2021–2026
1,345 posts
2026 173
October 2026
- GitHub Universe 2026: Evolving every layer of the stack
- Octoverse: Commits, pushes, reach new highs in 2026 as developers build with agents
- How bug bounty sharpens one researcher’s security skills
- How 3 Java Champions are using GitHub Copilot for increased productivity
- How to continue a GitHub Copilot app session in VS Code
- The next developer interface is ambient intelligence
- GitHub availability report: September 2026
- GitHub’s model for secret detection: Finding more secrets with less noise
- GitHub Copilot app for Beginners: How to teach Copilot about your codebase
- Hack the World: Why hackathons are still the best place to learn to build
- How one bug bounty researcher chooses the features they investigate
- Secret protection must scale with software
- ReviewBench: An open benchmark for AI code review
- AI is changing developer work. Here are three skills to strengthen.
- 10 technical talks I’m excited about at GitHub Universe 2026
September 2026
- Developer policy update: Transparency, state policy, and what’s ahead
- How we found 24 Android vulnerabilities using our open source AI security agent
- Highlights from Git 2.56
- GitHub Copilot app for Beginners: How to build custom workflows with canvases
- When chat is the wrong UI
- AI-powered fuzzing with the GitHub Security Lab Taskflow Agent
- Developers want more efficient software. Here’s what over 1,000 GitHub users told us they need.
- Should you read the code, is RAG dead, and did Skills kill MCP?
- Migrating the GitHub Copilot runtime to Rust, using Copilot
- Marketing ops as code: Automating events from planning to follow-up on GitHub
- GitHub Copilot app for Beginners: Using the diff, terminal, and browser
- GitHub availability report: August 2026
- Project HydraFusion: Frontier quality via multi-model orchestration
- GitHub Copilot app for Beginners: Run several agents at once
- Decoding the new AI lingo: Loops, harnesses, squads, hill climbing… oh my!
August 2026
- OpenClaw went viral. Meet the maintainers building and securing it.
- GitHub Copilot app for Beginners: Automate Dependabot pull request triage
- How to evaluate LLMs before production
- The August 17 outage, and the work ahead
- GitHub Copilot app for Beginners: Managing your work
- How canvases make agentic workflows visible, steerable, and cost-efficient
- How to bring your software delivery workflow into GitHub with agent apps
- Your guide to GitHub Universe 2026 is here: The schedule just launched!
- What 50 open source projects taught us about security in the AI era
- GitHub availability report: July 2026
- GitHub Copilot app for Beginners: Write your first prompt
- Your contributors are AI-first now. Is your project?
- From coder to orchestrator: How agents shift the role of a developer
- A guide to slash commands in the GitHub Copilot app
- How we took malware advisories beyond npm
- How the GitHub legal team used Copilot CLI to streamline their workflows
July 2026
- Stacked sessions and pull requests in the GitHub Copilot app
- Disrupting supply chain attacks on npm and GitHub Actions
- The harness is all you need (mostly)
- GitHub Copilot app for Beginners: Getting started
- The case for a cooldown: Why Dependabot now waits before issuing version updates
- Copilot vs. raw API access: What are you actually paying for?
- Next chapter: Restructuring GitHub’s bug bounty program
- How to build interactive experiences with canvases
- $100 million for open source: A milestone built by the community
- GitHub for Beginners: Your roadmap to mastering the GitHub essentials
- How GitHub gave every repository a durable owner
- GitHub availability report: June 2026
- How GitHub Copilot enables zero DNS configuration for GitHub Pages
- Q1 2026 Innovation Graph update: Open source collaboration is accelerating worldwide
- How GitHub used secret scanning to reach inbox zero
- 6 security settings every GitHub maintainer should enable this week
June 2026
- How GitHub maintains compliance for open source dependencies
- Highlights from Git 2.55
- Inside the Advisory Database and what happens when vulnerability volume breaks records
- GitHub and UNDP team up to advance development priorities in Ghana with open source
- Transitioning as a Hubber
- Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks
- I automated my job (and it made me a better leader)
- GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source
- From pledge to practice: Building a more inclusive open source ecosystem
- How we built an internal data analytics agent
- How pull request limits are cutting down the noise
- Getting more from each token: How Copilot improves context handling and model routing
- What are git worktrees, and why should I use them?
