging the newly released GitHub feature, Actions larger runners, to run our CI.

The post [How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com](https://github.blog/2023-09-26-how-github-uses-github-actions-and-actions-larger-runners-to-build-and-test-github-com/ ... ⌘ [Read more](https://github.blog/2023-09-26-how-github-uses-github-actions-and-actions-larger-runners-to-build-and-test-github-com/) 2023-09-27T16:24:25Z **How I used GitHub Copilot Chat to build a ReactJS gallery prototype**
GitHub Copilot Chat can help developers create prototypes, understand code, make UI changes, troubleshoot errors, make code more accessible, and generate unit tests.

The post [How I used GitHub Copilot Chat to build a ReactJS gallery prototype](https://github.blog/2023-09-27-how-i-used-github-copilot-chat-to-build-a-reactjs-gallery-prototype/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-27-how-i-used-github-copilot-chat-to-build-a-reactjs-gallery-prototype/) 2023-09-28T17:33:28Z **GitHub Learning Pathways: Learn from the best**
Gain expertise and insights from top organizations through guided tutorials, boosting productivity, enhancing security, and enabling seamless collaboration.

The post [GitHub Learning Pathways: Learn from the best](https://github.blog/2023-09-28-github-learning-pathways-learn-from-the-best/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-28-github-learning-pathways-learn-from-the-best/) 2023-09-29T14:36:21Z **Game Bytes · September 2023**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

The post [Game Bytes · September 2023](https://github.blog/2023-09-29-game-bytes/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-09-29-game-bytes/) 2023-10-02T15:01:01Z **Introducing the new, Apple silicon powered M1 macOS larger runner for GitHub Actions**
Speed up your GitHub Actions jobs on macOS with all new, faster Apple silicon powered M1 macOS larger runner for arm64.

The post [Introducing the new, Apple silicon powered M1 macOS larger runner for GitHub Actions](https://github.blog/2023-10-02-introducing-the-new-apple-silicon-powered-m1-macos-larger-runner-for-github-actions/) appeared first on [The GitHub Blog](ht ... ⌘ [Read more](https://github.blog/2023-10-02-introducing-the-new-apple-silicon-powered-m1-macos-larger-runner-for-github-actions/) 2023-10-02T17:19:21Z **Cybersecurity spotlight on bug bounty researcher @inspector-ambitious**
For this year’s Cybersecurity Awareness Month, the GitHub bug bounty team is excited to feature another spotlight on a talented security researcher who participates in the GitHub Security Bug Bounty Program—@inspector-ambitious!

The post [Cybersecurity spotlight on bug bounty researcher @inspector-ambitious](https://github.blog/2023-10-02-cybersecurity-spotlight-on-bug-bounty-researcher-inspector-a ... ⌘ [Read more](https://github.blog/2023-10-02-cybersecurity-spotlight-on-bug-bounty-researcher-inspector-ambitious/) 2023-10-03T16:24:47Z **3 strategies to expand your threat model and secure your supply chain**
How to get the security basics right at your organization.

The post [3 strategies to expand your threat model and secure your supply chain](https://github.blog/2023-10-03-3-strategies-to-expand-your-threat-model-and-secure-your-supply-chain/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-03-3-strategies-to-expand-your-threat-model-and-secure-your-supply-chain/) 2023-10-03T17:00:21Z **Sponsors is expanding**
GitHub Sponsors has partnered with Patreon. We’re also expanding to new regions.

The post [Sponsors is expanding](https://github.blog/2023-10-03-sponsors-is-expanding/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-03-sponsors-is-expanding/) 2023-10-04T16:00:11Z **Introducing secret scanning validity checks for major cloud services**
Secret scanning now performs validity checks for select AWS, Microsoft, Google, and Slack tokens.

The post [Introducing secret scanning validity checks for major cloud services](https://github.blog/2023-10-04-introducing-secret-scanning-validity-checks-for-major-cloud-services/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-04-introducing-secret-scanning-validity-checks-for-major-cloud-services/) 2023-10-04T17:00:29Z **How to communicate like a GitHub engineer: our principles, practices, and tools**
Learn more about how we use GitHub to build GitHub, how we turned our guiding communications principles into prescriptive practices to manage our internal communications signal-to-noise ratio, and how you can contribute to the ongoing conversation.

The post [How to communicate like a GitHub engineer: our principles, practices, and tools](https://github.blog/2023-10-04-how-to-commu ... ⌘ [Read more](https://github.blog/2023-10-04-how-to-communicate-like-a-github-engineer-our-principles-practices-and-tools/) 2023-10-05T16:00:38Z **A developer’s guide to open source LLMs and generative AI**
Open source generative AI projects are a great way to build new AI-powered features and apps.

The post [A developer’s guide to open source LLMs and generative AI](https://github.blog/2023-10-05-a-developers-guide-to-open-source-llms-and-generative-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-05-a-developers-guide-to-open-source-llms-and-generative-ai/) 2023-10-09T14:02:45Z **Skilling African developers through All In Africa**
All In Africa is a gateway to growth, learning, and meaningful connections within the African open source ecosystem and beyond.

The post [Skilling African developers through All In Africa](https://github.blog/2023-10-09-skilling-african-developers-through-all-in-africa/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-09-skilling-african-developers-through-all-in-africa/) 2023-10-09T16:00:05Z **Prompting GitHub Copilot Chat to become your personal AI assistant for accessibility**
GitHub Copilot Chat can help you learn about accessibility and improve the accessibility of your code. In this blog, we share a sample foundational prompt that instructs GitHub Copilot Chat to become your personal AI assistant for accessibility.

The post [Prompting GitHub Copilot Chat to become your personal AI assistant for accessibility](https://github.blog/2023-10- ... ⌘ [Read more](https://github.blog/2023-10-09-prompting-github-copilot-chat-to-become-your-personal-ai-assistant-for-accessibility/) 2023-10-09T17:00:41Z **Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)**
CVE-2023-43641 is a vulnerability in libcue, which can lead to code execution by downloading a file on GNOME.

The post [Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)](https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-09-coordinated-disclosure-1-click-rce-on-gnome-cve-2023-43641/) 2023-10-10T16:00:26Z **Research: Quantifying GitHub Copilot’s impact on code quality**
Findings show that code quality is better across the board and developers felt more confident, too.

The post [Research: Quantifying GitHub Copilot’s impact on code quality](https://github.blog/2023-10-10-research-quantifying-github-copilots-impact-on-code-quality/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-10-research-quantifying-github-copilots-impact-on-code-quality/) 2023-10-11T15:00:42Z **Enforcing code reliability by requiring workflows with GitHub Repository Rules**
GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories.

The post [Enforcing code reliability by requiring workflows with GitHub Repository Rules](https://github.blog/2023-10-11-enforcing-code-reliability-by-requiring-workflows-with-github-repository-rules/) appeared first on [The GitHub Blog](https://g ... ⌘ [Read more](https://github.blog/2023-10-11-enforcing-code-reliability-by-requiring-workflows-with-github-repository-rules/) 2023-10-11T19:47:46Z **GitHub Availability Report: September 2023**
In September, we experienced two incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: September 2023](https://github.blog/2023-10-11-github-availability-report-september-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-11-github-availability-report-september-2023/) 2023-10-12T15:00:04Z **Ensuring the next generation of open source leaders are truly “all in”**
If you are a student from a U.S. minority-serving institution looking to start your journey into open source, join us!

