
GitHub’s dependency graph identifies all upstream dependencies and public downstream dependents of a repository or package by parsing manifest files, so that you can better manage the security and compliance of your dependencies.
MK
Maya Kaczorowski·August 4, 2020Security 
Learn about patterns for configuring and maintaining GitHub Actions self-hosted runners on Google Cloud.

The Semantic Code team shipped a massive improvement to the language support system that powers code navigation. Code navigation features only scratch the surface of possibilities that start to open up when we combine Semantic‘s program analysis potential with GitHub’s scale.

Imagine if your website could evoke this kind of response. Visitors who respond to the sensory stimulation would instantly be in a more positive headspace, which they’d then associate with the site and your brand. While you don’t want to design a website for all five senses — because that would most certainly lead to sensory overload — you can use individual senses to strengthen the experience vis

For the past twelve weeks, I’ve had the pleasure of working as a Legal Intern at Cloudflare. This blogpost goes over a few key things that set this internship apart from even those in which I’ve been able to connect with people in-person.

I first heard the term "Friction Log" from Suz Hinton back in April on ShopTalk. The idea makes an extreme amount of sense: Use a thing, and write down

Today GitHub Actions shipped a series of features designed to improve your workflows when working with PRs from repository forks. New settings for private repository forks Many GitHub customers choose…

We are happy to announce that GitHub is joining the Open Source Security Foundation (OpenSSF) as a founding member, alongside Google, IBM, JPMorgan Chase, Microsoft, NCC Group, OWASP Foundation, Red Hat, and others.

When to pass a function to useState and setState

Redux is a robust state-management library for single-page JavaScript apps. It is described on the official documentation as a predictable state container for Javascript applications and it’s fairly simple to learn the concepts and implement Redux in a simple app. Going from a simple counter app to a real-world app, however, can be quite the jump.

By way of this blog post, Hady Mendez shares her thoughts about where she thinks we go from here and how she believes we can truly embody Diversity Equity and Inclusion (DEI) in our workplace.

“His spice-induced visions show him a myriad of possible futures where humanity has become extinct and only one where humanity survives. He names this future ‘The Golden Path’ and resolves to bring it to fruition.”

Across Spotify, our teams diligently strive to fulfill our mission to “unlock the potential of human creativity by giving millions of creative artists the opportunity to live off their work, and billions of fans the opportunity to enjoy and be inspired by it”. As product managers in the Platform Developer Experience (PDX) Tribe, part of Spotify’s Technology Infrastructure Group, we focus on unlock
MJMaria Jernström and Jason Palmer·August 1, 2020SRE & Ops 
Today I’m going to talk about TTFD, or time to first dopamine, and announce a huge improvement to the Workers development experience — wrangler dev.

Check out our eighteenth edition of The Serverlist below. Get the latest scoop on the serverless space, get your hands dirty with new developer tutorials, engage in conversations with other serverless developers, and find upcoming meetups and conferences to attend.

GitHub Actions gives you the power to automate your workflow. Connect with the tools you know and love. Have more freedom to innovate and be creative. Deploy to any cloud,…

Hey, it's HighScalability time! Serverless is really complex. Or is it? @paulbiggar sparked a thoughtful Twitter thread. Do you like this sort of Stuff? Without your support on Patreon this kind of Stuff won't happen. Usually I pitch my book Explain the Cloud Like I'm 10 here, but if you're an author with books on Amazon I'd like to ask you to give Best Sellers Rank a try. I started it to send dat

This tutorial is for illustrators who also happen to be passionate car enthusiasts. If you follow me along, you will learn how to draw from scratch in Sketch the legendary Porsche 911, all in vectors. Together, we will be pushing Sketch to its limits and you will learn how to create an almost photo realistic car by using basic shapes, layer styles, and various Sketch features. No bitmap images wil

Do you need a little inspiration boost? Well, then our new batch of wallpapers is for you. In this post, Cosima Mielke brings you wallpapers for August 2020. All of them are available in versions with and without a calendar — to help you count down the days to a big deadline (or a few days off, maybe?) or continue to use your favorite even after the month has ended. You decide. A big thank-you to

Today we’re thrilled to announce general availability of Bring Your Own IP (BYOIP) across our Layer 7 products as well as Spectrum and Magic Transit services.

A “cold start” is the time it takes to load and execute a new copy of a serverless function for the first time. It’s a problem that’s both complicated to solve and costly to fix.

I have spent the past several years working (alongside a bunch of super talented people) on a font family called Recursive Sans & Mono, and it just

The Dropbox Embedder is officially released and already being used in the wild. Developers can use the Embedder to embed Dropbox content on non-Dropbox surfaces.

As previously announced, beginning November 13th, 2020, we will no longer accept account passwords when authenticating with the REST API and will require the use of token-based authentication (e.g., a…

Simon Bennetts is the OWASP Zed Attack Proxy (ZAP) Project Leader and a Distinguished Engineer at StackHawk, a company that uses ZAP to help users fix application security bugs before they hit production. Prior to making the move into security, he was a developer for 25 years and strongly believes that you can’t build secure web applications without knowing how to attack them.

