CoFeed

GitHub

The second half of software supply chain security on GitHub

Learn about a community-developed framework for how to think about this problem holistically and how to use GitHub, particularly, to improve...

GitHub

How GitHub reduced testing time for iOS apps with new runner features

Learn how GitHub used macOS and Apple Silicon runners for GitHub Actions to build, test, and deploy our iOS app faster.

GitHub

Arm64 on GitHub Actions: Powering faster, more efficient build systems

GitHub Actions now offers Arm-hosted runners with images built by Arm for developers to begin building on the latest and most sustainable pr...

GitHub

Dependabot on GitHub Actions and self-hosted runners is now generally available

A quick guide on the advantages of Dependabot as a GitHub Actions workflow and the benefits this unlocks, including self-hosted runner suppo...

GitHub

Introducing Artifact Attestations–now in public beta

Generate and verify signed attestations for anything you make with GitHub Actions.

GitHub

Where does your software (really) come from?

GitHub is working with the OSS community to bring new supply chain security capabilities to the platform.

GitHub

GitHub Actions, Arm64, and the future of automotive software development

Learn how GitHub's Enterprise Cloud, GitHub Actions, and Arm's latest Automotive Enhanced processors, work together to usher in a new era of...

GitHub

Bringing enterprise-level security and even more power to GitHub-hosted runners

GitHub-hosted runners now support Azure private networking.

GitHub

Get started with v4 of GitHub Actions Artifacts

We listened to your feedback and released new versions (v4) of actions/upload-artifact and actions/download-artifact.

GitHub

GitHub-hosted runners: Double the power for open source

GitHub Actions continues its industry-leading support for the OSS community by doubling the Windows/Linux machine size to 4-vCPU runners at ...

GitHub

GitHub and the Ekoparty 2023 Capture the Flag

The GitHub Security Lab teamed up with Ekoparty once again to create some challenges for its yearly Capture the Flag competition! The post G...

GitHub

From macOS runners to secure deployments, what’s new from GitHub Actions

Read a roundup of the exciting, new innovation coming from GitHub Actions.

GitHub

Security best practices for authors of GitHub Actions

Improve your GitHub Action’s security posture by securing your source repository, protecting your maintainers, and making it easy to report ...

GitHub

How to gain insight into your project contributors

We're excited to share with you the contributors Action! At GitHub, we maintain several open source repositories and have developed this Act...

GitHub

Enforcing code reliability by requiring workflows with GitHub Repository Rules

GitHub Enterprise Cloud customers can now ensure controlled workflows run and pass before code is merged into any of its repositories.

GitHub

How GitHub uses GitHub Actions and Actions larger runners to build and test GitHub.com

Recently, we’ve been working to make our CI experience better by leveraging the newly released GitHub feature, Actions larger runners, to ru...

GitHub

Four tips to keep your GitHub Actions workflows secure

Researchers from Purdue and NCSU have found a large number of command injection vulnerabilities in the workflows of projects on GitHub.

Expedia

Merging Code Quickly and Safely in a Monorepo

GitHub

Metrics for issues, pull requests, and discussions

GitHub

GitHub CLI project command is now generally available!

Level up your use of GitHub Projects on the command line and in GitHub Actions with the new project CLI command.

GitHub

New tool to secure your GitHub Actions

Introducing a new tool to monitor and control the permissions of the repository token for GitHub Actions.

GitHub

Make your GitHub projects more accessible with accessibility-alt-text-bot

The accessibility-alt-text-bot leaves automated reminders in a comment when a user shares an image without providing meaningful alt text.

GitHub

How to automate a Microsoft Power Platform deployment using GitHub Actions

Low-code enables developers and non-developers to build custom applications and solutions with less effort.

GitHub

Enabling branch deployments through IssueOps with GitHub Actions

Tinder

Exploiting GitHub Actions on open source projects