supply-chain-security

Learn how GitHub Artifact Attestations can enhance your build security and help your organization achieve SLSA Level 3. This post breaks down the basics of SLSA, explains the importance of artifact attestations, and provides a step-by-step guide to securing your build process. The post Enhance build security and reach SLSA Level 3 with GitHub Artifact Attestations appeared first on The GitHub Blog.

A quick guide on the advantages of Dependabot as a GitHub Actions workflow and the benefits this unlocks, including self-hosted runner support. The post Dependabot on GitHub Actions and self-hosted runners is now generally available appeared first on The GitHub Blog.

Generate and verify signed attestations for anything you make with GitHub Actions. The post Introducing Artifact Attestations–now in public beta appeared first on The GitHub Blog.

GitHub is working with the OSS community to bring new supply chain security capabilities to the platform. The post Where does your software (really) come from? appeared first on The GitHub Blog.

We’ve dramatically increased 2FA adoption on GitHub as part of our responsibility to make the software ecosystem more secure. Read on to learn how we secured millions of developers and why we’re urging more organizations to join us in these efforts. The post Securing millions of developers through 2FA appeared first on The GitHub Blog.

Repo-jacking is a specific type of supply chain attack. This blog post explains what it is, what the risk is, and what you can do to stay safe. The post How to stay safe from repo-jacking appeared first on The GitHub Blog.

Make quick work of alerts with preset and custom rules. The post Introducing auto-triage rules for Dependabot appeared first on The GitHub Blog.

Now, you can group multiple version updates in a single pull request. The post A faster way to manage version updates with Dependabot appeared first on The GitHub Blog.

Repository rules provide an easy, flexible way to define branch protections and ensure consistency in code across repositories.

Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities