
GitHub is considering what is at stake for our users and platform, how we can take responsible action to support free and fair elections, and how developers contribute to resilient democratic processes.

AWS CodeCommit is discontinuing new customer access and will no longer introduce new features. Learn how to migrate to GitHub Enterprise and why it’s the best option for you.
MM
Melody Mileski, Jun Pak·August 27, 2024SRE & Ops 
As part of the GitHub for Beginners guide, learn how to merge pull requests. This will enable you to resolve conflicts when they arise.

This year, as part of its annual Magic Quadrant series, Gartner published a first-of-its-kind report analyzing the state of play in the AI Code Assistants market–and named GitHub a Leader.

We surveyed 2,000 people on software development teams at enterprises in the U.S., Brazil, India, and Germany about the use, experience, and expectations around generative AI tools in software development.

Using Git in the CLI can improve your development speed and power. Here are our top eight commands for using GitHub via your command line.

Discover how the Ersilia Open Source Initiative accelerates drug discovery by using GitHub Actions to disseminate AI/ML models.
NC
Nicole Choi·August 15, 2024AI & ML 
In July, we experienced four incidents that resulted in degraded performance across GitHub services.

With Copilot Autofix, developers and security teams can keep new vulnerabilities out of code and confidently remediate their backlog of security debt.

Learn how AI agents and agentic AI systems use generative AI models and large language models to autonomously perform tasks on behalf of end users.
AW
Aaron Winston·August 13, 2024AI & ML 
Five actionable tips and strategies to supercharge developer happiness—and a more innovative workplace.

In this post, I’ll exploit CVE-2024-5830, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

As part of the GitHub for Beginners guide, learn how to create pull requests. This will enable you to suggest changes to existing repositories.

Explore how AI coding tools like GitHub Copilot can accelerate your journey to learn new programming languages.

We are enabling the rise of the AI engineer with GitHub Models–bringing the power of industry leading large and small language models to our more than 100 million users directly on GitHub.
TD
Thomas Dohmke·August 1, 2024AI & ML 
To enhance your coding experience, AI tools should excel at saving you time with repetitive, administrative tasks, while providing accurate solutions to assist developers. Today, we’re spotlighting three updates designed to increase efficiency and boost developer creativity.
ES
Elle Shwer, Stella Yang·July 31, 2024AI & ML 
Learn how we’re experimenting with open source AI models to systematically incorporate customer feedback to supercharge our product roadmaps.
MB
Mariana Borges·July 30, 2024AI & ML 
Introducing the generally available capability of GitHub Artifact Attestations to secure your cloud-native supply chain packages and images.

Git 2.46 is here with new features like pseudo-merge bitmaps, more capable credential helpers, and a new git config command. Check out our coverage on some of the highlights here.

Teams with neurodivergent employees can be up to 30 percent more productive. Discover tips on how best to support them in your workplace.

Take the next step in our GitHub for Beginners series and add code to your repository. Learn how to create branches and upload changes into a pull request.

Meet each maintainer, watch their project demos, and discover the unique story of each open source AI project.

Solving and staying ahead of problems when scaling up a system of GitHub’s size is a delicate process. Here’s a look at some of the tools in GitHub’s toolbox, and how we’ve used them to solve problems.

GitHub Staff Engineer Sarah Vessels discusses her philosophy of code review, what separates good code review from bad, her strategy for finding and reviewing code, and how to get the most from reviews of her own code.

In this blog post, we’ll explain how we discovered three critical vulnerabilities in Kafka UI and how they can be exploited.
MS
Michael Stepankin·July 22, 2024Security 
An interview with economic researchers who are applying causal inference techniques to analyze the effect of generative AI tools on software development activity.

In June, we experienced two incidents that resulted in degraded performance across GitHub services.

Outcomes from the Partnership on AI and GitHub workshop.

Drag-and-drop is a highly interactive and visual interface. We often use drag-and-drop to perform tasks like uploading files, reordering browser bookmarks, or even moving a card in solitaire.

The next step in our GitHub for Beginners series is learning how to add files and folders to your GitHub repository.

In this post, I’ll exploit CVE-2024-3833, an object corruption bug in v8, the Javascript engine of Chrome, that allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site.