The post [Ensuring the next generation of open source leaders are truly “all in”](https://github.blog/2023-10-12-ensuring-the-next-generation-of-open-source-leaders-are-truly-all-in/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-12-ensuring-the-next-generation-of-open-source-leaders-are-truly-all-in/) 2023-10-13T07:13:44Z **js13kGames 2023 winners 🏆**
The twelfth annual js13kGames coding competition, challenging participants to create games in 13kB or less of JavaScript in a month, just wrapped up. This post highlights the top thirteen entries.

The post [js13kGames 2023 winners 🏆](https://github.blog/2023-10-13-js13k-2023-winners/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-13-js13k-2023-winners/) 2023-10-16T15:28:35Z **Measuring Git performance with OpenTelemetry**
Use our new open source Trace2 receiver component and OpenTelemetry to capture and visualize telemetry from your Git commands.

The post [Measuring Git performance with OpenTelemetry](https://github.blog/2023-10-16-measuring-git-performance-with-opentelemetry/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-16-measuring-git-performance-with-opentelemetry/) 2023-10-17T15:00:55Z **Getting RCE in Chrome with incomplete object initialization in the Maglev compiler**
In this post, I'll exploit CVE-2023-4069, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

The post [Getting RCE in Chrome with incomplete object initialization in the Maglev compiler](https://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the- ... ⌘ [Read more](https://github.blog/2023-10-17-getting-rce-in-chrome-with-incomplete-object-initialization-in-the-maglev-compiler/) 2023-10-17T18:00:18Z **The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024**
Atlassian is ending support for its Server products—including Bitbucket Server—in February 2024. In this post, you’ll learn what that means for you, your options, and how you can move to GitHub.

The post [The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024](https://github.blog/2023-10-17-the-clock-is-ticking-atlassians-support ... ⌘ [Read more](https://github.blog/2023-10-17-the-clock-is-ticking-atlassians-support-for-bitbucket-server-ends-on-february-15-2024/) 2023-10-17T19:03:02Z **Your curated GitHub Universe agenda: AI, ethics, and productivity**
Gain actionable insights about the intersection of AI and human skills, while tackling ethics, accessibility, and productivity at these GitHub Universe sessions.

The post [Your curated GitHub Universe agenda: AI, ethics, and productivity](https://github.blog/2023-10-17-your-curated-github-universe-agenda-ai-ethics-and-productivity/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-17-your-curated-github-universe-agenda-ai-ethics-and-productivity/) 2023-10-19T19:14:39Z **ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok**
The effectiveness of a static application security solution hinges on its ability to provide extensive vulnerability coverage and support for a wide range of languages and frameworks. Today, we’re highlighting two releases that’ll help you discover more vulnerabilities in your codebase, so you can ship more secure software.

The post [ICYMI: improved C++ vulnerability coverage and CodeQL support ... ⌘ [Read more](https://github.blog/2023-10-19-icymi-improved-c-vulnerability-coverage-and-codeql-support-for-lombok/) 2023-10-23T20:39:46Z **How to gain insight into your project contributors**
We're excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Action to empower maintainers to measure how many new and returning contributors and contributions have occurred over any given time period.

The post [How to gain insight into your project contributors](https://github.blog/2023-10-23-how-to-gain-insight-into-your-project-contributors/) appeared first ... ⌘ [Read more](https://github.blog/2023-10-23-how-to-gain-insight-into-your-project-contributors/) 2023-10-25T16:00:30Z **Cybersecurity spotlight on bug bounty researcher @Ammar Askar**
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program—@Ammar Askar!

The post [Cybersecurity spotlight on bug bounty researcher @Ammar Askar](https://github.blog/2023-10-25-cybersecurity-spotlight-on-bug-bounty-researcher-ammar-askar/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-25-cybersecurity-spotlight-on-bug-bounty-researcher-ammar-askar/) 2023-10-26T16:00:24Z **5 tips for making your GitHub profile page accessible**
Your profile’s README invites the world to know you and your work, so it’s important that everyone can read and understand it. In this post, we share some tips for making your README more accessible.

The post [5 tips for making your GitHub profile page accessible](https://github.blog/2023-10-26-5-tips-for-making-your-github-profile-page-accessible/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-26-5-tips-for-making-your-github-profile-page-accessible/) 2023-10-27T15:00:10Z **Developers are the first group to adopt AI at work. Here’s why that matters.**
From starting at GitHub over 10 years ago as a developer to becoming the Chief Operating Officer, I’ve learned that developers are often bellwethers for change across the rest of their organizations. That makes investing in—and learning from—them critical.

The post [Developers are the first group to adopt AI at work. Here’s why that matters.](https://github.blog/2023-10-27-developers-ar ... ⌘ [Read more](https://github.blog/2023-10-27-developers-are-the-first-group-to-adopt-ai-at-work-heres-why-that-matters/) 2023-10-27T16:57:09Z **Demystifying LLMs: How they can do things they weren’t trained to do**
Explore how LLMs generate text, why they sometimes hallucinate information, and the ethical implications surrounding their incredible capabilities.

The post [Demystifying LLMs: How they can do things they weren’t trained to do](https://github.blog/2023-10-27-demystifying-llms-how-they-can-do-things-they-werent-trained-to-do/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-27-demystifying-llms-how-they-can-do-things-they-werent-trained-to-do/) 2023-10-30T08:00:14Z **Hackable Halloween games MMXXIII**
13 spooktacular games plus source code for readers to jam on.

The post [Hackable Halloween games MMXXIII](https://github.blog/2023-10-30-hackable-halloween-games-mmxxiii/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-30-hackable-halloween-games-mmxxiii/) 2023-10-30T16:22:59Z **The architecture of today’s LLM applications**
Here’s everything you need to know to build your first LLM app and problem spaces you can start exploring today.

The post [The architecture of today’s LLM applications](https://github.blog/2023-10-30-the-architecture-of-todays-llm-applications/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-30-the-architecture-of-todays-llm-applications/) 2023-10-31T06:11:07Z **Release Radar · Hacktoberfest 2023 Edition**
As Hacktoberfest comes to a close, you still have a day or so left to complete and submit your pull requests. If you’re struggling to think of projects to contribute to, our picks below might help you. This edition of the Release Radar covers a few projects that shipped major version updates this August and […]

The post [Release Radar · Hacktoberfest 2023 Edition](https://github.blog/2023-10-30-release-radar-hack-23/) appeared first on [The GitHub Blog](https://github.bl ... ⌘ [Read more](https://github.blog/2023-10-30-release-radar-hack-23/) 2023-10-31T19:22:45Z **Introducing the GitHub transparency center**
It’s time for our biannual transparency report, where we share how we approach content moderation and disclosure of user information. This year, we’re introducing the transparency center, a new platform for our transparency reporting data.

The post [Introducing the GitHub transparency center](https://github.blog/2023-10-31-introducing-the-github-transparency-center/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-10-31-introducing-the-github-transparency-center/) 2023-11-01T16:01:02Z **Diversity, inclusion, and belonging at GitHub in 2023**
We expanded diversity of our employee base, launched several new employee engagement programs, made investments to improve accessibility, and more.

