Community
GitHub
Tue Nov 21 2023
For Good First Issue: Introducing a new way to contribute
For Good First Issue is a curated list of open source projects that are also digital public goods and need the help of developers.
Open-Source
Mon Nov 20 2023
Highlights from Git 2.43
The last Git release of 2023 is here! Take a look at some of our highlights on what's new in Git 2.
Security
Thu Nov 16 2023
Security best practices for authors of GitHub Actions
Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report ...
Company
Wed Nov 15 2023
Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform
Discover new AI-powered features and tools to help developers stay in the flow and organizations innovate at scale.
Engineering
Mon Nov 13 2023
GitHub Availability Report: October 2023
In October, we experienced two incidents that resulted in degraded performance across GitHub services.
Fri Nov 10 2023
Celebrating the GitHub Awards 2023 recipients 🎉
The GitHub Awards recognizes and celebrates the outstanding contributions and achievements in the developer community, honoring individuals,...
Wed Nov 08 2023
Universe 2023: Copilot transforms GitHub into the AI-powered developer platform
GitHub is announcing general availability of GitHub Copilot Chat and previews of the new GitHub Copilot Enterprise offering, new AI-powered ...
Octoverse: The state of open source and rise of AI in 2023
In this year’s Octoverse report, we study how open source activity around AI, the cloud, and Git are changing the developer experience.
Introducing AI-powered application security testing with GitHub Advanced Security
Learn about how GitHub Advanced Security’s new AI-powered features can help you secure your code more efficiently than ever.
Thu Nov 02 2023
Leveraging AI to empower all developers at GitHub Universe 2023
GitHub Universe 2023 is just around the corner! Join us and learn how GitHub is leveraging AI to empower all developers, including developer...
Celebrating the first round of GitHub Accelerator and what’s next
Celebrate the maintainers of the first GitHub Accelerator cohort, learn what they have been up to since, and hear what’s next for GitHub Acc...
Wed Nov 01 2023
GitHub Game Off 2023 theme announcement
It’s the moment you’ve all been waiting for.
Diversity, inclusion, and belonging at GitHub in 2023
We expanded diversity of our employee base, launched several new employee engagement programs, made investments to improve accessibility, an...
Policy
Tue Oct 31 2023
Introducing the GitHub transparency center
It’s time for our biannual transparency report, where we share how we approach content moderation and disclosure of user information.
Release Radar · Hacktoberfest 2023 Edition
As Hacktoberfest comes to a close, you still have a day or so left to complete and submit your pull requests.
Mon Oct 30 2023
The architecture of today’s LLM applications
Here’s everything you need to know to build your first LLM app and problem spaces you can start exploring today.
Hackable Halloween games MMXXIII
13 spooktacular games plus source code for readers to jam on.
Fri Oct 27 2023
Demystifying LLMs: How they can do things they weren’t trained to do
Explore how LLMs generate text, why they sometimes hallucinate information, and the ethical implications surrounding their incredible capabi...
Developers are the first group to adopt AI at work. Here’s why that matters.
From starting at GitHub over 10 years ago as a developer to becoming the Chief Operating Officer, I’ve learned that developers are often bel...
Thu Oct 26 2023
5 tips for making your GitHub profile page accessible
Your profile’s README invites the world to know you and your work, so it’s important that everyone can read and understand it.
Wed Oct 25 2023
Cybersecurity spotlight on bug bounty researcher @Ammar Askar
We’re excited to highlight another top contributing researcher to GitHub’s Bug Bounty Program—@Ammar Askar! The post Cybersecurity spotlight...
Mon Oct 23 2023
How to gain insight into your project contributors
We're excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Act...
Thu Oct 19 2023
ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok
The effectiveness of a static application security solution hinges on its ability to provide extensive vulnerability coverage and support fo...
Tue Oct 17 2023
Your curated GitHub Universe agenda: AI, ethics, and productivity
Gain actionable insights about the intersection of AI and human skills, while tackling ethics, accessibility, and productivity at these GitH...
Enterprise
The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024
Atlassian is ending support for its Server products—including Bitbucket Server—in February 2024.
Getting RCE in Chrome with incomplete object initialization in the Maglev compiler
In this post, I'll exploit CVE-2023-4069, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...
Mon Oct 16 2023
Measuring Git performance with OpenTelemetry
Use our new open source Trace2 receiver component and OpenTelemetry to capture and visualize telemetry from your Git commands.