- GitHub Copilot CLI for Beginners: Overview of common slash commands
- Accelerating researchers and developers building multilingual AI with a new open dataset
- How we made GitHub Copilot CLI more selective about delegation
- GitHub availability report: May 2026
- Making secret scanning more trustworthy: Reducing false positives at scale
- Give GitHub Copilot CLI real code intelligence with language servers
- From one-off prompts to workflows: How to use custom agents in GitHub Copilot CLI
- GitHub for Beginners: Answers to some common questions
- GitHub Universe is back: All together now, in the agentic era
- GitHub Copilot app: The agent-native desktop experience
May 2026
- Still a developer. Just outside. Our latest GitHub Shop collection is here.
- GitHub for Beginners: Getting started with Git and GitHub in VS Code
- GitHub recognized as a Leader in the Gartner® Magic Quadrant™ for Enterprise AI Coding Agents for the third year in a row
- Beyond the engine: 10 open source projects shaping how games actually get made
- Building GitHub’s next chapter in accessibility
- Investigation update: GitHub Enterprise Server signing key rotation
- Take your local GitHub sessions anywhere
- Building a general-purpose accessibility agent—and what we learned in the process
- Raising the bar: Quality, shared responsibility, and the future of GitHub’s bug bounty program
- GitHub availability report: April 2026
- Dungeons & Desktops: 10 roguelikes that never die (because their communities won’t let them)
- GitHub Copilot individual plans: Introducing flex allotments in Pro and Pro+, and a new Max plan
- Dungeons & Desktops: Building a procedurally generated roguelike with GitHub Copilot CLI
- GitHub for Beginners: Getting started with OSS contributions
- Why age assurance laws matter for developers
- How researchers are using GitHub Innovation Graph data to reveal the “digital complexity” of nations
- Improving token efficiency in GitHub Agentic Workflows
- Agent pull requests are everywhere. Here’s how to review them.
- Validating agentic behavior when “correct” isn’t deterministic
- Welcome to Maintainer Month: Celebrating the people behind the code
- Register now for OpenClaw: After Hours @ GitHub
April 2026
- GitHub Copilot CLI for Beginners: Interactive v. non-interactive mode
- GitHub for Beginners: Getting started with Markdown
- Securing the git push pipeline: Responding to a critical remote code execution vulnerability
- An update on GitHub availability
- GitHub Copilot is moving to usage-based billing
- Changes to GitHub Copilot Individual plans
- Highlights from Git 2.54
- Building an emoji list generator with the GitHub Copilot CLI
- Bringing more transparency to GitHub’s status page
- Build a personal organization command center with GitHub Copilot CLI
- Developer policy update: Intermediary liability, copyright, and transparency
- Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game
- How exposed is your code? Find out in minutes—for free
- GitHub for Beginners: Getting started with GitHub Pages
- GitHub Copilot CLI for Beginners: Getting started with GitHub Copilot CLI
- GitHub availability report: March 2026
- GitHub Universe is back: We want you to take the stage
- GitHub Copilot CLI combines model families for a second opinion
- Securing the open source supply chain across GitHub
- Run multiple agents at once with /fleet in Copilot CLI
March 2026
- GitHub for Beginners: Getting started with GitHub security
- What’s coming to our GitHub Actions 2026 security roadmap
- A year of open source vulnerability trends: CVEs, advisories, and malware
- Updates to GitHub Copilot interaction data usage policy
- Building AI-powered GitHub issue triage with the Copilot SDK
- GitHub expands application security coverage with AI‑powered detections
- Rethinking open source mentorship in the AI era
- How Squad runs coordinated AI agents inside your repository
- Investing in the people shaping open source and securing the future together
- GitHub for Beginners: Getting started with GitHub Actions
- GitHub availability report: February 2026
- Addressing GitHub’s recent availability issues
- The era of “AI as text” is over. Execution is the new interface.