The post [Diversity, inclusion, and belonging at GitHub in 2023](https://github.blog/2023-11-01-diversity-inclusion-and-belonging-at-github-in-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-01-diversity-inclusion-and-belonging-at-github-in-2023/) 2023-11-01T20:36:11Z **GitHub Game Off 2023 theme announcement**
It’s the moment you’ve all been waiting for. Are you ready?

The post [GitHub Game Off 2023 theme announcement](https://github.blog/2023-11-01-github-game-off-2023-theme-announcement/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-01-github-game-off-2023-theme-announcement/) 2023-11-02T14:00:44Z **Celebrating the first round of GitHub Accelerator and what’s next**
Celebrate the maintainers of the first GitHub Accelerator cohort, learn what they have been up to since, and hear what’s next for GitHub Accelerator.

The post [Celebrating the first round of GitHub Accelerator and what’s next](https://github.blog/2023-11-02-celebrating-the-first-round-of-github-accelerator-and-whats-next/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-02-celebrating-the-first-round-of-github-accelerator-and-whats-next/) 2023-11-02T16:02:31Z **Leveraging AI to empower all developers at GitHub Universe 2023**
GitHub Universe 2023 is just around the corner! Join us and learn how GitHub is leveraging AI to empower all developers, including developers with disabilities.

The post [Leveraging AI to empower all developers at GitHub Universe 2023](https://github.blog/2023-11-02-leveraging-ai-to-empower-all-developers-at-github-universe-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-02-leveraging-ai-to-empower-all-developers-at-github-universe-2023/) 2023-11-08T17:10:52Z **Universe 2023: Copilot transforms GitHub into the AI-powered developer platform**
GitHub is announcing general availability of GitHub Copilot Chat and previews of the new GitHub Copilot Enterprise offering, new AI-powered security features, and the GitHub Copilot Partner Program.

The post [Universe 2023: Copilot transforms GitHub into the AI-powered developer platform](https://github.blog/2023-11-08-universe-2023-copilot-transforms-github-into-the-ai-powered- ... ⌘ [Read more](https://github.blog/2023-11-08-universe-2023-copilot-transforms-github-into-the-ai-powered-developer-platform/) 2023-11-08T17:10:15Z **Octoverse: The state of open source and rise of AI in 2023**
In this year’s Octoverse report, we study how open source activity around AI, the cloud, and Git are changing the developer experience.

The post [Octoverse: The state of open source and rise of AI in 2023](https://github.blog/2023-11-08-the-state-of-open-source-and-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-08-the-state-of-open-source-and-ai/) 2023-11-08T17:09:36Z **Introducing AI-powered application security testing with GitHub Advanced Security**
Learn about how GitHub Advanced Security’s new AI-powered features can help you secure your code more efficiently than ever.

The post [Introducing AI-powered application security testing with GitHub Advanced Security](https://github.blog/2023-11-08-ai-powered-appsec/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-08-ai-powered-appsec/) 2023-11-10T00:00:11Z **Celebrating the GitHub Awards 2023 recipients 🎉**
The GitHub Awards recognizes and celebrates the outstanding contributions and achievements in the developer community, honoring individuals, projects, and organizations for their impactful work, innovation, thought leadership, and creating an outsized positive impact on the community.

The post [Celebrating the GitHub Awards 2023 recipients 🎉](https://github.blog/2023-11-09-celebrating-the-github-awards-2023-recipients/) appeared first on [The ... ⌘ [Read more](https://github.blog/2023-11-09-celebrating-the-github-awards-2023-recipients/) 2023-11-13T20:10:14Z **GitHub Availability Report: October 2023**
In October, we experienced two incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: October 2023](https://github.blog/2023-11-13-github-availability-report-october-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-13-github-availability-report-october-2023/) 2023-11-15T21:25:16Z **Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform**
Discover new AI-powered features and tools to help developers stay in the flow and organizations innovate at scale.

The post [Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform](https://github.blog/2023-11-15-universes-key-takeaway-innovate-better-with-ai-powered-workflows-on-a-single-unified-pla ... ⌘ [Read more](https://github.blog/2023-11-15-universes-key-takeaway-innovate-better-with-ai-powered-workflows-on-a-single-unified-platform/) 2023-11-16T17:00:38Z **Security best practices for authors of GitHub Actions**
Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.

The post [Security best practices for authors of GitHub Actions](https://github.blog/2023-11-16-security-best-practices-for-authors-of-github-actions/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-16-security-best-practices-for-authors-of-github-actions/) 2023-11-20T18:07:00Z **Highlights from Git 2.43**
The last Git release of 2023 is here! Take a look at some of our highlights on what's new in Git 2.43.

The post [Highlights from Git 2.43](https://github.blog/2023-11-20-highlights-from-git-2-43/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-20-highlights-from-git-2-43/) 2023-11-21T17:00:18Z **For Good First Issue: Introducing a new way to contribute**
For Good First Issue is a curated list of open source projects that are also digital public goods and need the help of developers.

The post [For Good First Issue: Introducing a new way to contribute](https://github.blog/2023-11-21-for-good-first-issue-introducing-a-new-way-to-contribute/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-21-for-good-first-issue-introducing-a-new-way-to-contribute/) 2023-11-30T13:52:58Z **Securing our home labs: Home Assistant code review**
The GitHub Security Lab examined the most popular open source software running on our home labs, with the aim of enhancing its security. Here's what we found and what you can do to better protect your own smart home.

The post [Securing our home labs: Home Assistant code review](https://github.blog/2023-11-30-securing-our-home-labs-home-assistant-code-review/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-30-securing-our-home-labs-home-assistant-code-review/) 2023-11-30T17:35:12Z **From the pages of our Insider newsletter: How to use GitHub Copilot**
Explore July’s Insider newsletter, featuring prompts, tips, and use cases for GitHub Copilot.

The post [From the pages of our Insider newsletter: How to use GitHub Copilot](https://github.blog/2023-11-30-from-the-pages-of-our-insider-newsletter-how-to-use-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-11-30-from-the-pages-of-our-insider-newsletter-how-to-use-github-copilot/) 2023-12-04T16:56:03Z **The ultimate gifts for the developer in your life this holiday season**
If you're on the hunt for the perfect holiday gifts for the developer who has it all, look no further. We’ve curated a list of 10 must-have items (plus a few more) that strike the perfect balance between practicality and style.

The post [The ultimate gifts for the developer in your life this holiday season](https://github.blog/2023-12-04-the-ultimate-gifts-for-the-developer-in-your-life-this-holid ... ⌘ [Read more](https://github.blog/2023-12-04-the-ultimate-gifts-for-the-developer-in-your-life-this-holiday-season/) 2023-12-05T23:00:52Z **GitHub Enterprise Server 3.11 is now generally available**
Customers using GitHub Enterprise Server can gain more insight and understanding into the security of their code.

The post [GitHub Enterprise Server 3.11 is now generally available](https://github.blog/2023-12-05-github-enterprise-server-3-11-is-now-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-05-github-enterprise-server-3-11-is-now-generally-available/) 2023-12-05T22:00:41Z **Addressing post-quantum cryptography with CodeQL**
Learn how researchers and security experts at GitHub, Microsoft, and Santander came together to address the challenges presented by the post-quantum cryptography world.