Git started on your first repository in the third installment of GitHub for Beginners. Discover the essential features and settings to manage your projects effectively.

Can an attacker execute arbitrary commands on a remote server just by sending JSON? Yes, if the running code contains unsafe deserialization vulnerabilities. But how is that possible? In this blog post, we’ll describe how unsafe deserialization vulnerabilities work and how you can detect them in Ruby projects.

With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more.

Unstructured data holds valuable information about codebases, organizational best practices, and customer feedback. Here are some ways you can leverage it with RAG, or retrieval-augmented generation.

In May, we experienced one incident that resulted in degraded performance across GitHub services.

From sending emergency alerts about nearby fires to mapping services in refugee camps, developers are taking action to solve global problems.

Pushing code to GitHub is one of the most fundamental interactions that developers have with GitHub every day. Read how we have significantly improved the ability of our monolith to correctly and fully process pushes from our users.

Let’s take a look at 10 key moments from the first decade of the GitHub Security Bug Bounty program.
JM
Jill Moné-Corallo·June 11, 2024Security 
The latest installment of GitHub for Beginners, where we cover the essential Git commands to get you Git-literate.

Learn how GitHub used macOS and Apple Silicon runners for GitHub Actions to build, test, and deploy our iOS app faster.

GitHub Actions now offers Arm-hosted runners with images built by Arm for developers to begin building on the latest and most sustainable processors on the market.

This partnership between GitHub and JFrog enables developers to manage code and binaries more efficiently on two of the most widely used developer platforms in the world.
TD
Thomas Dohmke, Shlomi Ben Haim·May 29, 2024Engineering 
Let’s get you started on your Git journey with basic concepts to know, plus a step-by-step on how to install and configure the most widely used version control system in the world.

Announcing the second cohort, delivering value to projects, and driving a new frontier.
SP
Stormy Peters·May 23, 2024AI & ML 
The world of Copilot is getting bigger, improving the developer experience by keeping developers in the flow longer and allowing them to do more in natural language.
MR
Mario Rodriguez·May 21, 2024AI & ML 
GitHub celebrates Global Accessibility Awareness Day by launching another installment of the Coding Accessibility series and sharing how we scale accessibility within GitHub and beyond.

Git is releasing several new versions to address five CVEs. Upgrading to the latest Git version is essential to protect against these vulnerabilities.

We conducted research with developers at Accenture to understand GitHub Copilot’s real-world impact in enterprise organizations.
YG
Ya Gao, GitHub Customer Research·May 13, 2024AI & ML 
Whether you’re a rookie coder or a seasoned pro, our new SPORTech shop collection is tailored for you. And here’s the kicker: we’re offering free delivery worldwide over $20 until May 20!

In April, we experienced four incidents that resulted in degraded performance across GitHub services.

Here’s how SAST tools combine generative AI with code scanning to help you deliver features faster and keep vulnerabilities out of code.

Are you looking to have a positive impact in open source development? This program may be for you! Apply by May 30 to join.

We’ve made improvements to the way users of assistive technology can interact with and navigate lists of issues and pull requests and tables across GitHub.com.

With GitHub Copilot Chat in GitHub Mobile, developers can collaborate, ask coding questions, and gain insights into both public and private repositories anywhere, anytime–all in natural language for users on all GitHub Copilot plans.
MR
Mario Rodriguez·May 7, 2024AI & ML 
GitHub Community-in-a-box provides the tooling, resources, and knowledge you need to build internal communities of learning at scale with GitHub Discussions.

A quick guide on the advantages of Dependabot as a GitHub Actions workflow and the benefits this unlocks, including self-hosted runner support.

Generate and verify signed attestations for anything you make with GitHub Actions.

A11y Design Bootcamp is a live educational program that consists of exercises, discussions, and knowledge shares to raise awareness of web accessibility best practices, the role designers play in creating accessible products, and how to advocate for accessibility with cross-functional partners.

As part of GitHub’s dedication to accessibility, we expanded our internal accessibility program and scaled up our assessment process to help remove or lower barriers for users with disabilities. Then, we empowered employees from various disciplines to drive accessibility efforts within their teams.