Fri Oct 13 2023
js13kGames 2023 winners 🏆
The twelfth annual js13kGames coding competition, challenging participants to create games in 13kB or less of JavaScript in a month, just wr...
Thu Oct 12 2023
Ensuring the next generation of open source leaders are truly “all in”
If you are a student from a U.
Wed Oct 11 2023
GitHub Availability Report: September 2023
In September, we experienced two incidents that resulted in degraded performance across GitHub services.
Enforcing code reliability by requiring workflows with GitHub Repository Rules
GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories.
Product
Tue Oct 10 2023
Research: Quantifying GitHub Copilot’s impact on code quality
Findings show that code quality is better across the board and developers felt more confident, too.
Mon Oct 09 2023
Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)
CVE-2023-43641 is a vulnerability in libcue, which can lead to code execution by downloading a file on GNOME.
Prompting GitHub Copilot Chat to become your personal AI assistant for accessibility
GitHub Copilot Chat can help you learn about accessibility and improve the accessibility of your code.
Skilling African developers through All In Africa
All In Africa is a gateway to growth, learning, and meaningful connections within the African open source ecosystem and beyond.
Thu Oct 05 2023
A developer’s guide to open source LLMs and generative AI
Open source generative AI projects are a great way to build new AI-powered features and apps.
Wed Oct 04 2023
How to communicate like a GitHub engineer: our principles, practices, and tools
Learn more about how we use GitHub to build GitHub, how we turned our guiding communications principles into prescriptive practices to manag...
Fri Sep 29 2023
Game Bytes · September 2023
Game Bytes is our monthly series taking a peek at the world of gamedev on GitHub—featuring game engine updates, game jam details, open sourc...
Thu Sep 28 2023
GitHub Learning Pathways: Learn from the best
Gain expertise and insights from top organizations through guided tutorials, boosting productivity, enhancing security, and enabling seamles...
Wed Sep 27 2023
How I used GitHub Copilot Chat to build a ReactJS gallery prototype
GitHub Copilot Chat can help developers create prototypes, understand code, make UI changes, troubleshoot errors, make code more accessible,...
Tue Sep 26 2023
How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com
Recently, we’ve been working to make our CI experience better by leveraging the newly released GitHub feature, Actions larger runners, to ru...
Your ultimate guide to the GitHub Universe ‘23 agenda
Get a sneak peek into the must-attend sessions, speakers, workshops, and GitHub certifications available at our global developer event.
Getting RCE in Chrome with incorrect side effect in the JIT compiler
In this post, I'll exploit CVE-2023-3420, a type confusion in Chrome that allows remote code execution (RCE) in the renderer sandbox of Chro...
Education
Mon Sep 25 2023
Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI
In this step-by-step tutorial, we’ll dive into how you can become the next open source contributor to the GitHub Classroom CLI, building com...
Thu Sep 21 2023
The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects
The GitHub Security Lab audits open source projects for security vulnerabilities and helps maintainers fix them.
Passkeys are generally available
All GitHub.
Announcing the GitHub Innovation Graph
Explore a universe of data about how the world is building software together on GitHub.
Wed Sep 20 2023
GitHub Copilot Chat beta now available for all individuals
All GitHub Copilot for Individuals users now have access to GitHub Copilot Chat beta, bringing natural language-powered coding to every deve...
Introducing Learning Paths on Global Campus
Guiding student developers through skill building foundations, a building block in their learning journey with GitHub Education.
Announcing general availability of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now generally available.
Mon Sep 18 2023
Switching from Bitbucket Server and Bamboo to GitHub just got easier
Starting today, GitHub Enterprise Importer supports repository migrations from Bitbucket Server and Bitbucket Data Center, and GitHub Action...
Thu Sep 14 2023
Introducing auto-triage rules for Dependabot
Make quick work of alerts with preset and custom rules.
Wed Sep 13 2023
GitHub Availability Report: August 2023
In August, we experienced two incidents that resulted in degraded performance across GitHub services.
Apply now for GitHub Universe 2023 micro-mentoring
As part of our ongoing commitment to accelerate human progress through Social Impact initiatives, we’re offering students 30-minute, 1:1 mic...
Tue Sep 12 2023
CodeQL team uses AI to power vulnerability detection in code
Learn how GitHub’s CodeQL leveraged AI modeling and multi-repository variant analysis to discover a new CVE in Gradle.
Wed Sep 06 2023
How to build an enterprise LLM application: Lessons from GitHub Copilot
The team behind GitHub Copilot shares its lessons for building an LLM app that delivers value to both individuals and enterprise users at sc...
Fri Sep 01 2023
Getting started with edge computing
Edge computing practitioners answer your questions about when and why to build applications at the edge.
Thu Aug 31 2023
How GitHub reduces costs with upgraded Codespaces
See how much more you can get out of GitHub Codespaces by taking advantage of the improved processing power and increased headroom the RAM p...
Wed Aug 30 2023
Why Rust is the most admired language among developers
Rust continues to top the charts as the most admired and desired language by developers, and in this post, we dive a little deeper into how ...
Tue Aug 29 2023
GitHub Enterprise Server 3.10 is now generally available
Customers using GHES can now ensure secure development is a top priority with enhanced security and compliance controls for their repositori...
Mon Aug 28 2023
10 things you didn’t know you could do with GitHub Projects
Learn how to optimize your usage of GitHub Projects to plan and track your work from idea to production.
Fri Aug 25 2023
Game Bytes · August 2023
Thu Aug 24 2023
A faster way to manage version updates with Dependabot
Now, you can group multiple version updates in a single pull request.
Unleashing GitHub Codespaces templates to ignite your development
Learn how to leverage templating features in GitHub Codespaces to streamline your project setup, improve consistency, and simplify collabora...
Wed Aug 23 2023
AI-powered impact: GitHub Social Impact’s year ahead
How GitHub Social Impact is working with nonprofit organizations, employees, and more to create positive, lasting change in global communiti...
Mon Aug 21 2023
Highlights from Git 2.42
Another new release of Git is here! Take a look at some of our highlights on what's new in Git 2.
Thu Aug 17 2023
mTLS: When certificate authentication is done wrong
In this post, we'll deep dive into some interesting attacks on mTLS authentication.
Tue Aug 15 2023
Build for today, transform for tomorrow at GitHub Universe 2023
Get tickets to our global developer and customer event for 30% off during our Super-Early Bird special, only for a limited time.
Release Radar · July 2023 Edition
After the last Release Radar, I promised the next one wouldn’t be far away, so here it is.
Hardening repositories against credential theft
Some best practices and important defenses to prevent common attacks against GitHub Actions that are enabled by stolen personal access token...
Mon Aug 14 2023
Nine years of the GitHub Security Bug Bounty program
It was another record year for our Security Bug Bounty program! We're excited to highlight some achievements we’ve made together with the bo...
Wed Aug 09 2023
Enhanced push protection features for developers and organizations
Introducing two new secret scanning push protection features that will enable individual developers to protect all their pushes and organiza...
GitHub Availability Report: July 2023
In July, we experienced one incident that resulted in degraded performance across GitHub services.
Four tips to keep your GitHub Actions workflows secure
Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub.
Tue Aug 08 2023
A guide to designing and shipping AI developer tools
GitHub’s design experts share 10 tips and lessons for designing magical user experiences for AI applications and AI coding tools.
Fri Aug 04 2023
A checklist and guide to get your repository collaboration-ready
In the world of software development, collaboration can make the difference between a brittle last-minute release and a reliable, maintainab...
Thu Aug 03 2023
Introducing code referencing for GitHub Copilot
Today, we’re announcing a private beta of GitHub Copilot with code referencing that includes a filter to detect code suggestions matching pu...
Wed Aug 02 2023
Best practices for organizations and teams using GitHub Enterprise Cloud
Learn how you can structure your enterprise to get the most value out of GitHub and provide the best experience for your developers! The pos...
How we build containerized services at GitHub using GitHub
Learn about how we build containerized services that power microservices on the GitHub.
Fri Jul 28 2023
Smarter, more efficient coding: GitHub Copilot goes beyond Codex with improved AI model
We're thrilled to announce two major updates to GitHub Copilot code Completion's capabilities that will help developers work even more effic...
Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform
This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation.
Thu Jul 27 2023
Scaling merge-ort across GitHub
GitHub switched to performing merges and rebases using merge-ort.
Wed Jul 26 2023
How to get AI regulation right for open source
Sharing our coalition paper to inform the final negotiation of the EU AI Act.
Tue Jul 25 2023
Game Bytes · July 2023
How to build a GPT-3 App with Nextjs, React, and GitHub Copilot
In this step-by-step tutorial, you will learn how to use GitHub Copilot to build an application with OpenAI’s gpt-3.