The post [Addressing post-quantum cryptography with CodeQL](https://github.blog/2023-12-05-addressing-post-quantum-cryptography-with-codeql/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-05-addressing-post-quantum-cryptography-with-codeql/) 2023-12-06T16:00:37Z **How we’re experimenting with LLMs to evolve GitHub Copilot**
Learn how we’re experimenting with generative AI models to extend GitHub Copilot across the developer lifecycle.

The post [How we’re experimenting with LLMs to evolve GitHub Copilot](https://github.blog/2023-12-06-how-were-experimenting-with-llms-to-evolve-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-06-how-were-experimenting-with-llms-to-evolve-github-copilot/) 2023-12-06T17:30:42Z **Cueing up a calculator: an introduction to exploit development on Linux**
Using CVE-2023-43641 as an example, I’ll explain how to develop an exploit for a memory corruption vulnerability on Linux. The exploit has to bypass several mitigations to achieve code execution.

The post [Cueing up a calculator: an introduction to exploit development on Linux](https://github.blog/2023-12-06-cueing-up-a-calculator-an-introduction-to-exploit-development-on-linux/) appeared first ... ⌘ [Read more](https://github.blog/2023-12-06-cueing-up-a-calculator-an-introduction-to-exploit-development-on-linux/) 2023-12-07T16:37:33Z **GitHub Innovation Graph Q2 2023 Data Release**
Discover the latest trends and insights on public software development activity on GitHub with the release of Q2 2023 data for the Innovation Graph.

The post [GitHub Innovation Graph Q2 2023 Data Release](https://github.blog/2023-12-07-github-innovation-graph-q2-2023-data-release/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-07-github-innovation-graph-q2-2023-data-release/) 2023-12-07T21:01:53Z **From macOS runners to secure deployments, what’s new from GitHub Actions**
Read a roundup of the exciting, new innovation coming from GitHub Actions.

The post [From macOS runners to secure deployments, what’s new from GitHub Actions](https://github.blog/2023-12-07-from-macos-runners-to-secure-deployments-whats-new-from-github-actions/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-07-from-macos-runners-to-secure-deployments-whats-new-from-github-actions/) 2023-12-07T22:00:36Z **Upgrading GitHub.com to MySQL 8.0**
GitHub uses MySQL to store vast amounts of relational data. This is the story of how we seamlessly upgraded our production fleet to MySQL 8.0.

The post [Upgrading GitHub.com to MySQL 8.0](https://github.blog/2023-12-07-upgrading-github-com-to-mysql-8-0/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-07-upgrading-github-com-to-mysql-8-0/) 2023-12-13T16:00:16Z **Default setup now includes scheduled scans and supports all languages covered by CodeQL**
We’ve added new improvements to default setup, including automatically scheduling scans on repositories and support for all CodeQL covered languages.

The post [Default setup now includes scheduled scans and supports all languages covered by CodeQL](https://github.blog/2023-12-13-default-setup-now-includes-scheduled-scans-and-supports-all-languages-covered-by-cod ... ⌘ [Read more](https://github.blog/2023-12-13-default-setup-now-includes-scheduled-scans-and-supports-all-languages-covered-by-codeql/) 2023-12-13T17:00:50Z **Securing our home labs: Frigate code review**
This blog post describes two linked vulnerabilities found in Frigate, an AI-powered security camera manager, that could have enabled an attacker to silently gain remote code execution.

The post [Securing our home labs: Frigate code review](https://github.blog/2023-12-13-securing-our-home-labs-frigate-code-review/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-13-securing-our-home-labs-frigate-code-review/) 2023-12-13T20:48:54Z **GitHub Availability Report: November 2023**
In November, we experienced one incident that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: November 2023](https://github.blog/2023-12-13-github-availability-report-november-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-13-github-availability-report-november-2023/) 2023-12-14T14:00:22Z **Scaling vulnerability management across thousands of services and more than 150 million findings**
Learn about how we run a scalable vulnerability management program built on top of GitHub.

The post [Scaling vulnerability management across thousands of services and more than 150 million findings](https://github.blog/2023-12-14-scaling-vulnerability-management-across-thousands-of-services-and-more-than-150-million-findings/) appeared first on ... ⌘ [Read more](https://github.blog/2023-12-14-scaling-vulnerability-management-across-thousands-of-services-and-more-than-150-million-findings/) 2023-12-15T03:32:03Z **Release Radar · Thanksgiving 2023 Edition**
Hacktoberfest has wrapped up, GitHub Universe has come to a close, and our community has been super hard at work. All the while people have been enjoying turkey and expressing gratitude for those around them. In this edition, we’re thankful to the open source community and all the awesome projects shipped over the past two […]

The post [Release Radar · Thanksgiving 2023 Edition](https://github.blog/2023-12-14-release-radar-nov-2023/) appeared first on [The GitHub Blog](h ... ⌘ [Read more](https://github.blog/2023-12-14-release-radar-nov-2023/) 2023-12-19T16:00:03Z **Release Radar · End of 2023 Edition**
Hacktoberfest has wrapped up, GitHub Universe has come to a close, and our community has been super hard at work. All the while people enjoyed turkey over thanksgiving and expressed gratitude for those around them. In this edition, we’d like to thank the open source community for all the awesome projects shipped over the past […]

The post [Release Radar · End of 2023 Edition](https://github.blog/2023-12-19-release-radar-dec-2023/) appeared first on [The GitHub Blog](https://gi ... ⌘ [Read more](https://github.blog/2023-12-19-release-radar-dec-2023/) 2023-12-19T17:00:23Z **From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise**
Read a round-up of the exciting, new innovation coming from GitHub Enterprise.

The post [From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise](https://github.blog/2023-12-19-from-migration-tools-to-updates-to-enterprise-managed-users-whats-new-in-github-enterprise/) appeared first on [The GitHub Blog](https://githu ... ⌘ [Read more](https://github.blog/2023-12-19-from-migration-tools-to-updates-to-enterprise-managed-users-whats-new-in-github-enterprise/) 2023-12-19T18:00:08Z **How we organize and get things done with SERVICEOWNERS**
Take CODEOWNERS and GitHub teams to the next level. Learn about how GitHub engineering solves the age old problem of who owns what.

The post [How we organize and get things done with SERVICEOWNERS](https://github.blog/2023-12-19-how-we-organize-and-get-things-done-with-serviceowners/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-19-how-we-organize-and-get-things-done-with-serviceowners/) 2023-12-27T17:00:23Z **GitHub’s top blog posts of 2023**
As the year winds down, we're highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers.

The post [GitHub’s top blog posts of 2023](https://github.blog/2023-12-27-githubs-top-blog-posts-of-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-27-githubs-top-blog-posts-of-2023/) 2023-12-29T17:00:24Z **GitHub Copilot Chat now generally available for organizations and individuals**
All GitHub Copilot users can now enjoy natural language-powered coding with Copilot Chat at no additional cost.

