Security alert: new phishing campaign targets GitHub users

On September 16, GitHub Security learned that threat actors were targeting GitHub users with a phishing campaign by impersonating CircleCI to harvest user credentials and two-factor codes. While GitHub itself was not affected, the campaign has impacted many victim organizations. … | Continue reading


@github.blog | 2 years ago

Applications for micro-mentoring at GitHub Universe 2022 are now live

We’re excited to announce an opportunity for students to connect with employees at GitHub ahead of GitHub Universe 2022! This year, the conference will take place virtually and in-person November 9-10 and to kick the week off, we’re thrilled on behalf of GitHub Social Impact, to … | Continue reading


@github.blog | 2 years ago

The ReadME Project: Built for you!

Sharing a project with the world takes guts. People generally open source their work because they’ve solved a real problem and want to share it with others. But open sourcing immediately commits the person and the project to rapid evolution through questions not anticipated, cont … | Continue reading


@github.blog | 2 years ago

Why we signed the Copenhagen Pledge on Tech for Democracy

As the home for developers, we understand the key role our communities play in steering digital transformation and maintaining societal infrastructure. That's why we choose to drive and support policies and initiatives like the Copenhagen Pledge on Tech for Democracy. We're commi … | Continue reading


@github.blog | 2 years ago

Transform your software engineering practices with GitHub Enterprise

Now more than ever, teams should be quickly evolving to keep up with the ever-changing landscape of software development. Think about it: how else can company leaders maintain a competitive edge within their industries? Take the banking industry, for example. In a matter of years … | Continue reading


@github.blog | 2 years ago

“If you don’t make it beautiful, it’s for sure doomed”: putting the Vault in Gi

GitHub this month installed a massive steel vault, etched with striking AI-generated art, deep within an Arctic mountain, finalizing its Arctic Code Vault. This vault contains the 188 reels of hardened archival film which will preserve the 02/02/202 snapshot of every active publi … | Continue reading


@github.blog | 2 years ago

The GitHub Campus Experts Selected for the Fall 2022 MLH Fellowship Cohort

Three new Campus Experts are joining the fall 2022 batch of the MLH Fellowship to work with open source maintainers and get real-world experience. | Continue reading


@github.blog | 2 years ago

Steps to convince your boss to send you to GitHub Universe

Here are some actionable tips on how to ask your manager to send you to GitHub Universe this year—with a free template included! | Continue reading


@github.blog | 2 years ago

5 tips for prioritizing Dependabot alerts

Dependabot alerts can give you a superpower–the ability to secure your project by keeping dependency-based vulnerabilities out of your code. However, while all potential vulnerabilities can be an issue and warrant attention, not all vulnerabilities pose equal risk to your project … | Continue reading


@github.blog | 2 years ago

How we tripled max concurrent jobs to boost performance of GitHub Actions

GitHub Actions became generally available on GitHub Enterprise Server (GHES) with the 3.0 release about two years ago. Since then, we’ve made many performance improvements to the product that reduced GitHub Actions CPU consumption on the server and allowed us to run more GitHub A … | Continue reading


@github.blog | 2 years ago

8 things you didn’t know you could do with GitHub Copilot

Similar to other AI pair programming tools, GitHub Copilot is changing the game of software development. GitHub Copilot is an AI pair programmer that helps you write code faster with less work. We use the terms “AI pair programmer” and “Copilot” to imply that this tool cannot wor … | Continue reading


@github.blog | 2 years ago

Scaling Git’s garbage collection

At GitHub, we store a lot of Git data: more than 18.6 petabytes of it, to be precise. That’s more than six times the size of the Library of Congress’s digital collections1. Most of that data comes from the contents of your repositories: your READMEs, source files, tests, licenses … | Continue reading


@github.blog | 2 years ago

Join GitHub at the Grace Hopper Celebration 2022

We’re thrilled to be back at the Grace Hopper Celebration at Open Source Day, the largest celebration of women in open source. Stop by and say, “Hi!” at one of our workshops. Gracehoppertocat How to Write an Accessible Pull Request Friday, September 16, 2022 at 9:30 am PT Web ac … | Continue reading


@github.blog | 2 years ago

Gear-up and unlock the newest GitHub Global Campus features

At GitHub Education our goal is to provide students with the tools and opportunities needed to be successful in the real world. And for teachers we’re committed to providing the tools and resources to automate your workflow as well as provide support to best cultivate the student … | Continue reading


@github.blog | 2 years ago

SCA vs SAST: what are they and which one is right for you?