- Under the hood: Security architecture of GitHub Agentic Workflows
- How to scan for vulnerabilities with GitHub Security Lab’s open source AI-powered framework
- 60 million Copilot code reviews and counting
- Scaling AI opportunity across the globe: Learnings from GitHub and Andela
- Join or host a GitHub Copilot Dev Days event near you
- GitHub for Beginners: Getting started with GitHub Issues and Projects
February 2026
- From idea to pull request: A practical guide to building with GitHub Copilot CLI
- What’s new with GitHub Copilot coding agent
- Multi-agent workflows often fail. Here’s how to engineer ones that don’t.
- How AI is reshaping developer choice (and Octoverse data proves it)
- What to expect for open source in 2026
- Securing the AI software supply chain: Security results across 67 open source projects
- Automate repository tasks with GitHub Agentic Workflows
- Welcome to the Eternal September of open source. Here’s what we plan to do for maintainers.
- GitHub availability report: January 2026
- Continuous AI in practice: What developers can automate today with agentic CI
- Pick your agent: Use Claude and Codex on Agent HQ
- What the fastest-growing tools reveal about how software is being built
- How to maximize GitHub Copilot’s agentic capabilities
January 2026
- Year recap and future goals for the GitHub Innovation Graph
- 7 learnings from Anders Hejlsberg: The architect behind C# and TypeScript
- Help shape the future of open source in Europe
- Power agentic workflows in your terminal with GitHub Copilot CLI
- Build an agent into any app with the GitHub Copilot SDK
- A cheat sheet to slash commands in GitHub Copilot CLI
- AI-supported vulnerability triage with the GitHub Security Lab Taskflow Agent
- Context windows, Plan agent, and TDD: What I learned building a countdown app with GitHub Copilot
- Building an agentic memory system for GitHub Copilot
- GitHub Availability Report: December 2025
- Community-powered security with AI: an open source framework for security research
- What AI is actually good for, according to developers
- Want better AI outputs? Try context engineering.
- Light waves, rising tides, and drifting ships: Game Off 2025 winners
- Why AI is pushing developers toward typed languages
2025 221
December 2025
- Agentic AI, MCP, and spec-driven development: Top blog posts of 2025
- Bugs that survive the heat of continuous fuzzing
- WRAP up your backlog with GitHub Copilot coding agent
- Strengthening supply chain security: Preparing for the next malware campaign
- 5 podcast episodes to help you build with confidence in 2026
- This year’s most influential open source projects
- The future of AI-powered software optimization (and how it can help your team)
- Let’s talk about GitHub Actions
- GitHub Availability Report: November 2025
- MCP joins the Linux Foundation: What this means for developers building the next era of AI tools and agents
- Speed is nothing without control: How to keep quality high in the AI era
- The new identity of a developer: What changes and what doesn’t in the AI era
- How to use GitHub Copilot Spaces to debug issues faster
- Your stack, your rules: Introducing custom agents in GitHub Copilot for observability, IaC, and security
- “The local-first rebellion”: How Home Assistant became the most important project in your house
- How to orchestrate agents using mission control
November 2025
- The ultimate gift guide for the developer in your life
- Why developers still flock to Python: Guido van Rossum on readability, AI, and the future of programming
- How GitHub’s agentic security principles make our AI agents as secure as possible
- Developers still need the right to challenge junk patents