The post [GitHub Copilot Chat now generally available for organizations and individuals](https://github.blog/2023-12-29-github-copilot-chat-now-generally-available-for-organizations-and-individuals/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2023-12-29-github-copilot-chat-now-generally-available-for-organizations-and-individuals/) 2024-01-03T15:03:41Z **Our move to generated SDKs**
GitHub SDKs: software generated meets hand curated.

The post [Our move to generated SDKs](https://github.blog/2024-01-03-our-move-to-generated-sdks/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-03-our-move-to-generated-sdks/) 2024-01-05T15:02:36Z **5 ways to make your DevSecOps strategy developer-friendly**
Developers care about security, but poorly integrated tools and other factors can cause frustration. Here are five best practices to reduce friction.

The post [5 ways to make your DevSecOps strategy developer-friendly](https://github.blog/2024-01-05-5-ways-to-make-your-devsecops-strategy-developer-friendly/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-05-5-ways-to-make-your-devsecops-strategy-developer-friendly/) 2024-01-08T15:15:02Z **Frenemies to friends: Developers and security tools**
When socializing a new security tool, it IS possible to build a bottom-up security culture where engineering has a seat at the table. Let's explore some effective strategies witnessed by the GitHub technical sales team to make this shift successful.

The post [Frenemies to friends: Developers and security tools](https://github.blog/2024-01-08-frenemies-to-friends-developers-and-security-tools/) appeared first on [The GitHub Blog](http ... ⌘ [Read more](https://github.blog/2024-01-08-frenemies-to-friends-developers-and-security-tools/) 2024-01-08T17:00:22Z **GitHub and the Ekoparty 2023 Capture the Flag**
The GitHub Security Lab teamed up with Ekoparty once again to create some challenges for its yearly Capture the Flag competition!

The post [GitHub and the Ekoparty 2023 Capture the Flag](https://github.blog/2024-01-08-github-and-the-ekoparty-2023-capture-the-flag/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-08-github-and-the-ekoparty-2023-capture-the-flag/) 2024-01-08T20:42:01Z **GitHub Certifications are generally available**
Unlock your full potential with GitHub Certifications! Earning a GitHub certification will give you the competitive advantage of showing up as a GitHub expert.

The post [GitHub Certifications are generally available](https://github.blog/2024-01-08-github-certifications-are-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-08-github-certifications-are-generally-available/) 2024-01-09T20:28:09Z **Game Off 2023 results 🏆**
The GitHub Game Off results are in! All games have been rated, ranked, and reviewed. Read on for a look at the ten highest-rated submissions overall.

The post [Game Off 2023 results 🏆](https://github.blog/2024-01-09-game-off-2023-results/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-09-game-off-2023-results/) 2024-01-11T20:44:16Z **Empowering Uruguay’s future workforce with AI**
During the second cycle of Git Commit Uruguay, students learned the basics of AI and built their own AI-powered projects.

The post [Empowering Uruguay’s future workforce with AI](https://github.blog/2024-01-11-empowering-uruguays-future-workforce-with-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-11-empowering-uruguays-future-workforce-with-ai/) 2024-01-16T20:04:30Z **Rotating credentials for GitHub.com and new GHES patches**
GitHub received a bug bounty report of a vulnerability that allowed access to the environment variables of a production container. We have patched GitHub.com and rotated all affected credentials. If you have hardcoded or cached a public key owned by GitHub, read on to ensure your systems continue working with the new keys.

The post [Rotating credentials for GitHub.com and new GHES patches](https://github.blog/2024-01-16-ro ... ⌘ [Read more](https://github.blog/2024-01-16-rotating-credentials-for-github-com-and-new-ghes-patches/) 2024-01-17T17:00:20Z **A developer’s second brain: Reducing complexity through partnership with AI**
As we look to empower developers with AI tools, we inadvertently integrate AI deeper into the way developers work. How do developers feel about that? And what are the most impactful ways to introduce more AI into workflows? We recently conducted 25 in-depth interviews with developers to understand exactly that.

The post [A developer’s second brain: Reducing complexity through partnership ... ⌘ [Read more](https://github.blog/2024-01-17-a-developers-second-brain-reducing-complexity-through-partnership-with-ai/) 2024-01-17T18:58:36Z **GitHub-hosted runners: Double the power for open source**
GitHub Actions continues its industry-leading support for the OSS community by doubling the Windows/Linux machine size to 4-vCPU runners at no cost for public repositories.

The post [GitHub-hosted runners: Double the power for open source](https://github.blog/2024-01-17-github-hosted-runners-double-the-power-for-open-source/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-17-github-hosted-runners-double-the-power-for-open-source/) 2024-01-17T21:49:41Z **GitHub Availability Report: December 2023**
In December, we experienced three incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: December 2023](https://github.blog/2024-01-17-github-availability-report-december-2023/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-17-github-availability-report-december-2023/) 2024-01-18T16:00:33Z **New data and visualizations highlight the resilience of international developer collaboration**
Discover the latest trends and insights on public software development activity on GitHub with the release of Q3 2023 data for the Innovation Graph.

The post [New data and visualizations highlight the resilience of international developer collaboration](https://github.blog/2024-01-18-new-data-and-visualizations-highlight-the-resilience-of-internation ... ⌘ [Read more](https://github.blog/2024-01-18-new-data-and-visualizations-highlight-the-resilience-of-international-developer-collaboration/) 2024-01-18T17:00:58Z **Insider newsletter digest: Build from anywhere**
Explore the August 2023 edition, featuring easy tips and tricks for GitHub Mobile.

The post [Insider newsletter digest: Build from anywhere](https://github.blog/2024-01-18-insider-newsletter-digest-build-from-anywhere/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-18-insider-newsletter-digest-build-from-anywhere/) 2024-01-18T21:37:57Z **Game Bytes · January 2024**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

The post [Game Bytes · January 2024](https://github.blog/2024-01-18-game-bytes-january-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-18-game-bytes-january-2024/) 2024-01-22T17:30:07Z **10 unexpected ways to use GitHub Copilot**
GitHub Copilot is widely known for its code generation feature. Learn how the AI assistant’s abilities can extend beyond just code generation.

The post [10 unexpected ways to use GitHub Copilot](https://github.blog/2024-01-22-10-unexpected-ways-to-use-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-22-10-unexpected-ways-to-use-github-copilot/) 2024-01-22T19:46:30Z **How to get in the flow while coding (and why it’s important)**
Explore what flow state entails, its benefits, and three tips for reaching it the next time you code.

The post [How to get in the flow while coding (and why it’s important)](https://github.blog/2024-01-22-how-to-get-in-the-flow-while-coding-and-why-its-important/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-22-how-to-get-in-the-flow-while-coding-and-why-its-important/) 2024-01-23T17:00:46Z **Good DevEx increases productivity. Here is the data.**
Explore how DevEx boosts productivity and innovation according to new research.

The post [Good DevEx increases productivity. Here is the data.](https://github.blog/2024-01-23-good-devex-increases-productivity/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-23-good-devex-increases-productivity/) 2024-01-23T20:00:55Z **A guide to open source for the social sector**
Calling all nonprofits! Do you want to implement open source software but don’t know where to start? We’ve got good news; you can easily get started by consulting our new guide.

