Home/GitHub
Source

GitHub

1,681 articles from GitHub.

Security — Security alert: new phishing campaign targets GitHub users

Security alert: new phishing campaign targets GitHub users

On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself was not affected, the campaign has impacted many victim organizations.

AWAlexis WalesAlexis Wales·September 21, 2022Security
Engineering — Why we signed the Copenhagen Pledge on Tech for Democracy

Why we signed the Copenhagen Pledge on Tech for Democracy

As the home for developers, we understand the key role our communities play in steering digital transformation and maintaining societal infrastructure. That’s why we choose to drive and support policies and initiatives like the Copenhagen Pledge on Tech for Democracy. We’re committed to working with like-minded organizations, governments, and civil society to make digital technologies work for dem

SMShelley McKinleyShelley McKinley·September 21, 2022Engineering
Career & Teams — “If you don’t make it beautiful, it’s for sure doomed”: putting the Vault in GitHub’s Arctic Code Vault

“If you don’t make it beautiful, it’s for sure doomed”: putting the Vault in GitHub’s Arctic Code Vault

GitHub this month installed a massive steel vault, etched with striking AI-generated art, deep within an Arctic mountain, finalizing its Arctic Code Vault. This vault contains the 188 reels of hardened archival film which will preserve the 02/02/2020 snapshot of every active public GitHub repository for 1,000 years. It also now includes a Tech Tree, a human-readable selection of works describing s

JEJon EvansJon Evans·September 20, 2022Career & Teams
Security — 5 tips for prioritizing Dependabot alerts

5 tips for prioritizing Dependabot alerts

Dependabot alerts can give you the ability to secure your project by keeping dependency-based vulnerabilities out of your code. Here are some tips to more efficiently prioritize and take action on your alerts, so you can get back to building.

EHErin HavensErin Havens·September 19, 2022Security
Performance — 8 things you didn’t know you could do with GitHub Copilot

8 things you didn’t know you could do with GitHub Copilot

Developers all over the world are using GitHub Copilot to help speed up their development and increase developer productivity. With GitHub Copilot available to developers everywhere, we’ve found some fun and useful examples of how developers can use GitHub Copilot for things you may not be thinking about.

RSRizel ScarlettRizel Scarlett·September 14, 2022Performance
SRE & Ops — GitHub Availability Report: August 2022

GitHub Availability Report: August 2022

In August, we experienced one incident resulting in significant impact to Codespaces. We’re still investigating that incident and will include it in next month’s report. This report also sheds light into an incident that impacted Codespaces in July.

JOJakub OleksyJakub Oleksy·September 7, 2022SRE & Ops
Security — Join us for OctogatosConf 2022

Join us for OctogatosConf 2022

Live on September 15, 2022, with talks by industry experts in Spanish, Portuguese, and English, on topics including software development, security, technical project management, community, open source, professional development and best practices.

AGAndrea GriffithsAndrea Griffiths·September 6, 2022Security
Engineering — Release Radar

Release Radar

We’ve been gearing up to launch GitHub Universe 2022 and our community has been launching cool projects left right and center. These projects include everything from world-changing technology to developer…

MDMichelle DukeMichelle Duke·September 2, 2022Engineering
Databases — Git’s database internals V: scalability

Git’s database internals V: scalability

This fifth and final part of our blog series exploring Git’s internals shows several strategies for scaling your Git repositories that match related database sharding techniques.

DSDerrick StoleeDerrick Stolee·September 2, 2022Databases
Databases — Git’s database internals III: file history queries

Git’s database internals III: file history queries

Git’s file history queries use specialized algorithms that are tailored to common developer behavior. Level up your history spelunking skills by learning how different history modes behave and which ones to use when you need them.

DSDerrick StoleeDerrick Stolee·August 31, 2022Databases
Databases — Git’s database internals II: commit history queries

Git’s database internals II: commit history queries

This post explores Git commit history as a database where ‘git log’ is the query language. Learn about Git’s custom query index – the commit-graph file – and how to make sure it’s enabled in your repositories.

DSDerrick StoleeDerrick Stolee·August 30, 2022Databases
Engineering — 2022 Transparency Report: January to June

2022 Transparency Report: January to June

We’re reporting on a six-month period rather than annually to increase our level of transparency. For this report, we’ve continued with the more granular reporting we began in our 2021 reports.

RCRose CooganRose Coogan·August 16, 2022Engineering
SRE & Ops — GitHub Pages now uses Actions by default

GitHub Pages now uses Actions by default

As GitHub Pages, home to 16 million websites, approaches its 15th anniversary, we’re excited to announce that all sites now build and deploy with GitHub Actions.

CPChris Patterson, Yoann ChaudetChris Patterson, Yoann Chaudet·August 10, 2022SRE & Ops
Security — Dependabot now alerts for vulnerable GitHub Actions

Dependabot now alerts for vulnerable GitHub Actions

GitHub Actions gives teams access to powerful, native CI/CD capabilities right next to their code hosted in GitHub. Starting today, GitHub will send a Dependabot alert for vulnerable GitHub Actions, making it even easier to stay up to date and fix security vulnerabilities in your actions workflows.

GGitHub·August 9, 2022Security
Security — All GitHub Enterprise users now have access to the security overview

All GitHub Enterprise users now have access to the security overview

Today, we’re expanding access to the GitHub security overview! All GitHub Enterprise customers now have access to the security overview, not just those with GitHub Advanced Security. Additionally, all users within an enterprise can now access the security overview, not just admins and security managers.

BOBrittany O'Shea, Kelly ArwineBrittany O'Shea, Kelly Arwine·August 8, 2022Security
Engineering — Release Radar

Release Radar

While some of us have been wrapping up the financial year, and enjoying vacation time, others have been hard at work shipping open source projects and releases. These projects include…

MDMichelle DukeMichelle Duke·August 5, 2022Engineering
Performance — GitHub Availability Report: July 2022

GitHub Availability Report: July 2022

In July, we experienced one incident that resulted in degraded performance for Codespaces. This report also acknowledges two incidents that impacted multiple GitHub.com services in June.

JOJakub OleksyJakub Oleksy·August 3, 2022Performance
Engineering — Release Radar

Release Radar

It’s been a crazy couple of months with the end of financial year and lots of products shipping. Our community has been hard at work shipping projects too. These projects…

MDMichelle DukeMichelle Duke·July 27, 2022Engineering
Security — Corrupting memory without memory corruption

Corrupting memory without memory corruption

In this post I’ll exploit CVE-2022-20186, a vulnerability in the Arm Mali GPU kernel driver and use it to gain arbitrary kernel memory access from an untrusted app on a Pixel 6. This then allows me to gain root and disable SELinux. This vulnerability highlights the strong primitives that an attacker may gain by exploiting errors in the memory management code of GPU drivers.

MYMan Yue MoMan Yue Mo·July 27, 2022Security
Security — Introducing even more security enhancements to npm

Introducing even more security enhancements to npm

New npm security enhancements include an improved login and publish experience with the npm CLI, connected GitHub and Twitter accounts, and a new CLI command to verify the integrity of packages in npm.

MBMyles Borins, Monish MohanMyles Borins, Monish Mohan·July 26, 2022Security