
GitHub Advanced Security for Azure DevOps is now generally available. Enable secret scanning, dependency scanning, and code scanning on your organization directly in Azure DevOps configuration settings.
WC
Walker Chabbott·September 20, 2023Security 
Starting today, GitHub Enterprise Importer supports repository migrations from Bitbucket Server and Bitbucket Data Center, and GitHub Actions Importer offers CI/CD migrations from Bitbucket and Bamboo.
MM
Melody Mileski, Tim Rogers·September 18, 2023SRE & Ops 
Make quick work of alerts with preset and custom rules.
EH
Erin Havens, Eric Tooley·September 14, 2023Engineering 
In August, we experienced two incidents that resulted in degraded performance across GitHub services.

As part of our ongoing commitment to accelerate human progress through Social Impact initiatives, we’re offering students 30-minute, 1:1 micro-mentoring sessions with GitHub employees ahead of Universe.

Learn how GitHub’s CodeQL leveraged AI modeling and multi-repository variant analysis to discover a new CVE in Gradle.
WC
Walker Chabbott, Florin Coada·September 12, 2023Security 
The team behind GitHub Copilot shares its lessons for building an LLM app that delivers value to both individuals and enterprise users at scale.
SZ
Shuyin Zhao·September 6, 2023AI & ML 
Edge computing practitioners answer your questions about when and why to build applications at the edge.
KF
Klint Finley·September 1, 2023Frontend 
See how much more you can get out of GitHub Codespaces by taking advantage of the improved processing power and increased headroom in the next generation of virtual machines.

Rust continues to top the charts as the most admired and desired language by developers, and in this post, we dive a little deeper into how (and why) Rust is stealing the hearts of developers around the world.

Customers using GHES can now ensure secure development is a top priority with enhanced security and compliance controls for their repositories.
DJ
David Jarzebowski, Melody Mileski·August 29, 2023Security 
Learn how to optimize your usage of GitHub Projects to plan and track your work from idea to production.

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

Now, you can group multiple version updates in a single pull request.

Learn how to leverage templating features in GitHub Codespaces to streamline your project setup, improve consistency, and simplify collaboration within your development team.

How GitHub Social Impact is working with nonprofit organizations, employees, and more to create positive, lasting change in global communities.
SE
Sidney Espinosa·August 23, 2023AI & ML 
Another new release of Git is here! Take a look at some of our highlights on what’s new in Git 2.42.

In this post, we’ll deep dive into some interesting attacks on mTLS authentication. We’ll have a look at implementation vulnerabilities and how developers can make their mTLS systems vulnerable to user impersonation, privilege escalation, and information leakages.
MS
Michael Stepankin·August 17, 2023Security 
Get tickets to our global developer and customer event for 30% off during our Super-Early Bird special, only for a limited time.

After the last Release Radar, I promised the next one wouldn’t be far away, so here it is. This is the low down on some of the best open source…

Some best practices and important defenses to prevent common attacks against GitHub Actions that are enabled by stolen personal access tokens, compromised accounts, or compromised GitHub sessions.
MM
Matthew Masarik·August 15, 2023Security 
It was another record year for our Security Bug Bounty program! We’re excited to highlight some achievements we’ve made together with the bounty community in 2022!
JM
Jill Moné-Corallo·August 14, 2023Security 
Introducing two new secret scanning push protection features that will enable individual developers to protect all their pushes and organizations to gain insights and trends across their repositories.
ZM
Zain Malik, Courtney Claessens·August 9, 2023Engineering 
In July, we experienced one incident that resulted in degraded performance across GitHub services.

Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure.
JL
Jaroslav Lobacevski, Kevin Backhouse·August 9, 2023Security 
GitHub’s design experts share 10 tips and lessons for designing magical user experiences for AI applications and AI coding tools.
NC
Nicole Choi·August 8, 2023AI & ML 
In the world of software development, collaboration can make the difference between a brittle last-minute release and a reliable, maintainable, pain-free project. Whether you’ve been coding for a day or a decade, your colleagues are there to help strengthen your work. But they can only help if you’ve given them the tools to do so.

Today, we’re announcing a private beta of GitHub Copilot with code referencing that includes a filter to detect code suggestions matching public code on GitHub.
RJ
Ryan J. Salva·August 3, 2023AI & ML 
Learn how you can structure your enterprise to get the most value out of GitHub and provide the best experience for your developers!
DL
David Losert, Elizabeth Barrord·August 2, 2023SRE & Ops 
Learn about how we build containerized services that power microservices on the GitHub.com platform and many internal tools.
MK
MV Karan, Catherine Weilaender·August 2, 2023Performance 
We’re thrilled to announce two major updates to GitHub Copilot code Completion’s capabilities that will help developers work even more efficiently and effectively.