The post [A guide to open source for the social sector](https://github.blog/2024-01-23-a-guide-to-open-source-for-the-social-sector/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-23-a-guide-to-open-source-for-the-social-sector/) 2024-01-24T23:21:49Z **How GitHub’s Developer Experience team improved innerloop development**
Our latest solution to the ubiquitous engineering problem of integration testing in a distributed service ecosystem here at GitHub.

The post [How GitHub’s Developer Experience team improved innerloop development](https://github.blog/2024-01-24-how-githubs-developer-experience-team-improved-innerloop-development/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-24-how-githubs-developer-experience-team-improved-innerloop-development/) 2024-01-25T20:36:35Z **GitHub Fund 2024 and beyond: Looking to the future**
Celebrate the first year of GitHub Fund, our first investments, and a brief look of where we’re going.

The post [GitHub Fund 2024 and beyond: Looking to the future](https://github.blog/2024-01-25-github-fund-2024-and-beyond-looking-to-the-future/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-25-github-fund-2024-and-beyond-looking-to-the-future/) 2024-01-25T22:28:44Z **Do you know if all your repositories have up-to-date dependencies?**
Consider deploying the GitHub Action: Evergreen so that you know each of your repositories are leveraging active dependency management with Dependabot.

The post [Do you know if all your repositories have up-to-date dependencies?](https://github.blog/2024-01-25-do-you-know-if-all-your-repositories-have-up-to-date-dependencies/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-01-25-do-you-know-if-all-your-repositories-have-up-to-date-dependencies/) 2024-02-02T10:24:35Z **Release Radar · January 2024 Edition**
The new year has kicked off, and developers are hard at work. We hope all our open source community members had a lovely holiday break and, we’re looking forward to seeing what you ship this year. 2024 is already off to a great start with open source projects releasing major updates. There’s everything here from […]

The post [Release Radar · January 2024 Edition](https://github.blog/2024-02-02-release-radar-jan-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-02-release-radar-jan-2024/) 2024-02-06T18:19:05Z **AppSec is harder than you think. Here’s how AI can help.**
In practice, shifting left has been more about shifting the burden rather than the ability. But AI is bringing its promise closer to reality. Here’s how.

The post [AppSec is harder than you think. Here’s how AI can help.](https://github.blog/2024-02-06-appsec-is-harder-than-you-think-heres-how-ai-can-help/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-06-appsec-is-harder-than-you-think-heres-how-ai-can-help/) 2024-02-08T17:15:55Z **GitHub’s Engineering Fundamentals program: How we deliver on availability, security, and accessibility**
The Fundamentals program has helped us address tech debt, improve reliability, and enhance observability of our engineering systems.

The post [GitHub’s Engineering Fundamentals program: How we deliver on availability, security, and accessibility](https://github.blog/2024-02-08-githubs-engineering-fundamentals-program-how-we-delive ... ⌘ [Read more](https://github.blog/2024-02-08-githubs-engineering-fundamentals-program-how-we-deliver-on-availability-security-and-accessibility/) 2024-02-09T16:00:57Z **Copilot in GitHub Support is now available!**
Experience AI-powered assistance for queries related to GitHub topics.

The post [Copilot in GitHub Support is now available!](https://github.blog/2024-02-09-copilot-in-github-support-is-now-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-09-copilot-in-github-support-is-now-available/) 2024-02-12T17:03:05Z **The architecture of SAST tools: An explainer for developers**
More developers will have to fix security issues in the age of shifting left. Here, we break down how SAST tools can help them find and address vulnerabilities.

The post [The architecture of SAST tools: An explainer for developers](https://github.blog/2024-02-12-the-architecture-of-sast-tools-an-explainer-for-developers/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-12-the-architecture-of-sast-tools-an-explainer-for-developers/) 2024-02-12T18:18:13Z **Get started with v4 of GitHub Actions Artifacts**
We listened to your feedback and released new versions (v4) of actions/upload-artifact and actions/download-artifact. While this version of the actions to upload and download artifacts includes up to 10x performance improvements and several new features, there are also key differences from previous versions that may require updates to your workflows.

The post [Get started with v4 of GitHub Actions Artifacts](https://github.blog/2024-02-12-g ... ⌘ [Read more](https://github.blog/2024-02-12-get-started-with-v4-of-github-actions-artifacts/) 2024-02-13T17:00:41Z **Powering advancements of AI in the open: Apply now to GitHub Accelerator**
Funding AI advancements in the open, and opening applications for second Accelerator cohort.

The post [Powering advancements of AI in the open: Apply now to GitHub Accelerator](https://github.blog/2024-02-13-powering-advancements-of-ai-in-the-open-apply-now-to-github-accelerator/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-13-powering-advancements-of-ai-in-the-open-apply-now-to-github-accelerator/) 2024-02-13T18:00:19Z **Bringing npm registry services to GitHub Codespaces**
The npm engineering team recently transitioned to using GitHub Codespaces for local development for npm registry services. This shift to Codespaces has substantially reduced the friction of our inner development loop and boosted developer productivity.

The post [Bringing npm registry services to GitHub Codespaces](https://github.blog/2024-02-13-bringing-npm-registry-services-to-github-codespaces/) appeared first on [The GitHub Blog] ... ⌘ [Read more](https://github.blog/2024-02-13-bringing-npm-registry-services-to-github-codespaces/) 2024-02-14T17:00:47Z **Fixing security vulnerabilities with AI**
A peek under the hood of GitHub Advanced Security code scanning autofix.

The post [Fixing security vulnerabilities with AI](https://github.blog/2024-02-14-fixing-security-vulnerabilities-with-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-14-fixing-security-vulnerabilities-with-ai/) 2024-02-14T20:11:21Z **GitHub Availability Report: January 2024**
In January, we experienced three incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: January 2024](https://github.blog/2024-02-14-github-availability-report-january-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-14-github-availability-report-january-2024/) 2024-02-15T21:08:12Z **Build code security skills with the GitHub Secure Code Game**
Learn to find and fix security issues while having fun with Secure Code Game, now with new challenges focusing on JavaScript, Python, Go, and GitHub Actions!

The post [Build code security skills with the GitHub Secure Code Game](https://github.blog/2024-02-15-build-code-security-skills-with-the-github-secure-code-game/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-15-build-code-security-skills-with-the-github-secure-code-game/) 2024-02-21T15:37:57Z **Empowering all developers to build without barriers**
GitHub has been awarded the 2024 Axe Accessibility at Scale Award from Deque Systems. Read more about how we’ve implemented accessibility at scale.

The post [Empowering all developers to build without barriers](https://github.blog/2024-02-21-empowering-all-developers-to-build-without-barriers/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-21-empowering-all-developers-to-build-without-barriers/) 2024-02-21T17:00:38Z **How to stay safe from repo-jacking**
Repo-jacking is a specific type of supply chain attack. This blog post explains what it is, what the risk is, and what you can do to stay safe.

The post [How to stay safe from repo-jacking](https://github.blog/2024-02-21-how-to-stay-safe-from-repo-jacking/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-21-how-to-stay-safe-from-repo-jacking/) 2024-02-22T16:00:06Z **Insider newsletter digest: Cook up a controller with GitHub Copilot**
Whether you're coding up a storm or cooking up code, building a controller function with AI is your secret sauce to a flavorful app.