We recently shared the work we did to rebuild our tech stack to support the redesigned Facebook.com. When that project began, we saw an opportunity to integrate greater accessibility into the site and build it into the foundation in a way we couldn’t have done without this rebuild. The previous site had been built upon […]
MEMeta Engineering·July 30, 2020Frontend 
Just like during the Renaissance, we’re living in times of incredible cultural and artistic innovation. As the Internet evolves, browsers align, capabilities are added and accessibility of technology becomes easier, designers face new opportunities to create, think, and change their status with no-code tools. In this article, Uri Paz presents some tools that allow non-programmers to create applica

Cloudflare is a security company, and the heart of Workers is, in my view, a security project. Running code written by third parties is always a scary proposition, and the primary concern of the Workers team is to make that safe.

In this post, hear from @stevemar, a Senior Technical Staff Member at IBM, about a new GitHub Starter Workflow for developers deploying containerized applications to IBM Cloud Kubernetes Service. Here…

by David Berg, Ravi Kiran Chirravuri, Romain Cledat, Jason Ge, Savin Goyal, Ferras Hamad, Ville Tuulos tl;dr Today, we are releasing a new job scheduler integration with AWS Step Functions. This…

Using TypeScript enabled our ever-growing Admin teams to leverage TypeScript’s compiler to catch potential bugs and errors well before they ship.
SEShopify Engineering·July 29, 2020Frontend 
Ever tried interacting with a GraphQL server in a client-side application and felt like giving up even before getting anywhere? Ever declined an invitation to join a code base that requires working with GraphQL API because you had no idea? Ever felt like the only front-end engineer who hasn’t learned how to consume GraphQL APIs? If you answered yes to any of these questions, then this tutorial is
BK
Blessing Krofegha·July 29, 2020Frontend 
As Cloudflare Workers, and other Serverless platforms, continue to drive down costs while making it easier for developers to stand up globally scaled applications, the migration of legacy applications is becoming increasingly common.

Today, we’re excited to announce support for Python, Scala, Kotlin, Reason and Dart. You can build applications on Cloudflare Workers using your favorite language starting today.

A friend of mine recently asked me to teach her to code. She was an absolute beginner, having no idea what coding really involves. I decided to start where I

We’re welcoming Malta and Cyprus to the GitHub Sponsors community. Check out this exciting news plus the latest from GitHub Sponsors.

The public roadmap is designed to give your team more information about what features and functionality you can expect from GitHub over the coming quarters.

Emmett McBain was a Black American graphic designer whose work had a remarkable impact on the representation of Black Americans in advertising. He co-founded what became the biggest Black-owned agency in the USA. McBain designed almost 75 record covers by the time he was 24, and in the penultimate of his Inspired Design Decisions series, Andy Clarke will explain how his work can inspire what we de

We’re asking if modern best practices are bad for the web? Are modern frameworks taking us down the wrong path? Drew McLellan speaks to Lean Web expert Chris Ferdinandi to find out.

Today, we are excited to announce the next phase of this with the launch of our new platform, Workers Unbound, without restrictive CPU limits in a private beta.

Monica Powell shared a really cool trick the other day:

This is a neat interactive page by Ville V. Vanninen to reference the names of things in the CSS syntax. I feel like the easy ones to remember are "selector,"

Sometimes our sites need a little sprinkling of content management. Not always. Not a lot. But a bit. The CMS market is thriving with affordable, approachable

When you change the font-weight of a font, the text will typically cause a bit of a layout shift. That's because bold text is often larger and takes up more

The open source Git project just released Git 2.28 with features and bug fixes from over 58 contributors, 13 of them new. We last caught up with you on the…

The GitHub REST API has been through three major revisions since it was first released, only a month after the site was launched. We often receive feedback that our REST…

What problems can happen when you use && to conditionally render content in JSX

With Angular Material and ng2-charts, you can take advantage of schematics to cut down the effort and time you may spend building a dashboard. Schematics in Angular 9 are code generators that can create components and patterns in projects using predetermined templates and layouts. In this article, Zara Cooper explains how to take advantage of schematics in Angular Material and ng2-charts to substa

Cloudflare Workers® is one of the largest, most widely used edge computing platforms. We announced Cloudflare Workers nearly three years ago and it's been generally available for the last two years.

With only 100 days until Election Day, Area 1 Security’s new “Phishing Election Administrators” report assesses the depth of current email security controls used by 10,000 U.S. state and local election administrators.

I was inspired to write about my first year in Cloudflare, because John, our CTO, encouraged more women to write for our Cloudflare blog after reviewing our blogging statistics and found out that more men than women blog for Cloudflare.

Some CSS comics

Cloudflare values diversity in our workforce and we are genuinely interested in recruiting as well as retaining under-represented groups and creating a collective learning environment for everyone.

Why? Fingerprinting. Rather than these APIs being used for what they are meant for, they end up being used for gross ad tech. As in, "hey, we don't know

In this blog posting you find out: What is fillfactor and how does it affect PostgreSQL performance? | Effects & Testing

Submit your ideas for talks and workshops at Config Europe, a virtual conference.

GitHub Actions allows you to automate your workflow. Connect with the tools you know and love, and have more freedom to innovate and be creative. With GitHub Actions, you can…

On June 20, 2020, ShipIt!, our monthly event series, presented AR/VR at Shopify. Daniel Beauchamp, Head of AR/VR at Shopify talked about how we’re using this increasingly ubiquitous technology at Shopify.

This tutorial is for illustrators who also happen to be passionate car enthusiasts. If you follow along, you will learn how to draw from scratch in Sketch the legendary Porsche 911 — all in vectors.

Cloudflare’s dashboard now supports four new language: Spanish (with country-specific locales: Chile, Ecuador, Mexico, Peru, and Spain), Brazilian Portuguese, Korean, and Traditional Chinese.