GitHub Sponsors expands globally with 30 newly supported regions, bringing the total to 68. | Continue reading
GitHub Pages: Custom GitHub Actions Workflows (beta) | Continue reading
GitHub Issues - Projects now generally available | Continue reading
It’s been a crazy couple of months with the end of financial year and lots of products shipping. Our community has been hard at work shipping projects too. These projects can include everything from world-changing technology to developer tooling, and weekend hobbies. Here are som … | Continue reading
In this post I’ll exploit CVE-2022-20186, a vulnerability in the Arm Mali GPU kernel driver and use it to gain arbitrary kernel memory access from an untrusted app on a Pixel 6. This then allows me to gain root and disable SELinux. This vulnerability highlights the strong primiti … | Continue reading
At GitHub, we strive to help developers do the best work of their lives. From helping easily secure projects with Dependabot to enabling faster coding with GitHub Copilot, our mission is to facilitate an unsurpassed developer experience. I love working for a company where every s … | Continue reading
Today, we’re launching GitHub Community, which brings together GitHub Community Forum, GitHub Education Forum, and product feedback into a free, in-product, single space for all user-to-user and Hubber interactions related to GitHub using org-level GitHub Discussions. https://git … | Continue reading
The JavaScript community downloads over 5 billion packages from npm a day, and we at GitHub recognize how important it is that developers can do so with confidence. As stewards of the npm registry, it’s important that we continue to invest in improvements that increase developer … | Continue reading
To-do lists are everywhere—on our phones, on paper, and in our heads, especially for a lot of the personal and professional things we need to get done (reviewing a pull request, going to the grocery store, planning an international trip, etc.). GitHub Issues is a core component o … | Continue reading
Whether you’re thinking up a new open source project or building your product roadmap at work, there’s usually some period of time where you’re doing research. It may start with identifying a problem and then lead into a period of research into what solutions (if any) already exi … | Continue reading
From incorporating accessibility testing to implementing blue-green deployment models, here are six practical and strategic ways to improve your CI/CD pipeline. | Continue reading
In the June edition of Open Source Monthly, I highlighted Modos, a project, community, and company focused on software and hardware that designs digital devices with respect for users’ time, attention, and well-being. I also shared Cassidy Williams’ choice of the month: Theater.j … | Continue reading
We surveyed more than 2,000 developers about whether GitHub Copilot helped them be more productive and improved their coding. Then, we matched this qualitative feedback and subjective perception with quantitative data around objective usage measurements and productivity. | Continue reading
Online communities can be daunting. They are filled with people from all walks of life, from all over the world. Open source communities are some of the biggest in the world. One of the challenges of open source communities is communicating effectively, and managing expectations … | Continue reading
In June, we experienced four incidents resulting in significant impact and degraded state of availability to multiple GitHub.com services. This report also sheds light into an incident that impacted multiple GitHub.com services in May. June 1 09:40 UTC (lasting 48 minutes) During … | Continue reading
Dependabot alerts paused for malware advisories | Continue reading
New Actions from Anchore, NowSecure, SBT, and Trivy are now available to create a more comprehensive GitHub Dependency Graph. | Continue reading
Can projects and GitHub Actions be used by your non-developer teams? They absolutely can. Check out how our Security Team uses GitHub to run the department effortlessly. | Continue reading
High-quality Git commits are the key to a maintainable and collaborative open- or closed-source project. Learn strategies to improve and use commits to streamline your development process. | Continue reading
Many an open source project is created to scratch an individual developer’s itch. But when other people contribute to—and depend on—a project, it stops being just about the original creator or creators’ own needs. As some projects grow, so does interest and volume of opinions. Th … | Continue reading
“Learn by doing, not by watching,” a mantra that Major League Hacking promotes to evangelize the MLH Fellowship. We at GitHub couldn’t agree more. The MLH Fellowship, powered by GitHub, is a 12-week internship alternative for aspiring software engineers. MLH Fellows on the open s … | Continue reading
In this post I'll exploit CVE-2022-1134, a type confusion in Chrome that I reported in March 2022, which allows remote code execution (RCE) in the renderer sandbox of Chrome by a single visit to a malicious site. I'll also look at some past vulnerabilities of this type and some i … | Continue reading
