How to secure your GitHub organization and enterprise account
Protect your team’s code with secure software development best practices like setting up SAML/SCIM integrations, enforcing policies to avoid code leakage, and more.
Safeguarding trans-Atlantic developer collaboration
Last week, the Court of Justice of the European Union (CJEU) ruled the EU-US Privacy Shield, a mechanism governing personal data transfers from the EU to the US, is invalid due to concerns…
Secure at every step: Show your dependencies some love with updates
Keep dependencies up to date, to make sure you can quickly apply a patch when it really matters – when there’s a critical security vulnerability.
Hardening your GitHub Enterprise Server
GitHub stores your source code, releases, and a vast amount of invaluable information in issues and pull requests. While GitHub Enterprise Server (GHES), our self hosted solution, provides great security by default, administrators can take additional steps to further harden their appliance. This post will guide you through the most important settings.
GitHub Action Hero: Nikita Sobolev
The GitHub community is capable of incredible things. GitHub Actions is just one of our newest tools made available to developers around the world. Automate your workflow, and take control…
Securing your open source dependencies with GitHub dependency insights
GitHub dependency insights helps both developers and security teams manage their open source security with confidence—automatically compiling relevant CVE information, aiding in OSS license compliance, and helping them better understand their OSS dependency versions.
GitHub Archive Program: the journey of the world’s open source code to the Arctic
At GitHub Universe 2019, we introduced the GitHub Archive Program along with the GitHub Arctic Code Vault. Our mission is to preserve open source software for future generations by storing your code in an archive built to last a thousand years.
How organizations can tackle securing the world’s code
We all play a role in securing the world’s code. No one company can solve things alone, including GitHub, which is why it is critical to combine the energies of…
Remote work: Sales and Support on being customer-centric while working remotely
Sales and Support leaders share advice and strategies to help you navigate a remote-first customer approach.
GitHub Action Hero: Jeremy Shore
The GitHub community is capable of incredible things! GitHub Actions is just one of the amazing tools made available for developers. Actions is here to help you automate your workflows,…
What we learned from building an industry coalition
Securing the open source supply chain is critically important for developer communities and the entire software ecosystem. In recent years, the industry has seen an uptick in the adoption of…
Introducing the GitHub Availability Report
What is the Availability Report? Historically, GitHub has published post-incident reviews for major incidents that impact service availability. Whether we’re sharing new investments to infrastructure or detailing site downtimes, our…
Bean Stalking: Growing Java beans into Remote Code Execution
In this post I’ll show how input validation which should be used to prevent malformed inputs to enter our applications, open up the doors to Remote Code Execution (RCE).
GitHub Action Hero: Casey Lee
The GitHub community is capable of incredible things and GitHub Actions is the tool. Do you want to automate your workflow, increase your productivity, and empower your developer experience? Then…
How we launched docs.github.com
ICYMI: docs.github.com is the new place to discover all of GitHub’s product documentation! We recently completed a major overhaul of GitHub’s documentation websites. When you visit docs.github.com today, you’ll see…
Git Credential Manager Core: Building a universal authentication experience
Authentication is a critical component to your daily development. When working in open source, you need to prove that you have rights to update a branch with git push. Additionally…
GitHub Supports the Open Technology Fund
Last week, GitHub joined over 500 organizations signing a letter to the U.S. Congress seeking continued support for the Open Technology Fund (OTF) and its mission of funding open source…
Launching docs.github.com
Leia este artigo em português Sabemos como a aprendizagem é importante para o seu sucesso na utilização do GitHub. Quando você estiver usando nossos produtos, esperamos que você se sinta…
Looking back on the GitHub Security Lab Capture The Flag: CodeQL and chill
One year ago, the security research team at Semmle launched its first Capture the Flag (CTF), as part of the Hack In The Box (HITB) Amsterdam conference. We wanted to…
Remote work: Reshaping the workplace experience
The GitHub Workplace Experience team weighs in on how to get creative during COVID-19 and what the future holds.
GitHub Action Hero: Victoria Drake
GitHub Actions allows you to automate your workflow. With GitHub Actions, you can deploy to any cloud, build containers, automate messages, and do so much more. Use any tool you…
GitHub Enterprise Server 2.21 is here
GitHub Enterprise Server 2.21 is now available with updates to simplify collaboration, increase reliability and improve security.
Dependabot now updates your Actions workflows
GitHub Actions makes it easy to automate all your software workflows, from continuous integration and delivery to issue triage and more. Whether you want to build a container, deploy a…
Welcome to the inaugural class of MLH Fellows
Student developers are the future of software. Their taste in tools, habits around code, what they are learning–all of these drivers will shape tech, and culture in general, for years…
Promote consistency across your organization with workflow templates
Now you can create custom workflow templates to promote best practices and consistency across your organization.
Introducing GitHub Super Linter: one linter to rule them all
Setting up a new repository with all the right linters for the different types of code can be time consuming and tedious. So many tools and configurations to choose from…
Using GitHub Actions for MLOps & Data Science
Background Machine Learning Operations (or MLOps) enables Data Scientists to work in a more collaborative fashion, by providing testing, lineage, versioning, and historical information in an automated way. Because the…
Welcoming the Octograds of 2020
Class of 2020, you did it! With schools turning to drive through diploma stops and recreating their campus in Minecraft, GitHub Education decided that celebrating this milestone for the next…
Keep all your packages up to date with Dependabot
Keeping your dependencies updated is one of the easiest ways to keep the software you build secure. However, while it’s critically important to keep your dependencies updated, in a recent…
GitHub Action Hero: Adam Dobrawy
GitHub Actions allows you to automate your workflow. Connect with the tools you know and love, and have more freedom to innovate and be creative. With GitHub Actions, you can…
Introducing Hack Club’s Summer of Making
We’re partnering with Hack Club to support the students behind Summer of Making, a new remote, student summer program. From building Arduino-powered robots to creating an open source game, we’re excited to see students channel their passions and build with the Hack Club community this summer.
