In February, we experienced two incidents that resulted in degraded performance across GitHub services. February 26 18:34 UTC (lasting 53 minutes) February 29 09:32 UTC (lasting 142 minutes) On February 26 and February 29, we had two incidents related to a background job service … | Continue reading
As AI continues to shape the development landscape, developers are navigating a new frontier—not one that will make their careers obsolete, but one that will require their skills and instincts more than ever. Sure, AI is revolutionizing software development, but that revolution u … | Continue reading
At GitHub, we use merge queue to merge hundreds of pull requests every day. Developing this feature and rolling it out internally did not happen overnight, but the journey was worth it—both because of how it has transformed the way we deploy changes to production at scale, but al … | Continue reading
GitHub Enterprise Server 3.12 is now generally available. With this version, customers can choose how to best scale their security strategy, gain more control over deployments, and so much more. Highlights of this version include: Restrict your deployment rollouts to select tag p … | Continue reading
Companies and their structures are always evolving. Regardless of the reason, with people and information exchanging places, it’s easy for maintainership/ownership information about a repository to become outdated or unclear. Maintainers play a crucial role in guiding and steward … | Continue reading
Research shows that developers complete tasks 55% faster at higher quality when using GitHub Copilot, helping businesses accelerate the pace of software development and deliver more value to their customers. We understand that adopting new technologies in your business involves t … | Continue reading
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! Game news Madeline’s back in Celeste 64: Fragments of the Mountain 👩🏼🦰 … | Continue reading
When it comes to the GitHub All In for Students program, you need to embrace the idea of, “Coming in with an open mind,” says Kayla Partee, an All In ambassador. She joked that it seems like a bad pun when discussing the world of open source, but it’s also critical to success in … | Continue reading
Accidental leaks of API keys, tokens, and other secrets risk security breaches, reputation damage, and legal liability at a mind-boggling scale. In just the first eight weeks of 2024, GitHub has detected over 1 million leaked secrets on public repositories. That’s more than a doz … | Continue reading
How to write function in Python to reverse a string How to write SQL query to select users from a database by age How to implement binary search in Java How often do you have to break the flow, leave your IDE, and search for answers to questions (that are maybe similar to the one … | Continue reading
As a product manager working across multiple engineering teams, I spend a lot of time planning out and tracking the work involved for our upcoming releases to GitHub Projects. Each release comes with a set of cross-functional tasks that need to be completed, such as providing pub … | Continue reading
Since the early days of GitHub Copilot, our customers have asked us for a copilot that is customized to their own organization’s code and processes. Developers spend more time deciphering rather than shipping when they can’t pinpoint and solve the issues, bugs, or vulnerabilities … | Continue reading
The open source Git project just released Git 2.44 with features and bug fixes from over 85 contributors, 34 of them new. We last caught up with you on the latest in Git back when 2.43 was released. To celebrate this most recent release, here is GitHub’s look at some of the most … | Continue reading
Generative AI coding tools are changing software production for enterprises. Not just for their code generation abilities—from vulnerability detection and facilitating comprehension of unfamiliar codebases, to streamlining documentation and pull request descriptions, they’re fund … | Continue reading
This is abridged content from September 2023’s Insider newsletter. Like what you see? Sign up for the newsletter to receive complete, unabridged content in your inbox twice a month Sign up now > Whether you’re a software architect, QA engineer, technical lead, or any other type … | Continue reading
“Repo-jacking” is a type of supply chain attack that has received attention for its potential impact on open source software. In this blog post, I’ll explain what repo-jacking is and what you can do to stay safe. The TL;DR summary is that if you’re getting all of your software de … | Continue reading
At GitHub, we believe that accessibility is a team sport. We know that achieving the dream of equal access to technology for 1.3 billion people with disabilities requires contribution from every organization including institutions of education, the private sector, the public sect … | Continue reading
In March 2023, we launched the Secure Code Game, an in-repo learning experience where players fix intentionally vulnerable code, so developers can build a secure coding mindset while having fun! Since then, more than 3,500 developers have played, and we love seeing how it has hel … | Continue reading
In January, we experienced three incidents that resulted in degraded performance across GitHub services. January 09 12:20 UTC (lasting 140 minutes) On January 9 between 12:20 and 14:40 UTC, services in one of our three sites experienced elevated latency for connections. This led … | Continue reading
In November 2023, we announced the launch of code scanning autofix, leveraging AI to suggest fixes for security vulnerabilities in users’ codebases. This post describes how autofix works under the hood, as well as the evaluation framework we use for testing and iteration. What is … | Continue reading
The npm engineering team recently transitioned to using GitHub Codespaces for local development for npm registry services. This shift to Codespaces has substantially reduced the friction of our inner development loop and boosted developer productivity. In this post, we would like … | Continue reading
Applications for the next cohort of GitHub Accelerator are now open! Applications will be reviewed on a rolling basis until they close on March 5 at 12 pm PT. We created GitHub Accelerator to help build more careers and companies in open source. The program is designed to provide … | Continue reading
We recently released the latest iteration (v4) of the actions to upload and download artifacts in GitHub Actions. Artifacts are a powerful tool to augment your GitHub Actions workflows, allowing data to be persisted between jobs, and even after a workflow run has completed. For e … | Continue reading
In today’s age of shifting left—an approach to coding that integrates security checks earlier into the software development lifecycle (SDLC)—developers are expected to be proficient at using security tools. This additional responsibility can be overwhelming for developers who don … | Continue reading
