Search Subscribe
Home/GitHub
Source

GitHub

1,681 articles from GitHub.

Engineering — Game Bytes

Game Bytes

Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on!

LRLee ReillyLee Reilly·April 7, 2023Engineering
Performance — Building GitHub with Ruby and Rails

Building GitHub with Ruby and Rails

Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily.…

AHAdam HessAdam Hess·April 6, 2023Performance
Security — Pwning Pixel 6 with a leftover patch

Pwning Pixel 6 with a leftover patch

In this post, I’ll look at a security-related change in version r40p0 of the Arm Mali driver that was AWOL in the January update of the Pixel bulletin, where other patches from r40p0 was applied, and how these two lines of changes can be exploited to gain arbitrary kernel code execution and root from a malicious app. This highlights how treacherous it can be when backporting security changes.

MYMan Yue MoMan Yue Mo·April 6, 2023Security
Performance — GitHub Availability Report: March 2023

GitHub Availability Report: March 2023

In March, we experienced six incidents that resulted in degraded performance across GitHub services. This report also sheds light into a February incident that resulted in degraded performance for GitHub Codespaces.

JOJakub OleksyJakub Oleksy·April 5, 2023Performance
SRE & Ops — Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions

Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions

Many of us are aware of the benefits that a strong focus on automation can bring, particularly in our development workflow and DevOps lifecycle. But silos across businesses can lead to duplication of effort, and potential to lose out on best practices. In this post, we’ll explore how CI/CD can be shared across your entire organization alongside policies, for a well-governed experience with GitHub

CRChris ReddingtonChris Reddington·April 5, 2023SRE & Ops
Career & Teams — What’s new with GitHub Sponsors

What’s new with GitHub Sponsors

GitHub Sponsors is now generally available for organizations. Also, new tooling for bulk sponsorships and an update on how we’re ensuring sustainability for GitHub Sponsors.

JLJessica LordJessica Lord·April 4, 2023Career & Teams
Engineering — Announcing the GitHub Actions extension for VS Code

Announcing the GitHub Actions extension for VS Code

Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension, which provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE.

CSChristopher SchleidenChristopher Schleiden·March 28, 2023Engineering
Engineering — We updated our RSA SSH host key

We updated our RSA SSH host key

At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com.

MHMike HanleyMike Hanley·March 23, 2023Engineering
Security — Build a secure code mindset with the GitHub Secure Code Game

Build a secure code mindset with the GitHub Secure Code Game

Writing secure code is as much of an art as writing functional code, and it is the only way to write quality code. Learn how our Secure Code Game can provide you with hands-on training to spot and fix security issues in your code so that you can build a secure code mindset.

JKJoseph KatsioloudesJoseph Katsioloudes·March 23, 2023Security
Engineering — Godot 4.0 Release Party 🎉

Godot 4.0 Release Party 🎉

We are delighted to host the Godot 4.0 Release Party at GitHub HQ on Wednesday, March 22 from 6:30 pm to 9:30 pm. And you’re invited!

LRLee ReillyLee Reilly·March 16, 2023Engineering
Security — Raising the bar for software security: GitHub 2FA begins March 13

Raising the bar for software security: GitHub 2FA begins March 13

On March 13, we will officially begin rolling out our initiative to require all developers who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Read on to learn about what the process entails and how you can help secure the software supply chain with 2FA.

LPLaura Paine, Hirsch SinghalLaura Paine, Hirsch Singhal·March 9, 2023Security
Engineering — Release Radar

Release Radar

Our community—along with ourselves—took a much needed break over the festive season. Now everyone is back into the full swing of work, and the open source community is showing us…

MDMichelle DukeMichelle Duke·March 5, 2023Engineering
Security — GitHub Security Lab audited DataHub: Here’s what they found

GitHub Security Lab audited DataHub: Here’s what they found

The GitHub Security Lab audited DataHub, an open source metadata platform, and discovered several vulnerabilities in the platform’s authentication and authorization modules. These vulnerabilities could have enabled an attacker to bypass authentication and gain access to sensitive data stored on the platform.

AMAlvaro MunozAlvaro Munoz·March 3, 2023Security
Distributed — See you at SCaLE! 🐧

See you at SCaLE! 🐧

SCaLE is the largest community-run open-source and free software conference in North America. It takes place next week in Pasadena, CA from March 9-12, 2023 and we’ll be there!

LRLee ReillyLee Reilly·March 3, 2023Distributed
Languages — Why Python keeps growing, explained

Why Python keeps growing, explained

A deep dive into why more people are using Python than ever, its key use cases, and why it’s still so popular 30-plus years after it was first released.

RSRizel ScarlettRizel Scarlett·March 2, 2023Languages
Performance — GitHub Availability Report: February 2023

GitHub Availability Report: February 2023

In February, we experienced three incidents that resulted in degraded performance across GitHub services. This report also sheds light into a January incident that resulted in degraded performance for GitHub Packages and GitHub Pages and another January incident that impacted Git users.

JOJakub OleksyJakub Oleksy·March 1, 2023Performance
SRE & Ops — GitHub Actions Importer is now generally available

GitHub Actions Importer is now generally available

We’re excited to announce the general availability of GitHub Actions Importer. GitHub Actions Importer helps you plan, forecast, and automate migrations from Azure DevOps, CircleCI, GitLab, Jenkins, and Travis CI…

DGDawit GebregziabherDawit Gebregziabher·March 1, 2023SRE & Ops
Security — 3 ways to meet compliance needs without slowing down agility

3 ways to meet compliance needs without slowing down agility

Learn how to enable developer productivity and collaboration while staying secure and compliant. Stay compliant without slowing down your business. From security to CI/CD, automate every step of your software workflow—so your developers can stay focused on what matters most: building.

MPMark Paulsen, Chris ReddingtonMark Paulsen, Chris Reddington·February 24, 2023Security
Security — The code that wasn’t there: Reading memory on an Android device by accident

The code that wasn’t there: Reading memory on an Android device by accident

CVE-2022-25664, a vulnerability in the Qualcomm Adreno GPU, can be used to leak large amounts of information to a malicious Android application. Learn more about how the vulnerability can be used to leak information in both the user space and kernel space level of pages, and how the GitHub Security Lab used the kernel space information leak to construct a KASLR bypass.

MYMan Yue MoMan Yue Mo·February 23, 2023Security