Here at GitHub, we work hard to give you the right tools and knowledge so you can keep your projects secure. From providing best practices on keeping your projects safe to explaining today’s most common security vulnerabilities, it’s our job to help make the open source ecosystem … | Continue reading


@github.blog | 2 years ago

GitHub Copilot now available for teachers

GitHub is committed to responsible innovation, while also lowering the barriers to entry for anyone interested in learning how to code. Part of that commitment means making tools available free of charge to those educating the next generation of software developers. So far, we’ve … | Continue reading


@github.blog | 2 years ago

Research: open source software in India, Kenya, Egypt, and Mexico

The GitHub Social Impact, Tech for Social Good team is excited to announce the launch of our new report, Open Source Software in India, Kenya, Egypt, and Mexico! The report is available to download for freein English here on the dedicated report page. The Spanish and Arabic repor … | Continue reading


@github.blog | 2 years ago

GitHub Availability Report: August 2022

In August, we experienced one incident resulting in significant impact and degraded state of availability to Codespaces. This report also sheds light into an incident that impacted Codespaces in July. August 29 12:51 UTC (lasting 5 hours and 40 minutes) Our alerting systems detec … | Continue reading


@github.blog | 2 years ago

Research: quantifying GitHub Copilot’s impact on developer productivity and happiness

Everyday, we use tools and form habits to achieve more with less. Software development produces such a high number of tools and technologies to make work efficient, to the point of inducing decision fatigue. When we first launched a technical preview of GitHub Copilot in 2021, ou … | Continue reading


@github.blog | 2 years ago

Release Radar · August 2022 Edition

We’ve been gearing up to launch GitHub Universe 2022 and our community has been launching cool projects left right and center.  These projects include everything from world-changing technology to developer tooling, and weekend hobbies. Here are some of the open source projects th … | Continue reading


@github.blog | 2 years ago

Git’s database internals V: scalability

This week, we are exploring Git’s internals with the following concept in mind: Git is the distributed database at the core of your engineering system. When the database at the core of an application approaches scale limits of a single database node, a common strategy is to shard … | Continue reading


@github.blog | 2 years ago

GitHub Actions: introducing the new, larger GitHub-hosted runners beta

Today, we’re excited to announce the public beta of our larger GitHub-hosted runners for Linux and Windows. With our new, enhanced GitHub-hosted runners, you’ll get access to bigger runner sizes, fixed IP ranges, increased concurrency for your workflows, and more, so you build, t … | Continue reading


@github.blog | 2 years ago

Git’s database internals IV: distributed synchronization

This week, we are exploring Git’s internals with the following concept in mind: Git is the distributed database at the core of your engineering system. Git’s distributed nature comes from its decentralized architecture. Each repository can act independently on its own without nee … | Continue reading


@github.blog | 2 years ago

What you can expect at GitHub Universe 2022: cloud, security, community, and AI

The wait is over: tickets for GitHub Universe are now available. For the first time in two years, our 2022 event is hybrid. This means you can curate your own experience on November 9-10. Venture out to San Francisco’s Yerba Buena Center for the Arts or join us online in your swe … | Continue reading


@github.blog | 2 years ago

Git’s database internals III: file history queries

This week, we are exploring Git’s internals with the following concept in mind: Git is the distributed database at the core of your engineering system. Before making a change to a large software system, it can be critical to understand the reasons why the code is in its current f … | Continue reading


@github.blog | 2 years ago

Git’s database internals II: commit history queries

This week, we are exploring Git’s internals with the following concept in mind: Git is the distributed database at the core of your engineering system. Git’s role as a version control system has multiple purposes. One is to help your team make collaborative changes to a common re … | Continue reading


@github.blog | 2 years ago

Git’s database internals I: packed object store

Developers collaborate using Git. It is the medium that allows us to share code, work independently on our own machines, and then finally combine our efforts into a common understanding. For many, this is done by following some well-worn steps and sticking to that pattern. This w … | Continue reading


@github.blog | 2 years ago

3 ways every company can get started with an open-source software strategy

This post was originally published in VentureBeat and is republished here with permission. Technology drives human progress, and it’s unlikely there will ever be another significant breakthrough that isn’t supported by software. Everything from the automotive industry to healthca … | Continue reading


@github.blog | 2 years ago

Keeping your skillset fresh as a developer

If there’s one thing that everyone agrees on in the fast-changing world of software, it’s that developers and other tech professionals need to be constantly learning in order to keep their skills fresh and relevant. On the one hand, that’s easier than ever with the wealth of reso … | Continue reading


@github.blog | 2 years ago

GitHub Discussions is now available on GitHub Enterprise Server

Exactly a year ago today, GitHub Discussions officially became generally available, enabling a dedicated place for developer communities to ask questions, share ideas, and build connections with each other–all right next to their code. While we originally built GitHub Discussions … | Continue reading