The post [Insider newsletter digest: Cook up a controller with GitHub Copilot](https://github.blog/2024-02-22-insider-newsletter-digest-cook-up-a-controller-with-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-22-insider-newsletter-digest-cook-up-a-controller-with-github-copilot/) 2024-02-22T18:32:28Z **How AI code generation works**
Explore the capabilities and benefits of AI code generation, and how it can improve the developer experience for your enterprise.

The post [How AI code generation works](https://github.blog/2024-02-22-how-ai-code-generation-works/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-22-how-ai-code-generation-works/) 2024-02-23T17:23:22Z **Highlights from Git 2.44**
The first Git release of 2024 is here! Take a look at some of our highlights on what's new in Git 2.44.

The post [Highlights from Git 2.44](https://github.blog/2024-02-23-highlights-from-git-2-44/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-23-highlights-from-git-2-44/) 2024-02-27T15:54:33Z **GitHub Copilot Enterprise is now generally available**
Our most advanced AI offering to date is customized to your organization’s knowledge and codebase, infusing GitHub Copilot throughout the software development lifecycle.

The post [GitHub Copilot Enterprise is now generally available](https://github.blog/2024-02-27-github-copilot-enterprise-is-now-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-27-github-copilot-enterprise-is-now-generally-available/) 2024-02-28T17:00:54Z **How we’re using GitHub Projects to standardize our workflows and stay aligned**
Learn how we’re managing feature releases and establishing best practices within and across teams at GitHub using GitHub Projects.

The post [How we’re using GitHub Projects to standardize our workflows and stay aligned](https://github.blog/2024-02-28-how-were-using-github-projects-to-standardize-our-workflows-and-stay-aligned/) appeared first on [The GitHub Blog](https://github.blog ... ⌘ [Read more](https://github.blog/2024-02-28-how-were-using-github-projects-to-standardize-our-workflows-and-stay-aligned/) 2024-02-28T18:00:52Z **Customizing and fine-tuning LLMs: What you need to know**
Learn how your organization can customize its LLM-based solution through retrieval augmented generation and fine-tuning.

The post [Customizing and fine-tuning LLMs: What you need to know](https://github.blog/2024-02-28-customizing-and-fine-tuning-llms-what-you-need-to-know/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-28-customizing-and-fine-tuning-llms-what-you-need-to-know/) 2024-02-29T17:00:41Z **Keeping secrets out of public repositories**
With push protection now enabled by default, GitHub helps open source developers safeguard their secrets, and their reputations.

The post [Keeping secrets out of public repositories](https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-29-keeping-secrets-out-of-public-repositories/) 2024-02-29T18:00:41Z **Meet Kayla: A college student and open source ambassador**
From learner to mentor, Kayla, an All In for Students ambassador, has become an open source leader on her campus.

The post [Meet Kayla: A college student and open source ambassador](https://github.blog/2024-02-29-meet-kayla-a-college-student-and-open-source-ambassador/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-29-meet-kayla-a-college-student-and-open-source-ambassador/) 2024-02-29T19:30:40Z **Game Bytes · February 2024**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! 🕹️

The post [Game Bytes · February 2024](https://github.blog/2024-02-29-game-bytes-february-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-02-29-game-bytes-february-2024/) 2024-03-04T17:34:12Z **GitHub Copilot Learning Pathway: Accelerate your business with AI**
Learn what GitHub Copilot can help your business achieve in this expert-guided GitHub Learning Pathway, featuring insights from tech leaders at top organizations.

The post [GitHub Copilot Learning Pathway: Accelerate your business with AI](https://github.blog/2024-03-04-github-copilot-learning-pathway-accelerate-your-business-with-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-04-github-copilot-learning-pathway-accelerate-your-business-with-ai/) 2024-03-04T21:07:45Z **Keeping repository maintainer information accurate**
Discover how keeping repository maintainer information accurate through CODEOWNERS files and automating maintenance with tools like cleanowners fosters efficient collaboration and sustainable software projects.

The post [Keeping repository maintainer information accurate](https://github.blog/2024-03-04-keeping-repository-maintainer-information-accurate/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-04-keeping-repository-maintainer-information-accurate/) 2024-03-06T16:43:39Z **How GitHub uses merge queue to ship hundreds of changes every day**
Here's how merge queue transformed the way GitHub deploys changes to production at scale, so you can do the same for your organization.

The post [How GitHub uses merge queue to ship hundreds of changes every day](https://github.blog/2024-03-06-how-github-uses-merge-queue-to-ship-hundreds-of-changes-every-day/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-06-how-github-uses-merge-queue-to-ship-hundreds-of-changes-every-day/) 2024-03-06T16:43:17Z **GitHub Enterprise Server 3.12 is now generally available**
With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more.

The post [GitHub Enterprise Server 3.12 is now generally available](https://github.blog/2024-03-06-github-enterprise-server-3-12-is-now-generally-available/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-06-github-enterprise-server-3-12-is-now-generally-available/) 2024-03-07T17:00:54Z **Hard and soft skills for developers coding in the age of AI**
While AI revolutionizes software development, it still relies on developers to pilot its use. In this blog, we’ll cover the skills that developers need to have for navigating this new AI-powered coding frontier.

The post [Hard and soft skills for developers coding in the age of AI](https://github.blog/2024-03-07-hard-and-soft-skills-for-developers-coding-in-the-age-of-ai/) appeared first on [The GitHub Blog](https:// ... ⌘ [Read more](https://github.blog/2024-03-07-hard-and-soft-skills-for-developers-coding-in-the-age-of-ai/) 2024-03-07T18:00:09Z **Exploring an increase in circumvention claims in our transparency data**
Our full year of 2023 transparency reporting data is now available and we’re taking a deep dive into how a form change caused an abrupt increase in circumvention claims.

The post [Exploring an increase in circumvention claims in our transparency data](https://github.blog/2024-03-07-exploring-an-increase-in-circumvention-claims-in-our-transparency-data/) appeared first on [The GitHub Blog](https: ... ⌘ [Read more](https://github.blog/2024-03-07-exploring-an-increase-in-circumvention-claims-in-our-transparency-data/) 2024-03-13T18:00:35Z **GitHub Availability Report: February 2024**
In February, we experienced two incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: February 2024](https://github.blog/2024-03-13-github-availability-report-february-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-13-github-availability-report-february-2024/) 2024-03-18T15:00:55Z **Gaining kernel code execution on an MTE-enabled Pixel 8**
In this post, I’ll look at CVE-2023-6241, a vulnerability in the Arm Mali GPU that allows a malicious app to gain arbitrary kernel code execution and root on an Android phone. I’ll show how this vulnerability can be exploited even when Memory Tagging Extension (MTE), a powerful mitigation, is enabled on the device.

The post [Gaining kernel code execution on an MTE-enabled Pixel 8](https://github.blog/2024-03-18-gaining-kerne ... ⌘ [Read more](https://github.blog/2024-03-18-gaining-kernel-code-execution-on-an-mte-enabled-pixel-8/) 2024-03-20T16:00:40Z **Found means fixed: Introducing code scanning autofix, powered by GitHub Copilot and CodeQL**
Now in public beta for GitHub Advanced Security customers, code scanning autofix helps developers remediate more than two-thirds of supported alerts with little or no editing.