This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation. Both vulnerabilities were addressed by the Decidim team with corresponding update releases for the supported versions in May 2023.

GitHub switched to performing merges and rebases using merge-ort. Come behind the scenes to see why and how we made this change.

Sharing our coalition paper to inform the final negotiation of the EU AI Act.

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

In this step-by-step tutorial, you will learn how to use GitHub Copilot to build an application with OpenAI’s gpt-3.5-turbo model.
KK
Kedasha Kerr·July 25, 2023AI & ML 
We’re launching the GitHub Copilot Trust Center to provide transparency about how GitHub Copilot works and help organizations innovate responsibly with generative AI.
SM
Shelley McKinley·July 25, 2023AI & ML 
Repository rules provide an easy, flexible way to define branch protections and ensure consistency in code across repositories.

All GitHub Copilot for Business users now have access to a limited GitHub Copilot Chat beta, bringing the power of conversational coding right to the IDE.
MR
Mario Rodriguez·July 20, 2023AI & ML 
As a design organization, we have the opportunity to make a significant impact on designing the platform for all developers. How does the emergence of creative AI impact our work? How can we achieve an inclusive experience for a spectrum of all abilities? What does designing for developer happiness look like?

With the new Issue Metrics GitHub Action, you can now track and monitor important metrics related to issues, pull requests, and discussions, such as time to first response, time to close, and more!

GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms. No GitHub or npm systems were compromised in this campaign. We’re publishing this blog post as a warning for our customers to prevent exploitation by this threat actor.

Prompt engineering is the art of communicating with a generative AI model. In this article, we’ll cover how we approach prompt engineering at GitHub, and how you can use it to build your own LLM-based application.
AZ
Albert Ziegler, John Berryman·July 17, 2023AI & ML 
It’s been a while since we’ve published our Release Radar. You can blame IRL conferences coming back, getting influenza, and being struck down by the weather. But those are just…

Navigating the ebb and flow of programming paradigms–from the shifts in the JavaScript ecosystem and TypeScript’s rise, to AI’s role in advancing accessibility, and strategies for encouraging non-code contributions–tune in to the latest episode of The ReadME Podcast for more.

Thanks to DevOps, cloud computing and other industry trends, many organizations are shifting from a product mindset to a service mindset. Here’s how you can implement a service-led strategy.

In June, we experienced two incidents that resulted in degraded performance across GitHub services. June 7 16:11 UTC (lasting 2 hours 28 minutes) On June 7 at 16:11 UTC, GitHub…

Have your say to protect open source in the EU.

Supercharge pull request merges on your busiest branches by enabling your team to queue.

Passkeys are now available in public beta. Opting in lets you upgrade security keys to passkeys, and use those in place of both your password and your 2FA method.

Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command.

Reduce developer and auditor friction involved in demonstrating compliance and maintaining end-to-end traceability by focusing your efforts around the pull request.

A look at how we improved the readability of code on GitHub.

Deciding whether or not to adopt a tool can be hard enough, but what about when it seems to break the paradigms you know?

GitHub’s Information Security and Privacy Management System (ISPMS) has been certified against ISO/IEC 27701:2019 (PII Processor) and 27018:2019 standards, as well as the Cloud Controls Matrix (CCM). These standards and frameworks are internationally recognized for security and privacy program best practices.
BG
Brandon Griffeth, Glory Francke·July 5, 2023Security 
SELinux is the most popular Linux Security Module used to isolate and protect system components from one another. Learn about different access control systems and Linux security as I introduce the foundations of a popular type system.

Developer experience (DevEx) is a key theme when it comes to transforming businesses with GitHub.

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

GitHub Enterprise Server 3.9 is now generally available. Organizations can now take advantage of more features that enable deeper collaboration, greater observability and faster workflows.
MM
Melody Mileski, David Jarzebowski·June 29, 2023Performance 
Today at Collision Conference we unveiled breaking new research on the economic and productivity impact of generative AI–powered developer tools. The research found that the increase in developer productivity due to AI could boost global GDP by over $1.5 trillion.
TD
Thomas Dohmke·June 27, 2023AI & ML