GitHub-Actions

Learn about a community-developed framework for how to think about this problem holistically and how to use GitHub, particularly, to improve the security in the second half of your software supply chain. The post The second half of software supply chain security on GitHub appeared first on The GitHub Blog.

Learn how GitHub used macOS and Apple Silicon runners for GitHub Actions to build, test, and deploy our iOS app faster. The post How GitHub reduced testing time for iOS apps with new runner features appeared first on The GitHub Blog.

GitHub Actions now offers Arm-hosted runners with images built by Arm for developers to begin building on the latest and most sustainable processors on the market. The post Arm64 on GitHub Actions: Powering faster, more efficient build systems appeared first on The GitHub Blog.

A quick guide on the advantages of Dependabot as a GitHub Actions workflow and the benefits this unlocks, including self-hosted runner support. The post Dependabot on GitHub Actions and self-hosted runners is now generally available appeared first on The GitHub Blog.

Generate and verify signed attestations for anything you make with GitHub Actions. The post Introducing Artifact Attestations–now in public beta appeared first on The GitHub Blog.

GitHub is working with the OSS community to bring new supply chain security capabilities to the platform. The post Where does your software (really) come from? appeared first on The GitHub Blog.

Learn how GitHub's Enterprise Cloud, GitHub Actions, and Arm's latest Automotive Enhanced processors, work together to usher in a new era of efficient, scalable, and flexible automotive software creation. The post GitHub Actions, Arm64, and the future of automotive software development appeared first on The GitHub Blog.

GitHub-hosted runners now support Azure private networking. Plus, we've added 2 vCPU Linux, 4 vCPU Windows, macOS L, macOS XL, and GPU hosted runners to our runner fleet. The post Bringing enterprise-level security and even more power to GitHub-hosted runners appeared first on The GitHub Blog.

We listened to your feedback and released new versions (v4) of actions/upload-artifact and actions/download-artifact. While this version of the actions to upload and download artifacts includes up to 10x performance improvements and several new features, there are also key differences from previous versions that may require updates to your workflows. The post Get started with v4 of GitHub Actions Artifacts appeared first on The GitHub Blog.

GitHub Actions continues its industry-leading support for the OSS community by doubling the Windows/Linux machine size to 4-vCPU runners at no cost for public repositories. The post GitHub-hosted runners: Double the power for open source appeared first on The GitHub Blog.

The GitHub Security Lab teamed up with Ekoparty once again to create some challenges for its yearly Capture the Flag competition! The post GitHub and the Ekoparty 2023 Capture the Flag appeared first on The GitHub Blog.

Read a roundup of the exciting, new innovation coming from GitHub Actions. The post From macOS runners to secure deployments, what’s new from GitHub Actions appeared first on The GitHub Blog.

Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents. The post Security best practices for authors of GitHub Actions appeared first on The GitHub Blog.

We're excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Action to empower maintainers to measure how many new and returning contributors and contributions have occurred over any given time period. The post How to gain insight into your project contributors appeared first on The GitHub Blog.

GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories. The post Enforcing code reliability by requiring workflows with GitHub Repository Rules appeared first on The GitHub Blog.

Recently, we’ve been working to make our CI experience better by leveraging the newly released GitHub feature, Actions larger runners, to run our CI. The post How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com appeared first on The GitHub Blog.

Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub. Follow these four tips to keep your GitHub Actions workflows secure. The post Four tips to keep your GitHub Actions workflows secure appeared first on The GitHub Blog.

With the new Issue Metrics GitHub Action, you can now track and monitor important metrics related to issues, pull requests, and discussions, such as time to first response, time to close, and more!

Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command.

Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.