Release Radar
We’re here to bring you the latest and greatest releases for December 2020. These are exciting new releases from some of the coolest projects around. There’s everything from world-changing tech…
Your DevOps guide to GitHub Universe
GitHub Universe is almost here. For more on what to expect from this year’s stream, we sat down with virtual host, Brian Douglas, for a quick Q&A on GitHub Actions,…
Applying DevSecOps to your software supply chain
To best apply DevSecOps principles to improve the security of your supply chain, you should ask your developers to declare your dependencies in code; and in turn provide your developers with maintained ‘golden’ artifacts and automated downstream actions so they can focus on code.
The evolving role of operations in DevOps
GitHub’s team delves into answering the question “what are operations roles in the development and operations (DevOps) environments”. From automating the role of QA in DevOps and more for smaller, faster delivery cycles.
Improving the GHES release process: release candidates
In our ongoing “Building GitHub” series, we talk about some of the projects we’re working on to improve how efficiently we build GitHub, as well as increase GitHub’s availability, stability,…
Join our panel with WHO at GitHub Universe 2020!
The year 2020 has upended nearly every aspect of society. In a panel for GitHub Satellite back in May, we briefly covered some of the ways in which our social…
GitHub Availability Report: November 2020
Introduction In November, we experienced two incidents resulting in significant impact and degraded state of availability for issues, pull requests, and GitHub Actions services. November 2 12:00 UTC (lasting 32…
The State of the Octoverse 2020
Change is inevitable, and this year, it has been inescapable. We’ve had to find new ways to relate, learn, and balance both work and life at home. One thing has…
The ReadME Project shares innovative paths to DevOps success
GitHub has the privilege of partnering with thousands of organizations to improve their DevOps practices, from established enterprises transforming the way they work to born-in-the-cloud businesses. We often connect developers,…
Nbdev: A literate programming environment that democratizes software engineering best practices
Learn about nbdev, a new literate programming environment for Python.
Whatcha watchin’? Custom notification controls
Earlier this year, we upgraded the notifications experience on GitHub, focusing on filters that get you straight to the updates that matter most to you. Just last week, we shipped…
Take action: DMCA anti-circumvention and developer innovation
The Digital Millennium Copyright Act (DMCA) is a 22-year old United States law meant to strike a complicated balance between art, code, and speech on the net — impacting users…
Securing the fight against COVID-19 through open source
This blog describes a security vulnerability in the infrastructure that supports Germany’s COVID-19 contact tracing efforts. The mobile (Android/iOS) apps are not affected by the vulnerability and do not collect and/or transmit any personal data other than the device’s IP address. The infrastructure takes active measures to disassociate true positives from client IP addresses.
GitHub Archive Program: Making the archives beautiful
The GitHub Archive Program announces its latest milestone: storing collections of the most popular and depended upon open source repositories in beautiful art cases featuring 3D-printed and AI-generated artwork in significant libraries around the world.
Introducing split diffs in GitHub Desktop
The latest version of GitHub Desktop includes split diffs, PRs with Actions status, more control over stashing, and discarding changes from files.
Updates to our Terms of Service and Privacy Statement now merged
As part of GitHub’s commitment to developers, we open source the policies that govern our platform and welcome feedback at any time in our site-policy repository. When we make material…
Release Radar
We’re here to bring you the latest and greatest releases for November 2020. These are exciting new releases from some of the coolest projects around. There’s everything from world-changing tech…
Standing up for developers: youtube-dl is back
Today we reinstated youtube-dl, a popular project on GitHub, after we received additional information about the project that enabled us to reverse a Digital Millennium Copyright Act (DMCA) takedown.
Veterans Day spotlight: Finding careers and camaraderie through code
Today in America, it’s Veterans Day, a federal holiday to honor those who have served in the U.S. Armed Forces. As a veteran myself, I know that honoring veterans is…
How to get root on Ubuntu 20.04 by pretending nobody’s /home
Ubuntu 20.04 local privilege escalation using vulnerabilities in gdm3 and accountsservice (CVE-2020-16125, CVE-2020-16126, CVE-2020-16127)
GitHub Availability Report: October 2020
In October, we experienced one incident resulting in significant impact and degraded state of availability for multiple services.
Commit your vote on election day!
Closing that priority issue you’re working on can wait—put down your keyboard and vote! Millions of you already have, and your vote in national and local elections may just impact…
GitHub Game Off 2020 theme announcement
The theme for this year’s Game Off is MOONSHOT. moonshot – noun an extremely ambitious and innovative project the act of launching a spacecraft to the moon a hit or…
13 ghoulish games to play, hack and slash this weekend 👻
WARNING: This post contains zombies, werewolves, extra dimensional beings, mummies, and more! Proceed at your own risk. Trick or treat yourself to some fangtastic Halloween-themed games this weekend. These were…
GitHub Action Hero: Eyal Posener and “Go Action”
GitHub Actions gives you the power to automate your workflow. Connect with the tools you know and love. Have more freedom to innovate and be creative. Deploy to any cloud,…
Getting started with DevOps automation
This is the second post in our series on DevOps fundamentals. For a guide to what DevOps is and answers to common DevOps myths check out part one. What role…
Making GitHub CI workflow 3x faster
Using deferred compliance in GitHub’s CI process to improve developer productivity.
Building GitHub: introduction
An introduction to our blog series on GitHub’s investments in technical excellence.
Build a game this November with GitHub Game Off
Game Off, our annual game jam (a hackathon for building games) returns this weekend. Participants will be given a secret theme on November 1 and will have the entire month…
2020 GitHub Universe Micro-Mentoring Application
We’re thrilled to announce an opportunity to connect with employees at GitHub during GitHub Universe. This year, Universe will take place virtually December 8-10 and we’d love to “see” you…
Code Scanning a GitHub Repository using GitHub Advanced Security within an Azure DevOps Pipeline
In this blog post we demonstrate how to integrate the GitHub Advanced Security code scanning capability into our Azure DevOps Pipelines. We provide code snippets and examples that can guide you or your developers working to integrate Code Scanning into any 3rd Party CI tool.
Exploiting a textbook use-after-free security vulnerability in Chrome
In this post I’ll give details about how to exploit CVE-2020-6449, a use-after-free (UAF) in the WebAudio module of Chrome that I discovered in March 2020. I’ll give an outline of the general strategy to exploit this type of UAF to achieve a sandboxed RCE in Chrome by a single click (and perhaps a 2 minute wait) on a malicious website.
DevOps best practices Q&A: Automated deployments at GitHub
How GitHub measures and improves reliability, security, and developer happiness with automated deployments.
Vote, and contribute to democracy through open source
November 3 is election day in the U.S. Early voting is available in most states. If you haven’t yet, make a plan to vote. If you’re an employer in the…
Introducing the npm public roadmap and a new feedback process
npm is the world’s largest package registry, powering the world’s largest development community—JavaScript. Without them, npm would not be where it is today, and we know that maintaining open lines…
Hacktoberfest e GitHub ¡Presente!: celebrando comunidades open source em outubro
Outubro é um mês especial no mundo do desenvolvimento de software. Há 7 anos a Hacktoberfest — um festival que celebra a comunidade open source — incentiva pessoas desenvolvedoras a…
Diversity, inclusion, and belonging at GitHub in 2020
Like our global community, we’ve had a year of challenges and extremes at GitHub, and I’m grateful everyday for our culture as our foundation of strength and resilience. We started…
A Journey of Diversity, Inclusion, and Belonging at GitHub
@demetris11 embarks on a journey of curiosity and discovery in her new role overseeing DI&B strategy at GitHub
Highlights from Git 2.29
The open source Git project just released Git 2.29 with features and bug fixes from over 89 contributors, 24 of them new. Last time we caught up with you, Git 2.28 had just been…
GitHub Planeta Virtual Meetup
GitHub представляет нашу первую виртуальную встречу! Первая встреча пройдет во вторник, 17-го ноября, с 19:00 до 21:00 по Московскому времени. Наша ведущая и докладчик, Саша Розенбаум, менеджер по продукту из…
Updates to our Terms of Service and Privacy Statement
