Security takes center stage in GitHub's top posts

GitHub's most-read engineering and product content of 2023 reflects a year in which the platform expanded its AI offerings, pushed new security requirements, and gave developer tools a productivity overhaul. The common thread across the top posts: building software faster without loosening the guardrails.

Mandatory 2FA and its downstream effects

The most significant security story of the year kicked off in March, when GitHub began requiring all developers who contribute code on GitHub.com to enable at least one form of two-factor authentication. The rollout, which extended through the end of 2023, was positioned as a supply chain security measure rather than an account-level inconvenience. The announcement post explaining the process and its rationale was among the year's top reads.

AI features move from preview to production

GitHub's AI work centered on moving Copilot from a coding assistant into a broader platform capability. At Universe 2023, the company announced general availability of GitHub Copilot Chat, previews of GitHub Copilot Enterprise, new AI-powered security features, and the GitHub Copilot Partner Program.

The educational content around AI also drew a strong audience. Two guidance pieces landed among the most popular posts:

  • A prompt engineering guide covering how to structure requests to Copilot for better results across use cases
  • An architecture overview of today's LLM applications, aimed at developers building their first LLM-based tool and outlining the problem spaces worth exploring

Productivity tools hit general availability

Three product milestones stood out in 2023. The GitHub Actions extension for VS Code entered public beta, adding workflow authoring and run management directly inside the IDE. Later in the year, GitHub merge queue reached general availability, letting teams serialize pull request merges on busy branches to avoid race conditions and failed CI runs.

Inside GitHub's engineering organization

Several of the year's top posts pulled back the curtain on how GitHub builds GitHub. The engineering team shared deep dives into three infrastructure efforts:

  • The technology behind the new code search index, billed as the world's largest public code search index
  • The architecture and operational reality of GitHub.com's Ruby on Rails monolith, which now spans nearly two million lines of code with more than 1,000 engineers committing daily
  • The process of upgrading the production MySQL fleet to version 8.0, a migration that had to proceed without visible downtime for users

Octoverse data published in November highlighted sustained interest in two languages in particular. A post explaining Python's continued growth examined why adoption keeps climbing more than three decades after its initial release and what use cases are driving the trend. A separate piece explored why Rust remains the most admired language among developers, looking at what makes it appealing despite its steeper learning curve relative to other systems languages.

The full set of top posts is available on the GitHub Blog, with more engineering content expected through 2024.