- Evolving GitHub Copilot’s next edit suggestions through custom model training
- How we’re making GitHub Copilot smarter with fewer tools
- How to write a great agents.md: Lessons from over 2,500 repositories
- Level up design-to-code collaboration with GitHub’s open source Annotation Toolkit
- Highlights from Git 2.52
- Unlocking the full power of Copilot code review: Master your instructions files
- GitHub Availability Report: October 2025
- TypeScript, Python, and the AI feedback loop changing software development
- How Copilot helps build the GitHub platform
- What 986 million code pushes say about the developer workflow in 2025
- GitHub Copilot CLI 101: How to use GitHub Copilot from the command line
- TypeScript’s rise in the AI era: Insights from Lead Architect, Anders Hejlsberg
- GitHub Copilot tutorial: How to build, test, review, and ship code faster (with real prompts)
- GitHub Game Off 2025 theme announcement
October 2025
- Measuring what matters: How offline evaluation of GitHub MCP Server works
- Introducing Agent HQ: Any agent, any way you work
- Octoverse: A new developer joins GitHub every second as AI leads TypeScript to #1
- Announcing the 2025 GitHub Partner Award winners 🎉
- How to find, install, and manage MCP servers with the GitHub MCP Registry
- The road to better completions: Building a faster, smarter GitHub Copilot with a new custom model
- From karaoke terminals to AI résumés: The winners of GitHub’s For the Love of Code challenge
- Top security researcher shares their bug bounty process
- How to update community health files with AI
- Inside the breach that broke the internet: The untold story of Log4Shell
- Accelerate developer productivity with these 9 open source AI and MCP projects
- How to navigate GitHub Universe (or any tech conference) if you’re an introvert
- Copilot: Faster, smarter, and built for how you work now
- How GitHub Copilot and AI agents are saving legacy systems
- GitHub Copilot CLI: How to get started
- How to build reliable AI workflows with agentic primitives and context engineering
- 20 Years of Git, 2 days at GitHub HQ: Git Merge 2025 highlights 🎉
- GitHub Availability Report: September 2025
- Completing urgent fixes anywhere with GitHub Copilot coding agent and mobile
- How GitHub Copilot enabled accessibility governance process improvements in record time
- How a top bug bounty researcher got their start in security
- The developer role is evolving. Here’s how to stay ahead.
September 2025
- Spec-driven development: Using Markdown as a programming language when building with AI
- CodeQL zero to hero part 5: Debugging queries
- How GitHub protects developers from copyright enforcement overreach
- Kicking off Cybersecurity Awareness Month 2025: Researcher spotlights and enhanced incentives
- Building beyond the browser: Keeley Hammond on Electron, open source, and the future of maintainership
- GitHub Copilot gets smarter at finding your code: Inside our new embedding model
- Using AI to map hope for refugees with UNHCR, the UN Refugee Agency
- A step-by-step guide to modernizing Java projects with GitHub Copilot agent mode
- Our plan for a more secure npm supply chain
- Gartner positions GitHub as a Leader in the 2025 Magic Quadrant for AI Code Assistants for the second year in a row
- What’s next for Git? 20 years in, the community is still pushing forward
- 5 ways to integrate GitHub Copilot coding agent into your workflow
- Meet the GitHub MCP Registry: The fastest way to discover MCP Servers
- Building personal apps with open source and AI
- GitHub Availability Report: August 2025
- GitHub Copilot coding agent 101: Getting started with agentic workflows on GitHub
- Your guide to GitHub Universe 2025: The schedule just launched!