We regularly update our policies to reflect the evolution of our products, changing legal requirements, and user feedback. In this update, we’ve made some changes to our Terms of Service,…
Try something new at Local Hack Day: Learn
It’s time for Major League Hacking’s (MLH) annual Local Hack Day: Learn, a worldwide celebration of learning. Do you have a framework that you have wanted to try? Or perhaps…
Standing by developers through Google v. Oracle
This article originally appeared in TechCrunch, and is republished here with permission. The Supreme Court heard arguments October 7 in Google v. Oracle. This case raises a fundamental question for…
How to get your organization started with containerized deployments
This is our second post on cloud deployment with containers. Looking for more? Join our upcoming GitHub Actions webcast with Sarah, Solutions Engineer Pavan Ravipati, and Senior Product Manager Kayla…
Pachyderm and the power of GitHub Actions: MLOps meets DevOps
This is a guest post by Jimmy Whitaker, senior data science evangelist at Pachyderm In the last few years, DevOps has begun to shift—from a culture of continuous integration and…
How we open sourced docs.github.com
A lot of work went into figuring out how to sync a public and private docs repo.
Even better code review in GitHub for mobile
In the newest version of GitHub for mobile, we’re shipping a bunch of features that make code review easier, faster, and more productive.
Presenting v7.0.0 of the npm CLI
We’re releasing v7.0.0 of the npm CLI, which includes exciting new features such as Workspaces, automatically installed peer deps, and more!
Top 10 games from the JS13K 2020 competition 🕹
The ninth annual js13kGames competition wrapped up last weekend with over 220 games submitted. All created in a month and in less than 13kB of JavaScript. For anyone not in…
Release Radar
We’re here to bring you the latest and greatest releases for October 2020. These are exciting new releases from some of the coolest projects around. There’s everything from world-changing tech,…
Testing cloud apps with GitHub Actions and cloud-native open source tools
See this post in action during GitHub Demo Days on October 16. What makes a project successful? For developers building cloud-native applications, successful projects thrive on transparent, consistent, and rigorous…
GitHub Availability Report: September 2020
In September, we experienced one incident resulting in significant impact to the GitHub Pages service.
What is DevOps? A guide to common methods and misconceptions
By now, most people in technology are familiar with the term DevOps. What we call “DevOps” will often differ between organizations, yet one thing remains the same: DevOps is defined…
GitHub Docs are now open source
Today, we’re excited to open source GitHub Docs at http://github.com/github/docs. Being a developer means always learning, and great docs can be like rocket fuel. They’re there when you need them,…
Announcing third-party code scanning tools: infrastructure as code and container scanning
Last week we launched code scanning out of beta and have since announced integrations with static analysis and developer security training solutions. By expanding our GitHub security ecosystem, developers can…
Safe harbors for software collaboration, part 1
As policymakers grapple with how to address hate speech and disinformation on the internet, they’re eying the legal structure underpinning collaborative software development: legal safe harbors. These safe harbors protect…
Fine-tune access to external actions
Limit use of external actions within Actions workflow for enterprises, organizations, and repositories.
Announcing third-party code scanning tools: static analysis & developer security training
Last week, we launched code scanning for all open source and enterprise developers, and we promised we’d share more on our extensibility capabilities and the GitHub security ecosystem. Today, we’re…
GitHub Action Hero: Shivam Mathur and “Setup PHP”
GitHub Actions gives you the power to automate your workflow. Connect with the tools you know and love. Have more freedom to innovate and be creative. Deploy to any cloud,…
Keeping your data pipelines healthy with the Great Expectations GitHub Action
This post is the second in our series on using GitHub for MLOps and data science. Just joining in? Get started with part one. Most continuous integration (CI) tools only…