How to responsibly adopt GitHub Copilot with the GitHub Copilot Trust Center
We’re launching the GitHub Copilot Trust Center to provide transparency about how GitHub Copilot works and help organizations innovate respo...
Mon Jul 24 2023
GitHub Repository Rules are now generally available
Repository rules provide an easy, flexible way to define branch protections and ensure consistency in code across repositories.
Thu Jul 20 2023
GitHub Copilot Chat beta now available for every organization
All GitHub Copilot for Business users now have access to a limited GitHub Copilot Chat beta, bringing the power of conversational coding rig...
Wed Jul 19 2023
Exploring developer happiness, inclusion, and productivity at GitHub’s Design Conference
As a design organization, we have the opportunity to make a significant impact on designing the platform for all developers.
Metrics for issues, pull requests, and discussions
Tue Jul 18 2023
Security alert: social engineering campaign targets technology industry employees
GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms.
Mon Jul 17 2023
A developer’s guide to prompt engineering and LLMs
Prompt engineering is the art of communicating with a generative AI model.
Fri Jul 14 2023
Release Radar · Spring 2023 Edition
It’s been a while since we’ve published our Release Radar.
Thu Jul 13 2023
(De)coding conventions
Navigating the ebb and flow of programming paradigms–from the shifts in the JavaScript ecosystem and TypeScript's rise, to AI's role in adva...
Moving from a product to a service mindset
Thanks to DevOps, cloud computing and other industry trends, many organizations are shifting from a product mindset to a service mindset.
Wed Jul 12 2023
GitHub Availability Report: June 2023
In June, we experienced two incidents that resulted in degraded performance across GitHub services.
No cyber resilience without open source sustainability
Have your say to protect open source in the EU.
GitHub merge queue is generally available
Supercharge pull request merges on your busiest branches by enabling your team to queue.
Introducing passwordless authentication on GitHub.com
Passkeys are now available in public beta.
Tue Jul 11 2023
GitHub CLI project command is now generally available!
Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command.
Demonstrating end-to-end traceability with pull requests
Reduce developer and auditor friction involved in demonstrating compliance and maintaining end-to-end traceability by focusing your efforts ...
Thu Jul 06 2023
Accessibility considerations behind code search and code view
A look at how we improved the readability of code on GitHub.
Keeping up with big shifts in tech
Wed Jul 05 2023
GitHub achieves ISO/IEC 27701:2019, 27018:2019, and CSA STAR certifications
GitHub’s Information Security and Privacy Management System (ISPMS) has been certified against ISO/IEC 27701:2019 (PII Processor) and 27018:...
Introduction to SELinux
SELinux is the most popular Linux Security Module used to isolate and protect system components from one another.
Mon Jul 03 2023
Leading your platform migration with developer experience
Developer experience (DevEx) is a key theme when it comes to transforming businesses with GitHub.
Fri Jun 30 2023
Game Bytes · June 2023
Thu Jun 29 2023
GitHub Enterprise Server 3.9 is now generally available
GitHub Enterprise Server 3.
Tue Jun 27 2023
The economic impact of the AI-powered developer lifecycle and lessons from GitHub Copilot
Today at Collision Conference we unveiled breaking new research on the economic and productivity impact of generative AI–powered developer t...
Mon Jun 26 2023
New tool to secure your GitHub Actions
Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.
Wed Jun 21 2023
Open Source challenge results from Gamedev.js Jam 2023
Highlighting 13 of the top games plus source from the latest Gamedev.
Bridging code and community
Explore the impact of non-code contributions—and why they are often undervalued, the challenges of using open source in regulated environmen...
Crafting a better, faster code view
The new GitHub Code View brings users many new features to improve the code reading and exploration experiences, and we overcame a number of...
Tue Jun 20 2023
How to use GitHub Copilot: Prompts, tips, and use cases
In this prompt guide for GitHub Copilot, two GitHub developer advocates, Rizel and Michelle, will share examples and best practices for comm...
Mon Jun 19 2023
Developers need the right to challenge junk patents
The United States Patent and Trademark Office (USPTO) recently proposed rule changes that will make it harder to challenge low quality paten...
Thu Jun 15 2023
Exploring GitHub with the redesigned navigation, now in public beta
GitHub’s redesigned navigation is enabled for all users as a public beta.
CodeQL zero to hero part 2: getting started with CodeQL
Learn the basics of CodeQL and how to use it for security research! In this blog, we will teach you how to leverage GitHub’s static analysis...
Wed Jun 14 2023
GitHub Availability Report: May 2023
In May, we experienced four incidents that resulted in degraded performance across GitHub services.