We’re excited to announce the general availability of a powerful new AI tool designed to help you find answers to your GitHub-specific questions in a fast, self-directed way. Copilot in GitHub Support is trained on the official GitHub documentation and offers a responsive convers … | Continue reading
How do we ensure over 100 million users across the world have uninterrupted access to GitHub’s products and services on a platform that is always available, secure and accessible? From our beginnings as a platform for open source to now also supporting 90% of the Fortune 100, tha … | Continue reading
Find vulnerabilities earlier, ship software faster. These are the good intentions behind the drive to shift application security workflows from security teams to developers: a “shift left” move in the software development lifecycle. But does it really work? In practice, shifting … | Continue reading
The new year has kicked off, and developers are hard at work. We hope all our open source community members had a lovely holiday break and, we’re looking forward to seeing what you ship this year. 2024 is already off to a great start with open source projects releasing major upda … | Continue reading
Do you know if all your repositories have up-to-date dependencies? Keeping your repositories’ dependencies up to date is crucial for maintaining quality and security. Outdated dependencies can expose your project to vulnerabilities, compromise its stability, and hinder its overal … | Continue reading
Fund news In our inaugural year, the GitHub Fund, in partnership with M12, reviewed +350 open source startups across various developer tools domains, devtools, AI and AI infrastructure, security, cloud-native infrastructure, and more. As we look ahead, we continue to have convict … | Continue reading
Building confidence in new code before deploying is a crucial part of any good development loop. This is especially challenging when working in a distributed or microservice system with multiple teams operating on different services. This modular team structure gives rise to an i … | Continue reading
GitHub believes in breaking down barriers for anyone looking to implement open source software. From large multinational corporations to regional nonprofit organizations, open source software can be adopted, configured, and customized according to the needs of any company or orga … | Continue reading
The wait is over: we finally have data to back up the benefits of developer experience (DevEx). We’ve always known that providing a good DevEx is a smart business move, as it enables developers to solve complex tasks, collaborate with peers, and unleash their creativity. We hear … | Continue reading
It’s the dream: your ideas are flowing, time and space fade away, the path ahead of you is clear, you’re moving at the speed of thought, and every click you make is gold. This is called being in the flow or flow state. When you’re in the flow, you block out the world, are fully i … | Continue reading
Writing code is more than just writing code. There’s commit messages to write, CLI commands to execute, and obscure syntax to try to remember. While you’ve probably used GitHub Copilot to support your coding, did you know it can also support your other workloads? GitHub Copilot i … | Continue reading
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open source games, mods, maps, and more. Game on! Game News VVVVVV 2.4 released https://github.blog/wp-content/uploads/2024/01/vvvvvv.mp4 … | Continue reading
This is abridged content from August’s Insider newsletter. Like what you see? Sign up for the newsletter to receive complete, unabridged content in your inbox twice a month Sign up now > In this newsletter, we’ll explore a few insider tips and tricks you can use to make the mos … | Continue reading
The GitHub Innovation Graph is a jumping off point for research, analysis, and insights into how the world is building software together. Along with releasing quarterly data on eight metrics–Git pushes, repositories, developers, organizations, programming languages, licenses, top … | Continue reading
In December, we experienced three incidents that resulted in degraded performance across GitHub services. All three are related to a broad secret rotation initiative in late December. While we have investigated and identified improvements from each of these individual incidents, … | Continue reading
GitHub is thrilled to announce the completion of an upgrade to our GitHub Actions-hosted runners by offering larger more powerful machines to open source developers. From now on, any Linux or Windows workflow triggered from a public repository, using GitHub’s default labels, will … | Continue reading
As adoption of AI tools expands and the technology evolves, so do developers’ expectations and perspectives. Last year, our research showed that letting GitHub Copilot shoulder boring and repetitive work reduced cognitive load, freed up time, and brought delight to developers. A … | Continue reading
On December 26, 2023, GitHub received a report through our Bug Bounty Program demonstrating a vulnerability which, if exploited, allowed access to credentials within a production container. We fixed this vulnerability on GitHub.com the same day and began rotating all potentially … | Continue reading
The number of developers in Uruguay, as well as the number of repositories owned by Uruguayan developers and organizations, have been increasing every year on GitHub. In fact, in 2023, Uruguay welcomed its first AI lab to bring AI tools to companies and startups, and boost innova … | Continue reading
In this year’s GitHub Game Off, the theme was “Scale,” and oh, did the developers rise to the occasion. An impressive array of games (632 to be exact) were created in just one month and the creators spent thousands of hours over the last few weeks playing, rating, and reviewing e … | Continue reading
Certifications are the golden keys to unlocking a world of opportunities that can supercharge your career, boost productivity, and amplify your salary. For employers, certifications are the secret sauce that fuels increased productivity, provides indisputable proof of your skills … | Continue reading
As an Ekoparty 2023 sponsor, GitHub once again had the privilege of submitting several challenges to the event’s Capture The Flag (CTF) competition. Employees from across GitHub’s Security organization came together to brainstorm, plan, build, and test these challenges to create … | Continue reading
You heard the vendor pitches. You evaluated the options. You got the budget approved. Now, you need your company’s developers to actually use the tool. Socializing a new security tool can feel intimidating or overwhelming. It may feel like you are battling competing priorities an … | Continue reading
There are many benefits to implementing DevSecOps: minimized risk, reduced remediation costs, and faster and more secure product releases. But from a developer’s perspective, there’s a lot to be desired from the day-to-day practice. Developers often experience fragmented tool int … | Continue reading