The Octopus Scanner Malware: Attacking the open source supply chain
This post details how an open source supply chain malware spread through build artifacts. 26 open source projects were backdoored by this malware and were actively serving backdoored code.
The GitHub Support Community has a new look and feel!
We’ve given the GitHub Support Community a major upgrade with a number of benefits: built using open-source, great Markdown support, more responsive design, and so much more.
Giving credit for Security Advisories
Saying thanks is now a core part of the Security Advisory workflow.
Code in the browser with GitHub Classroom
Learn about some new ways students can code in the browser. With online integrated development environments (IDEs), students can get right to work in a web browser, avoiding software conflicts that might happen on their local machines.
Keep your secrets synced across multiple repositories with organization secrets
Now you can define secrets for an organization, making it easier to keep secrets synced across multiple repositories.
April service disruptions analysis
We had multiple service interruptions in April that may have impacted your projects and businesses. We know how important reliability is for our users and have detailed an analysis on the disruptions.
Remote work: How parents are adapting and working during COVID-19
GitHub parents share their tips for adapting during COVID-19 and working from home with kids.
GitHub Protips: Tips, tricks, hacks, and secrets from Sarah Vessels
In this edition of GitHub Protips, Sarah Vessels shares how she expresses ideas in code and doesn’t stress about the nitty-gritty details of how to neatly organize branches.
Three bugs in the Go MySQL Driver
Check out what we learned from shipping our busiest Go service in production—we found 3 bugs in the Go MySQL driver.
Ludum Dare 46 staff picks
10 games from Ludum Dare 46 for your entertainment and source code-viewing pleasure.
Remote work: How Finance, Legal, and IT made the shift to working from home
Traditional in-office teams share how they are adjusting to remote life
GitHub Protips: Tips, tricks, hacks, and secrets from Luke Hefson
With Luke Hefson’s many different roles at GitHub, he’s learned about tons of hacks and protips that he can’t wait to share with you.
Reflecting on joining GitHub and what’s next for GitHub Insights
With GitHub’s focus on developers, community, and customers, we can’t imagine a better place for our team to be.
Create and push tags in the latest GitHub Desktop 2.5 release
The latest GitHub Desktop release includes the most requested feature of the past six months: tags! Create, push, and view tags directly from GitHub Desktop.
Hot lava: A case study in hunting for network integer arithmetic flaws
We examine the dangers of network integer arithmetic based on a case study of security vulnerabilities reported to the ntop project.
GitHub Sponsors is out of beta for sponsored organizations
Have your team join Homebrew and JuliaLang, along with over 500 other organizations, in sponsoring open source projects, and the people behind them.
Remote work: Marketing and planning virtual events remotely
The GitHub marketing team shares best practices for working remotely and planning virtual events.
Capture the Flag 4—CodeQL and chill
Join our Capture the Flag challenge to use your CodeQL skills or learn new ones.
New from Satellite 2020: GitHub Discussions, Codespaces, securing code in private repositories, and more
See what we announced at our first virtual GitHub Satellite including a full dev environment on GitHub powered by VS Code, a new way to have discussions with your communities, new ways to secure projects with code scanning and secret scanning, and more.
Octoverse spotlight: An analysis of developer productivity, work cadence, and collaboration in the early days of COVID-19
Following the 2019 Octoverse report, this latest article provides trends and insights into developer activity on GitHub in the early days of COVID-19.
How one student curbed panic buying with the Pack
Learn how Ben Sassoon used the Pack to curb panic buying during the COVID-19 pandemic.
Announcing the MLH Fellowship, powered by GitHub
Now more than ever, students need opportunities to sustain their growth, using real tools, and an experienced understanding of how to work remotely and globally. With this new program, we’re helping to support the next generation of developers and the open source projects that companies use every day.
Remote work: How global teams collaborate across time zones
GitHub international leaders share their insights on how to work with globally distributed teams.
GitHub Protips: Tips, tricks, hacks, and secrets from Brian Douglas
Make better contributions, triage your issues efficiently, save time with saved replies, and more with @bdougie’s protips.
Triggering garbage collection with rejected promises to cause use-after-free in Chrome
In this post I’ll show how garbage collections (GC) in Chrome may be triggered with small memory allocations in unexpected places, which was then used to cause a use-after-free bug.
How to build an effective DevSecOps culture
By prioritizing secure development alongside speed, DevSecOps helps you ship safer applications by making security part of your current DevOps pipeline.
Remote work: Engineering’s perspective on humanizing the remote work experience
The GitHub engineering team shares best practices for making remote work part of your company culture.
GitHub Protips: Tips, tricks, hacks, and secrets from Alyson La
Check out Alyson La’s favorite tips for getting started with Git and GitHub. Get into the GitHub Flow, try out a few tools, practice merge conflicts, and more!
Improving notifications for everyone
We’re dedicated to making notifications as simple and valuable as they can be, so you can be as productive on GitHub and you can be.
