
Discovering passwords in our codebase is probably one of our worst fears. But what if you didn’t need passwords at all, and could deploy to your cloud provider another way? In this post, we explore how you can use OpenID Connect to trust your cloud provider, enabling you to deploy easily, securely and safely, while minimizing the operational overhead associated with secrets (for example, key rotat
CR
Chris Reddington·January 11, 2023Security 
Now, you can standardize and enforce CI/CD best practices across all repositories in your organization to reduce duplication and secure your DevOps processes.

Category Forms allow maintainers to create templates for their GitHub Discussions, which means that users can start new discussions with all the necessary information already included.

Default setup is a new way to automatically set up code scanning on your repository, without the use of a .yaml file.

In December, we did not experience any incidents that resulted in degraded performance across GitHub services. This report sheds light into an incident that impacted customers using GitHub Packages and GitHub Pages in November.

Learn about the design behind, and solutions to, several of GitHub’s CTF challenge for Ekoparty’s 2022 event!
LM
Logan MacLaren, Jorge Rosillo, Antonio Morales·December 30, 2022Security 
As the year winds down, we’re highlighting some of the incredible work from GitHub’s engineers, product teams, and security researchers.
LL
Laura Lindeman·December 29, 2022Security 
What in the world do rubber ducks have to do with programming? And why were they everywhere at GitHub Universe? A lot of you asked, so I’m here to help explain.

This year, we took GitHub Gives, our company-wide giving campaign, to new heights and wanted to share our learnings to provide best practices in programming a successful hybrid giving campaign for employees.

Forrester’s Total Economic Impact™ study dives into how GitHub Enterprise Cloud and GitHub Advanced Security help businesses drive ROI, increase developer productivity, and save time on developer onboarding.

GitHub Enterprise has evolved to support the needs of enterprise administrators, corporate security teams, and individual developers who contribute to open source.
JM
Jessi Moths, Charlene McKeown·December 20, 2022Security 
Our engineering and security teams do some incredible work. Let’s take a look at how we use GitHub to be more productive, build collaboratively, and shift security left.
![Engineering — [Video] How has open source changed in the last 10 years?](/covers/c78cdea411.webp?v=8564825)
What’s the state of open source and how has it changed over the last decade? GitHub’s VP of Developer Relations, Martin Woodward, tackles that question and more in a 2022 keynote.

We promised we’d be back soon and here we are! There has been an incredible amount of open source projects shipping major version releases before the year wraps up. I…

GitHub now allows you to track any leaked secrets in your public repository, for free. With secret scanning alerts, you can track and action on leaked secrets directly within GitHub.
MS
Mariam Sulakian, Zain Malik·December 15, 2022Security 
With just one click, admins in GitHub Advanced Security organizations can protect their custom patterns on push.
MS
Mariam Sulakian, Zain Malik·December 15, 2022Security 
GitHub will require all users who contribute code on GitHub.com to enable one or more forms of two-factor authentication (2FA) by the end of 2023. Learn more about our approach, when we’ll begin our rollout, and what you can expect as we begin requiring 2FA.
JS
John Swanson·December 14, 2022Security 
GitHub’s search inputs have several complex accessibility considerations. Let’s dive into what those are, how we addressed them, and talk about the standalone, reusable component that was ultimately built.
LW
Lindsey Wild·December 13, 2022Frontend 
Another new release of Git is here to end the year! Take a look at some of our highlights on what’s new in Git 2.39.

Before you say it, yes, the October Release Radar was supposed to be shared in November. But with Hackatoberfest, GitHub Universe, Turkey Day, and in real life (IRL) conferences returning…

How much does it really cost to buy more powerful cloud compute resources for development work? A lot less than you think.

We delivered two different courses specifically designed to help students in the lowest-income neighborhood of Montevideo, Uruguay learn how to use GitHub and understand the value of open source.

GitHub is in an exciting phase of our journey as the developer community grows significantly every day, and the needs of the community grow and change with it. Today we’re introducing our new Chief Product officer.

GitHub Copilot for Business is officially here with simple license management, organization-wide policy controls, and industry-leading privacy—all for $19 USD per user per month.
SZ
Shuyin Zhao·December 7, 2022AI & ML 
In November, we experienced two incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in October.

Now you can create tokens with fine-grained permissions for automating your publishing and organization management workflows. And a new code explorer allows you to view content of a package directly in the npm portal.

Catch up on everything we announced and see what else happened during this year’s GitHub Universe conference that took place November 9-10.