- How to use the GitHub and JFrog integration for secure, traceable builds from commit to production
- How to debug a web app with Playwright MCP and GitHub Copilot
- GitHub is enabling broader access for developers in Syria following new government trade rules
- Building smarter interactions with MCP elicitation: From clunky tool calls to seamless user experiences
- 5 tips for writing better custom instructions for Copilot
- Spec-driven development with AI: Get started with a new open source toolkit
August 2025
- Under the hood: Exploring the AI models powering GitHub Copilot
- How GitHub Models can help open source maintainers focus on what matters
- How we accelerated Secret Protection engineering with Copilot
- How to use GitHub Copilot on github.com: A power user’s guide
- Rediscovering joy in learning: Jason Lengstorf on the state of development
- Safeguarding VS Code against prompt injections
- Building your first MCP server: How to extend AI tools with custom capabilities
- Explore the best of GitHub Universe: 9 spaces built to spark creativity, connection, and joy
- Who will maintain the future? Rethinking open source leadership for a new generation
- Agents panel: Launch Copilot coding agent tasks anywhere on GitHub
- Highlights from Git 2.51
- GPT-5 in GitHub Copilot: How I built a game in 60 seconds
- Q1 2025 Innovation Graph update: Bar chart races, data visualization on the rise, and key research
- GitHub Availability Report: July 2025
- From private to public: How a United Nations organization open sourced its tech in four steps
- Why we open sourced our MCP server, and what it means for you
- Securing the supply chain at scale: Starting with 71 important open source projects
- Auf Wiedersehen, GitHub ♥️
- How to use GitHub Copilot to level up your code reviews and pull requests
- Junior developers aren’t obsolete: Here’s how to thrive in the age of AI
- Automate your project with GitHub Models in Actions
July 2025
- Onboarding your AI peer programmer: Setting up GitHub Copilot coding agent for success
- A practical guide on how to use the GitHub MCP server
- From first commits to big ships: Tune into our new open source podcast
- Scaling for impact: How GitHub Copilot supercharges smallholder farmers
- How to build secure and scalable remote MCP servers
- How to streamline GitHub API calls in Azure Pipelines
- Solving the inference problem for open source AI projects with GitHub Models
- We need a European Sovereign Tech Fund
- Debugging UI with AI: GitHub Copilot agent mode meets MCP servers
- GitHub Availability Report: June 2025
- How to catch GitHub Actions workflow injections before attackers do
- For the Love of Code: a summer hackathon for joyful, ridiculous, and wildly creative projects
- From chaos to clarity: Using GitHub Copilot agents to improve developer workflows
- Code review in the age of AI: Why developers will always own the merge button
- Modeling CORS frameworks with CodeQL to find security vulnerabilities
- Beyond prompt crafting: How to be a better partner for your AI pair programmer
- Git security vulnerabilities announced
- CVE-2025-53367: An exploitable out-of-bounds write in DjVuLibre
- 5 ways to transform your workflow using GitHub Copilot and MCP
- From idea to PR: A guide to GitHub Copilot’s agentic workflows
- Understand your software’s supply chain with GitHub’s dependency graph
June 2025
- What is the GitHub advisory database, and how does it help you secure dependencies?
- From pair to peer programmer: Our vision for agentic workflows in GitHub Copilot
- Why developer expertise matters more than ever in the age of AI
- GitHub Copilot Spaces: Bring the right context to every suggestion
- 5 tips for using GitHub Copilot with issues to boost your productivity
- Highlights from Git 2.50
- How the GitHub billing team uses the coding agent in GitHub Copilot to continuously burn down technical debt
- GitHub Availability Report: May 2025
- GitHub for Beginners: Code review and refactoring with GitHub Copilot
- Assigning and completing issues with coding agent in GitHub Copilot
- How to create issues and pull requests in record time on GitHub
- A free hands-on course on AI security: Hack the LLM and then fix it
- DNS rebinding attacks explained: The lookup is coming from inside the house!
- The difference between coding agent and agent mode in GitHub Copilot
May 2025
- GitHub Universe 2025: Here’s what’s in store at this year’s developer wonderland
- 4 trends shaping open source funding—and what they mean for maintainers
- Inside GitHub: How we hardened our SAML implementation
- GitHub for Beginners: Test-driven development (TDD) with GitHub Copilot
- Bypassing MTE with CVE-2025-0072
- Shine a spotlight on your open source project
- Agent mode 101: All about GitHub Copilot’s powerful mode
- How to thrive as a junior engineer: Tips and insights
- GitHub Copilot: Meet the new coding agent
- Code. Create. Commit. Welcome to dev/core
- Vibe coding: Your roadmap to becoming an AI developer
- Our pledge to help improve the accessibility of open source software at scale
- GitHub Availability Report: April 2025
- Documentation done right: A developer’s guide
- GitHub for Beginners: Building a React App with GitHub Copilot
- Real‑world video demo: Using different AI models in GitHub Copilot
- Dos and don’ts when sunsetting open source projects
- Welcome to Maintainer Month: Events, exclusive discounts, and a new security challenge
- Copilot ask, edit, and agent modes: What they do and when to use them
- The AI-powered DevOps revolution: Redefining developer collaboration
April 2025
- From MCP to multi-agents: The top 10 new open source AI projects on GitHub right now and why they matter
- Cutting through the noise: How to prioritize Dependabot alerts
- GitHub for Beginners: Building a REST API with Copilot
- A guide to deciding what AI model to use in GitHub Copilot
- From prompt to production: Building a landing page with Copilot agent mode
- Exploring GitHub CLI: How to interact with GitHub’s GraphQL API endpoint
- Racing into 2025 with new GitHub Innovation Graph data
- How to take climate action with your code
- How to make your images in Markdown on GitHub adjust for dark mode and light mode
- Cracking the code: How to wow the acceptance committee at your next tech event
- Which AI model should I use with GitHub Copilot?