If you have a monorepo, you’ve probably already felt the pain of slow Git commands, such as git status and git add. These commands are slow because they need to search the entire worktree looking for changes. When the worktree is very large, Git needs to do a lot of work. The Git … | Continue reading
Hello again from Git Systems, the team at GitHub that makes sure your source code is available and secure. You may remember that we’ve recently made some changes to improve protocol security on GitHub.com. Now, we’re bringing these changes to GitHub Enterprise Server as well, sta … | Continue reading
GitHub is on a mission to create a more secure supply chain for all developers and organizations. To do that, we need to empower all developer communities with comprehensive vulnerability information and seamless remediation guidance. That’s why we’re excited to announce that the … | Continue reading
The open source Git project just released Git 2.37. Take a look at some of our highlights from the latest release. | Continue reading
As Maintainer Month draws to a close, we want to celebrate and give additional support to the open source projects that we depend on. We rely on the work of hundreds of open source projects to build and run GitHub, npm, GitHub Desktop, GitHub Mobile, GitHub CLI, and all the softw … | Continue reading
We’re releasing exciting functionalities that will enable organizations to confidently manage and scale with Codespaces. | Continue reading
We’re making GitHub Copilot, an AI pair programmer that suggests code in your editor, generally available to all developers for $10 USD/month or $100 USD/year. It will also be free to use for verified students and maintainers of popular open source projects. | Continue reading
The latest innovations in the automotive sector have triggered a massive digital transformation in how vehicles are built. A modern automotive vehicle is composed of interconnected systems with millions of lines of code leveraged by drivers in their day-to-day lives around the gl … | Continue reading
Understanding your dependencies is fundamental to good security practices. GitHub’s dependency graph detects your project’s dependencies and allows us to send Dependabot alerts when vulnerabilities are found in them. Until now, GitHub built the dependency graph entirely from stat … | Continue reading
The Release Radar features open source projects each month shipping major version releases. Read this month's top projects and browse the repos. | Continue reading
In this post, I’ll exploit a use-after-free (UAF) bug, CVE-2022-22057 in the Qualcomm GPU driver, which affected the kernel branch 5.4 or above, and is mostly used by flagship models running the Snapdragon 888 chipset or above (for example, the Snapdragon version of S21—used in t … | Continue reading
Git Merge, the conference dedicated to bringing the Git community together returns on September 14-15 in Chicago, Illinois. | Continue reading
Prebuilding codespaces is generally available | Continue reading
Prebuilding codespaces is generally available We’re excited to announce that the ability to prebuild codespaces is now generally available. As a quick recap, a prebuilt codespace serves as a “ready-to-go” template where your source code, editor extensions, project dependencies, c … | Continue reading
Mistakes are the most common cause of vulnerabilities in open source software, but they are not the only cause. Bad actors also attempt to introduce malicious software, known as malware, into open source. Details about malware can be hard to keep track of because malware is typic … | Continue reading
Updates to GitHub Feed (Public Beta) | Continue reading
Learn why the GitHub Design Infrastructure team built a dedicated color tool and how they use it to create new color palettes for GitHub. | Continue reading
The world runs on open source, which serves as the foundation for globally interconnected digital infrastructure. With an estimated 97% of codebases containing open source, both the private and public sectors depend on the maintenance of open source software (OSS), but government … | Continue reading
This open source maintainer is developing a new category of devices that use a paper display as the primary medium. | Continue reading
How can you robustly assert and identify a user’s identity? | Continue reading
Discover how GitHub thinks about browser support, look at usage patterns, and learn about the tools we use to make sure our customers are getting the best experience. | Continue reading
Dependabot updates are now generally available in GitHub Enterprise Server 3.5 ! Dependabot alerts have been available on GitHub Enterprise Server (GHES) for years, but support for Dependabot updates––the ability to update dependencies automatically by opening pull requests––have … | Continue reading
redirect.pizza is now a GitHub secret scanning partner | Continue reading
We strongly believe in using GitHub to build GitHub, keeping the developer experience streamlined and integrating directly into their workflows. We track our work in Issues, plan work in projects, and automate reminders through GitHub Actions and ChatOps. So, it’s natural that we … | Continue reading
Nearly 5,000 public contributions were made every minute last year on GitHub. Merging pull requests, answering discussions, opening issues–it’s quite a feat to build and maintain all of the projects and communities that live on GitHub. As part of GitHub’s mission, we want to cele … | Continue reading