@github.blog | 2 years ago

GitHub Enterprise Server 3.6 is now generally available

GitHub Enterprise Server 3.6 is now generally available. With a host of improvements for developers, security and administration teams, this update makes developing secure software easier for everyone. It brings more than 60 new features, including: GitHub Discussions Repository … | Continue reading


@github.blog | 2 years ago

2022 Transparency Report: January to June

At GitHub, we put developers first and work hard to provide a safe, open, and inclusive platform for code collaboration. Because the world is increasingly reliant upon the availability and limited disruption of code, we’ve developed policies to ensure that code remains available … | Continue reading


@github.blog | 2 years ago

The next step for LGTM.com: GitHub code scanning

Today, GitHub code scanning has all of LGTM.com’s key features—and more! The time has therefore come to announce the plan for the gradual deprecation of LGTM.com. | Continue reading


@github.blog | 2 years ago

GitHub Pages now uses Actions by default

As GitHub Pages, home to 16 million websites, approaches its 15th anniversary, we’re excited to announce that all sites now build and deploy with GitHub Actions. When GitHub Pages was first announced in 2008, we released Jekyll, a rich static site generator, to allow you to build … | Continue reading


@github.blog | 2 years ago

Dependabot now alerts for vulnerable GitHub Actions

A well-tuned and secure CI/CD workflow is a critical component for development teams looking to build more and ship fast. GitHub Actions gives teams access to powerful, native CI/CD capabilities right next to their code hosted in GitHub. Starting today, GitHub will send a Dependa … | Continue reading


@github.blog | 2 years ago

New request for comments on improving npm security with Sigstore is now open

As stewards of the npm registry, we take the security of npm seriously and have continued to introduce a number of changes to improve the security and trustworthiness of the registry. We’ve announced a number of changes over the last several months to improve the security of npm, … | Continue reading


@github.blog | 2 years ago

All GitHub Enterprise users now have access to the security overview

GitHub’s security features empower developers to find and remediate application security risks across both public and private repositories. Until today, visibility into your security risk across your repositories was only available for admins and security managers for organizatio … | Continue reading


@github.blog | 2 years ago

Commit comments no longer appear in the pull request timeline

Commit comments no longer appear in the pull request timeline | Continue reading


@github.blog | 2 years ago

GitHub Enterprise Cloud customers can access IP addresses for audit log entries

The ability for GitHub Enterprise Cloud owners to display members’ IP addresses for all audit logs events for private repositories and other enterprise assets, such as issues and projects, is generally available. These IP addresses can be used to improve threat analyses and furth … | Continue reading


@github.blog | 2 years ago

Release Radar · July 2022 Edition

July has been a busy month for our community as they work hard to ship open source releases. Check out these cool projects with major updates. | Continue reading


@github.blog | 2 years ago

The new NPM Dependency Selector Syntax

Introducing the new npm Dependency Selector Syntax | Continue reading


@github.blog | 2 years ago

5 simple things you can do with GitHub Packages to level up your workflows

Whether you’re contributing to an open source project, building a personal project, or spinning up the next feature at your 9-to-5 job, finding (or building) the right packages is a core part of any development workflow. Package managers and registries are nothing new. But using … | Continue reading


@github.blog | 2 years ago

GitHub Availability July 2022

In July, we experienced one incident that resulted in degraded performance for Codespaces. This report also acknowledges two incidents that impacted multiple GitHub.com services in June. | Continue reading


@github.blog | 2 years ago

Privacy statement updates: Adding web cookies to enterprise marketing subdomains

Privacy statement updates: Adding web cookies to enterprise marketing subdomains | Continue reading


@github.blog | 2 years ago

Simple things you can do with GitHub Packages to level up your workflows

Continue reading


@github.blog | 2 years ago

Streamline virtual hackathon events with the new Hackathon In The Cloud Experie

Attention all students! Make managing your virtual hackathon events even easier with the new Hackathon in the Cloud Experience. | Continue reading


@github.blog | 2 years ago

Prebuilding codespaces is now supported for multirepository and monorepo project

Prebuilding codespaces is now supported for multi-repository and monorepo projects | Continue reading


@github.blog | 2 years ago

Marketing for maintainers: Promote your project to users and contributors

Congratulations: You’ve pushed your code to GitHub. But if you want other people to benefit from your hard work—or contribute back to the project—you need to get the word out. Not only that, but you need to explain why other people should take the time to learn and potentially co … | Continue reading


@github.blog | 2 years ago