- GitHub Availability Report: March 2025
- When to choose GitHub-Hosted runners or self-hosted runners with GitHub Actions
- GitHub for Beginners: Security best practices with GitHub Copilot
- What the heck is MCP and why is everyone talking about it?
- How we’re making security easier for the average developer
- How to request a change to a CVE record
- Found means fixed: Reduce security debt at scale with GitHub security campaigns
- Git turns 20: A Q&A with Linus Torvalds
- Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users
- Localhost dangers: CORS and DNS rebinding
- GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help
March 2025
- GitHub for Beginners: How to get LLMs to do what you want
- 5 GitHub Actions every maintainer needs to know
- Mastering GitHub Copilot: When to use AI agent mode
- What to do when you receive a vulnerability report: A step-by-step guide for maintainers
- World Water Day: how GitHub Copilot is helping bring clean water to communities
- Video: How to create checklists in Markdown for easier task tracking
- GitHub for Beginners: Essential features of GitHub Copilot
- Highlights from Git 2.49
- How GitHub engineers learn new codebases
- Sign in as anyone: Bypassing SAML SSO authentication with parser differentials
- GitHub Availability Report: February 2025
- Why Java endures: The foundation of modern enterprise development
- Full exposure: A practical approach to handling sensitive data leaks
- 4 steps toward building an open source community
- Video: How to run dependency audits with GitHub Copilot
- Not just for developers: How product and security teams can use GitHub Copilot
- GitHub for Beginners: How to get started with GitHub Copilot
February 2025
- Community managers in action: Leading a developer community for good
- Engaging with the developer community on our approach to content moderation
- Support the open source projects you love this Valentine’s Day
- GitHub Availability Report: January 2025
- How to refactor code with GitHub Copilot
- From finding to fixing: GitHub Advanced Security integrates Endor Labs SCA
- GitHub Copilot: The agent awakens
- 5 tips for promoting your open source project
January 2025
- 4 steps to building a natural language search tool
- What does a cybersecurity researcher do and how do you get started?