We just published our vision for GitHub accessibility at accessibility.github.com. Here’s the TL;DR: the prime directive of the GitHub accessibility program is to empower people with disabilities to build cool technology.

Learn how to use and express yourself with GitHub’s open source variable fonts, Mona Sans and Hubot Sans.

AppSec expert Niroshan Rajadurai says putting developers at the center of everything will enable you to meet your security goals.

Administrators, or enterprise owners, have the increased responsibility of managing their account and keeping it secure. We are excited to introduce what is new with enterprise accounts and what is coming soon.

We’re introducing calendar-based versioning for our REST API, so we can keep evolving our API, whilst still giving integrators a smooth migration path and plenty of time to update their integrations.

Discover the exciting enhancements in GitHub that empower Machine Learning practitioners to do more.
SJ
Seth Juarez·November 22, 2022AI & ML 
How is open source changing the world and impacting businesses? In this year’s Octoverse report, we identified three big trends to watch.

GitHub Mobile helps keep work going while you’re going. Untether yourself from your office.

Reading code is a hugely important task for developers. That’s why we built GitHub’s new code search—to help developers search, navigate, and understand code written by them, their team, and the world.

In July, we launched the general availability of GitHub Projects, and now we are excited to bring you even more features designed to make it easier to plan and track in the same place you build!

GitHub Actions Importer helps you forecast, plan, and facilitate migrations from your current CI/CD tool to GitHub Actions.

We’re giving GitHub users 60 free hours each month on Codespaces. Learn what else we shipped for Codespaces at Universe this year.

Read this post in English Veja o que estamos construindo para aprimorar a plataforma de desenvolvimento mais integrada e que permite que pessoas desenvolvedoras e empresas impulsionem a inovação com…

Investing in our open source future by supporting the maintainers of today.

See what we’re building to enhance the most integrated developer platform that allows developers and enterprises to drive innovation with ease.

Here’s how nonprofits and the social sector are using open source to drive social good.

In 2022, governments and the policy community spent a lot of time thinking about open source. Here’s what that means and why it matters.

By our estimation at GitHub, over 30% of Fortune 100 companies have now implemented OSPOs. Here’s what that means for open source.

We think a lot about a high-profile supply chain attack that might cause developers, teams, and organizations to lose trust in open source. That’s why we’re investing in new ways to protect the open source ecosystem.
JH
Justin Hutchings·November 9, 2022Security 
We know that companies benefit from open source. That’s why we’re making it easier for companies to financially support projects.

GitHub Enterprise Server 3.7 is available now, including a single view of code risk, new forking and repository policies, and security enhancements to the management console.
MM
Melody Mileski, David Jarzebowski·November 8, 2022Security 
How GitHub advocated for developer interests at the US Copyright Office technical measures consultations

This post is the second part in a series about ActiveRecord::Encryption that shows how GitHub upgrades previously encrypted and unencrypted columns to ActiveRecord::Encryption.
KS
Kylie Stradley·November 3, 2022Security 
Developers creating Internet of Things software use a complex stack of software that needs to be custom built into their CI/CD platform. Arm is leveraging the simplicity and scalability of GitHub Actions with a native integration that will revolutionize IoT software development.

In October, we experienced four incidents that resulted in degraded performance across GitHub services. This report also sheds light into an incident that impacted Codespaces in September.

It’s the moment you’ve all been waiting for. Are you ready?

We will begin to introduce several new capabilities to GitHub Copilot in 2023 to continue delivering responsible innovation and true happiness at the keyboard.
RJ
Ryan J. Salva·November 1, 2022AI & ML 
We are pleased to announce the expansion of All In for Students! All In for Students introduces college students to open source and provides them with the education, technical training and career development to prepare them for a summer internship in tech.

A glimpse into the backgrounds and day-to-day work of several GitHub employees in cybersecurity roles.

Some seriously spooktacular open source games for the web, Windows, macOS, and Linux with all sorts of fun hacks for infinite lives, invulnerability, and playing with time.
LR
Lee Reilly·October 29, 2022Systems 
As we wrap up Cybersecurity Awareness Month, the GitHub bug bounty team is excited to spotlight one of the security researchers who participates in the GitHub Security Bug Bounty Program.
LM
Logan MacLaren·October 28, 2022Security 
Hackatoberfest, hackathons, and open source contributions. It’s been a hectic month with so many community pull requests to all kinds of projects. So many in fact that we had to…

You can now build your agenda on GitHubUniverse.com! Whether you’re just getting started or you’re a seasoned industry professional, there’s a session for you.