The post [Found means fixed: Introducing code scanning autofix, powered by GitHub Copilot and CodeQL](https://github.blog/2024-03-20-found-means-fixed-introducing-code-scanning-autofix ... ⌘ [Read more](https://github.blog/2024-03-20-found-means-fixed-introducing-code-scanning-autofix-powered-by-github-copilot-and-codeql/) 2024-03-21T16:18:03Z **Insider newsletter digest: 4 things you didn’t know you could do with GitHub Projects**
Unlock the secret to organization and collaboration magic with our GitHub Projects tips and tricks roundup.

The post [Insider newsletter digest: 4 things you didn’t know you could do with GitHub Projects](https://github.blog/2024-03-21-insider-newsletter-digest-4-things-you-didnt-know-you-could-do-with-github-projects/) appeared first on [The GitHub Blog](https: ... ⌘ [Read more](https://github.blog/2024-03-21-insider-newsletter-digest-4-things-you-didnt-know-you-could-do-with-github-projects/) 2024-03-25T17:06:19Z **How to use GitHub Copilot in your IDE: tips, tricks, and best practices**
GitHub Copilot is a powerful AI assistant. Learn practical strategies to get the most out of GitHub Copilot to generate the most relevant and useful code suggestions in your editor.

The post [How to use GitHub Copilot in your IDE: tips, tricks, and best practices](https://github.blog/2024-03-25-how-to-use-github-copilot-in-your-ide-tips-tricks-and-best-practices/) appeared first on [The GitHub Bl ... ⌘ [Read more](https://github.blog/2024-03-25-how-to-use-github-copilot-in-your-ide-tips-tricks-and-best-practices/) 2024-03-27T23:04:21Z **Game Bytes · March 2024**
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

The post [Game Bytes · March 2024](https://github.blog/2024-03-27-game-bytes-march-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-27-game-bytes-march-2024/) 2024-03-28T18:42:21Z **Empowering women through open source**
A discussion about how tech is aiding organizations fighting for gender equality, what it means to be a woman in tech and the world today, and advice on how we all move forward.

The post [Empowering women through open source](https://github.blog/2024-03-28-empowering-women-through-open-source/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-03-28-empowering-women-through-open-source/) 2024-04-02T16:35:24Z **Bringing enterprise-level security and even more power to GitHub-hosted runners**
GitHub-hosted runners now support Azure private networking. Plus, we've added 2 vCPU Linux, 4 vCPU Windows, macOS L, macOS XL, and GPU hosted runners to our runner fleet.

The post [Bringing enterprise-level security and even more power to GitHub-hosted runners](https://github.blog/2024-04-02-bringing-enterprise-level-security-and-even-more-power-to-github-hosted-runners/) appea ... ⌘ [Read more](https://github.blog/2024-04-02-bringing-enterprise-level-security-and-even-more-power-to-github-hosted-runners/) 2024-04-03T14:26:50Z **Security research without ever leaving GitHub: From code scanning to CVE via Codespaces and private vulnerability reporting**
This blog post is an in-depth walkthrough on how we perform security research leveraging GitHub features, including code scanning, CodeQL, and Codespaces.

The post [Security research without ever leaving GitHub: From code scanning to CVE via Codespaces and private vulnerability reporting](htt ... ⌘ [Read more](https://github.blog/2024-04-03-security-research-without-ever-leaving-github-from-code-scanning-to-cve-via-codespaces-and-private-vulnerability-reporting/) 2024-04-04T16:00:07Z **What is retrieval-augmented generation, and what does it do for generative AI?**
Here’s how retrieval-augmented generation, or RAG, uses a variety of data sources to keep AI models fresh with up-to-date information and organizational knowledge.

The post [What is retrieval-augmented generation, and what does it do for generative AI?](https://github.blog/2024-04-04-what-is-retrieval-augmented-generation-and-what-does-it-do-for-generative-ai/) appeared first on [T ... ⌘ [Read more](https://github.blog/2024-04-04-what-is-retrieval-augmented-generation-and-what-does-it-do-for-generative-ai/) 2024-04-09T15:00:38Z **Explore the seasons of software development with four full years of data**
Discover the latest trends and insights on public software development activity on GitHub with the release of Q4 2023 data for the Innovation Graph.

The post [Explore the seasons of software development with four full years of data](https://github.blog/2024-04-09-explore-the-seasons-of-software-development-with-four-full-years-of-data/) appeared first on [The GitHub Blog](https://github.blog ... ⌘ [Read more](https://github.blog/2024-04-09-explore-the-seasons-of-software-development-with-four-full-years-of-data/) 2024-04-09T19:00:02Z **4 ways GitHub engineers use GitHub Copilot**
GitHub Copilot increases efficiency for our engineers by allowing us to automate repetitive tasks, stay focused, and more.

The post [4 ways GitHub engineers use GitHub Copilot](https://github.blog/2024-04-09-4-ways-github-engineers-use-github-copilot/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-04-09-4-ways-github-engineers-use-github-copilot/) 2024-04-10T20:15:17Z **GitHub Availability Report: March 2024**
In March, we experienced two incidents that resulted in degraded performance across GitHub services.

The post [GitHub Availability Report: March 2024](https://github.blog/2024-04-10-github-availability-report-march-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-04-10-github-availability-report-march-2024/) 2024-04-10T22:53:33Z **Helping policymakers weigh the benefits of open source AI**
GitHub enables developer collaboration on innovative software projects, and we’re committed to ensuring policymakers understand developer needs when crafting AI regulation.

The post [Helping policymakers weigh the benefits of open source AI](https://github.blog/2024-04-10-helping-policymakers-weigh-the-benefits-of-open-source-ai/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-04-10-helping-policymakers-weigh-the-benefits-of-open-source-ai/) 2024-04-11T16:13:41Z **All In Africa: New cohort now open!**
As we’re opening up the doors to our final class of this programmatic year, we’re also looking back at our recent graduates and the partners that helped make them a success.

The post [All In Africa: New cohort now open!](https://github.blog/2024-04-11-all-in-africa-new-cohort-now-open/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-04-11-all-in-africa-new-cohort-now-open/) 2024-04-16T16:00:39Z **The world’s fair of software: Join us at GitHub Universe 2024**
It’s the 10th anniversary of our global developer event! Celebrate with us by picking up in-person tickets today. It’s bound to be our best one yet.

The post [The world’s fair of software: Join us at GitHub Universe 2024](https://github.blog/2024-04-16-the-worlds-fair-of-software-join-us-at-github-universe-2024/) appeared first on [The GitHub Blog](https://github.blog). ⌘ [Read more](https://github.blog/2024-04-16-the-worlds-fair-of-software-join-us-at-github-universe-2024/) 2024-04-18T17:30:32Z **A policy proposal on our approach to deepfake tools and responsible AI**
We’re asking for feedback on a proposed Acceptable Use Policy update to address the use of synthetic and manipulated media tools for non-consensual intimate imagery and disinformation while protecting valuable research.

The post [A policy proposal on our approach to deepfake tools and responsible AI](https://github.blog/2024-04-18-a-policy-proposal-on-our-approach-to-deepfake-tools-and-responsib ... ⌘ [Read more](https://github.blog/2024-04-18-a-policy-proposal-on-our-approach-to-deepfake-tools-and-responsible-ai/)