- Open source AI is already finding its way into production
- New to open source? Here’s everything you need to get started
- That’s a wrap: GitHub Innovation Graph in 2024
- Attacks on Maven proxy repositories
- Modernizing legacy code with GitHub Copilot: Tips and examples
- Seven years of open source: A more secure and diverse ecosystem
- How we evaluate AI models and LLMs for GitHub Copilot
- Supporting the next generation of developers
- GitHub Availability Report: December 2024
- Documenting and explaining legacy code with GitHub Copilot: Tips and examples
- How we built the GitHub Skyline CLI extension using GitHub
- Git security vulnerabilities announced
- Game Off 2024 winners
- Highlights from Git 2.48
- How to scan GitHub Actions workflows for security issues
- How to use GitHub Copilot: What it can do and real-world examples
- Building LATAM’s future tech workforce with AI
2024 175
December 2024
- GitHub’s top blogs of 2024
- Announcing CodeQL Community Packs
- Inside the research: How GitHub Copilot impacts the nature of work for open source maintainers
- OpenAI’s latest o1 model now available in GitHub Copilot and GitHub Models
- Enhance build security and reach SLSA Level 3 with GitHub Artifact Attestations
- Introducing Annotated Logger: A Python package to aid in adding metadata to logs
- Announcing 150M developers and a new free tier for GitHub Copilot in VS Code
- Uncovering GStreamer secrets
- GitHub Availability Report: November 2024
- So many tokens, so little time: Introducing a faster, more flexible byte-pair tokenizer
- CodeQL zero to hero part 4: Gradio framework case study
- What the EU’s new software legislation means for developers
- The top 10 gifts for the developer in your life
- How to generate unit tests with GitHub Copilot: Tips and examples
- Congratulations to the winners of the 2024 Gaady Awards
November 2024
- Students: Start building your skills with the GitHub Foundations certification
- Announcing GitHub Secure Open Source Fund: Help secure the open source ecosystem for everyone
- Software is a team sport: Building the future of software development together
- Does GitHub Copilot improve code quality? Here’s what the data says
- GitHub Availability Report: October 2024
- How developers spend the time they save thanks to AI coding tools
- Game Off 2024 theme announcement
October 2024
- Celebrating the GitHub Awards 2024 recipients 🎉
- New from Universe 2024: Get the latest previews and releases
- Bringing developer choice to Copilot with Anthropic’s Claude 3.5 Sonnet, Google’s Gemini 1.5 Pro, and OpenAI’s o1-preview
- Octoverse: AI leads Python to top language as the number of global developers surges
- Attacking browser extensions
- Cybersecurity spotlight on bug bounty researcher @adrianoapj
- Diversity, inclusion, and belonging at GitHub in 2024
- Open source supply chain security explained: The essential role of CVEs
- GitHub for Nonprofits: Drive social impact one commit at a time
- Career growth, learning, and fun, oh my! Your guide to GitHub Universe 2024
- GitHub Availability Report: September 2024
- 5 tips and tricks when using GitHub Copilot Workspace
- The second half of software supply chain security on GitHub
- Highlights from Git 2.47
- How students teamed up to decode 2,000-year-old texts using AI
- Leading the way: 10 projects in the Open Source Zone at GitHub Universe 2024
- Cybersecurity spotlight on bug bounty researcher @imrerad
September 2024
- Code referencing now generally available in GitHub Copilot and with Microsoft Azure AI
- The nuances and challenges of moderating a code collaboration platform
- GitHub Copilot now available in github.com for Copilot Individual and Copilot Business plans
- Kicking off Cybersecurity Awareness Month: Researcher spotlights and additional incentives!
- Boost your CLI skills with GitHub Copilot
- Try out OpenAI o1 in GitHub Copilot and Models
- The 10 best tools to green your software
- Software as a public good
- Enhancing the GitHub Copilot ecosystem with Copilot Extensions, now in public beta
- First Look: Exploring OpenAI o1 in GitHub Copilot
- GitHub Availability Report: August 2024
- Streamlining your MLOps pipeline with GitHub Actions and Arm64 runners
- Fine-tuned models are now in limited public beta for GitHub Copilot Enterprise
- Beginner’s guide to GitHub: Setting up and securing your profile
- How to build an open source metrics dashboard
August 2024
- 2024 is the biggest global election year in history. What’s at stake for developers?
- GitHub Enterprise: The best migration path from AWS CodeCommit
- Beginner’s guide to GitHub: Merging a pull request
- GitHub named a Leader in the Gartner first-ever Magic Quadrant for AI Code Assistants
- Survey: The AI wave continues to grow on software development teams
- How to level up your Git game with GitHub CLI
- Automating open source: How Ersilia distributes AI models to advance global health equity
- GitHub Availability Report: July 2024
- Found means fixed: Secure code more than three times faster with Copilot Autofix
- What are AI agents and why do they matter?