Tue Jun 13 2023
Survey reveals AI’s impact on the developer experience
We surveyed 500 U.
Mon Jun 12 2023
GitHub’s revamped VIP Bug Bounty Program
GitHub’s VIP Bug Bounty Program has been updated to include a clear and accessible criteria for receiving an invitation to the program and m...
Make your GitHub projects more accessible with accessibility-alt-text-bot
The accessibility-alt-text-bot leaves automated reminders in a comment when a user shares an image without providing meaningful alt text.
Cloud migration made easy: introducing GitHub Enterprise Importer
With GitHub Enterprise Importer, you can seamlessly move to GitHub Enterprise Cloud, bringing your code and collaboration history with you s...
Thu Jun 08 2023
Maintainer Month 2023: How the community gathered to spread some maintainer love
Maintainer Month is a time for open source maintainers to gather, share, and be celebrated.
Developer experience: What is it and why should you care?
Explore how investing in a better developer experience frees developers to do what matters most: building great software.
Wed Jun 07 2023
Announcing the All In CHAOSS DEI Badging pilot initiative
Take part in All in for Maintainers' new pilot program that helps open source project maintainers highlight ongoing efforts in advancing div...
Thu May 25 2023
The 2023 Open Source Program Office (OSPO) Survey is live!
Help quantify the state of enterprise open source by taking the 2023 OSPO survey.
Rooting with root cause: finding a variant of a Project Zero bug
In this blog, I’ll look at CVE-2022-46395, a variant of CVE-2022-36449 (Project Zero issue 2327), and use it to gain arbitrary kernel code e...
Wed May 24 2023
How to automate a Microsoft Power Platform deployment using GitHub Actions
Low-code enables developers and non-developers to build custom applications and solutions with less effort.
Kelsey Hightower on leadership in open source and the future of Kubernetes
In this special episode of The ReadME Podcast, dedicated to GitHub’s Maintainer Month, Kelsey Hightower joins hosts Martin Woodward and Neha...
Tue May 23 2023
Announcing the public preview of GitHub Advanced Security for Azure DevOps
GitHub Advanced Security for Azure DevOps is now available for public preview, making GitHub’s same application security testing tools nativ...
Thu May 18 2023
9 tips to go from attendee to speaker at a tech conference
Here’s what you need to know to write a compelling session proposal and get on stage.
GitHub celebrates developers with disabilities on Global Accessibility Awareness Day
GitHub is the home for all developers and on this Global Accessibility Awareness Day we are thrilled to celebrate the achievements of disabl...
Wed May 17 2023
Inside GitHub: Working with the LLMs behind GitHub Copilot
Developers behind GitHub Copilot discuss what it was like to work with OpenAI’s large language model and how it informed the development of ...
How GitHub Copilot is getting better at understanding your code
With a new Fill-in-the-Middle paradigm, GitHub engineers improved the way GitHub Copilot contextualizes your code.
Design’s journey towards accessibility
Design can have a significant impact on delivering accessible experiences to our users.
Mon Feb 06 2023
The technology behind GitHub’s new code search
A look at what went into building the world's largest public code search index.
How to mitigate OWASP vulnerabilities while staying in the flow
Sat Feb 04 2023
Ludum Dare 52 staff picks 🕹
We’ve got ten top games from the latest Ludum Dare game jam plus source code for you to check out.
Fri Feb 03 2023
Europe’s chance to be a leader in the age of AI
Below are my prepared remarks delivered at the EU Open Source Policy Summit in Brussels on Feb 3rd.
Thu Feb 02 2023
How the GitHub Docs team uses GitHub Projects
Explore how the GitHub Docs team uses GitHub Projects for content coordination, reviews, and publishing.
Enabling branch deployments through IssueOps with GitHub Actions
Wed Feb 01 2023
Announcing the launch of the All In for Maintainers DEI Resource Hub
The DEI Resource Hub is a vetted collection of resources, tools, and best practices designed to help open source maintainers create and main...
Open source’s impact on the world’s 100 million developers
We’re taking a look at how open source software has evolved on GitHub, and how the role of a maintainer and contributor has changed alongsid...
GitHub Availability Report: January 2023
In January, we experienced two incidents, one that resulted in degraded performance for Packages and Pages and another that impacted Git use...
Tue Jan 31 2023
Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
In the coming months, we’re scaling, expanding, and launching new programming to further DEI within open source communities.