- From object transition to RCE in the Chrome renderer
- Beginner’s guide to GitHub: Creating a pull request
- How to use AI coding tools to learn a new programming language
- Introducing GitHub Models: A new generation of AI engineers building on GitHub
July 2024
- What’s new with GitHub Copilot: July 2024
- How GitHub harnesses AI to transform customer feedback into action
- Configure GitHub Artifact Attestations for secure cloud-native delivery
- Highlights from Git 2.46
- Beginner’s guide to GitHub: Adding code to your repository
- GitHub Accelerator Showcase: Celebrating our second cohort and what’s next
- How to review code effectively: A GitHub staff engineer’s philosophy
- 3 ways to get Remote Code Execution in Kafka UI
- How researchers are using GitHub Innovation Graph data to estimate the impact of ChatGPT
- GitHub Availability Report: June 2024
- Advancing responsible practices for open source AI
- Beginner’s guide to GitHub: Uploading files and folders to GitHub
June 2024
- Attack of the clones: Getting RCE in Chrome’s renderer with duplicate object properties
- Beginner’s guide to GitHub repositories: How to create your first repo
- Execute commands by sending JSON? Learn how unsafe deserialization vulnerabilities work in Ruby projects
- GitHub Enterprise Server 3.13 is now generally available
- Unlocking the power of unstructured data with RAG
- GitHub Availability Report: May 2024
- Leveraging technology on the frontlines of emergency: How communities of developers are taking action
- 10 years of the GitHub Security Bug Bounty Program
- Top 12 Git commands every developer must know
- Arm64 on GitHub Actions: Powering faster, more efficient build systems
May 2024
- GitHub and JFrog partner to unify code and binaries for DevSecOps
- What is Git? Our beginner’s guide to version control
- 2024 GitHub Accelerator: Meet the 11 projects shaping open source AI
- Introducing GitHub Copilot Extensions: Unlocking unlimited possibilities with our ecosystem of partners
- Scaling accessibility within GitHub and beyond
- Securing Git: Addressing 5 new vulnerabilities
- Research: Quantifying GitHub Copilot’s impact in the enterprise with Accenture
- Say hello to the SPORTech collection
- GitHub Availability Report: April 2024
- How AI enhances static application security testing (SAST)
- Just launched: Second cohort of the DPG Open Source Community Manager Program!
- GitHub Copilot Chat in GitHub Mobile is now generally available
- Create a home for your community with GitHub Discussions
- Dependabot on GitHub Actions and self-hosted runners is now generally available
- Introducing Artifact Attestations–now in public beta
- Celebrating 1 year of A11y Design Bootcamp: Takeaways and tips
- 5 tips to supercharge your developer career in 2024
April 2024
- Where does your software (really) come from?
- Highlights from Git 2.45
- GitHub Copilot Workspace: Welcome to the Copilot-native developer environment
- CodeQL zero to hero part 3: Security research with CodeQL
- GitHub Actions, Arm64, and the future of automotive software development
- Securing millions of developers through 2FA
- Using open source to help the earth
- A policy proposal on our approach to deepfake tools and responsible AI
- The world’s fair of software: Join us at GitHub Universe 2024
- All In Africa: New cohort now open!
- Helping policymakers weigh the benefits of open source AI
- GitHub Availability Report: March 2024
- 4 ways GitHub engineers use GitHub Copilot
- Explore the seasons of software development with four full years of data
- What is retrieval-augmented generation, and what does it do for generative AI?
- How to find, verify, and report open source vulnerabilities using GitHub tools
- Bringing enterprise-level security and even more power to GitHub-hosted runners
March 2024
- Empowering women through open source
- Game Bytes · March 2024
- Using GitHub Copilot in your IDE: Tips, tricks, and best practices
- Insider newsletter digest: 4 things you didn’t know you could do with GitHub Projects
- Found means fixed: Introducing code scanning autofix, powered by GitHub Copilot and CodeQL
- Gaining kernel code execution on an MTE-enabled Pixel 8
- GitHub Availability Report: February 2024
- Exploring an increase in circumvention claims in our transparency data
- Hard and soft skills for developers coding in the age of AI
- GitHub Enterprise Server 3.12 is now generally available
- Keeping repository maintainer information accurate
- GitHub Copilot Learning Pathway: Accelerate your business with AI
February 2024
- Game Bytes · February 2024
- Meet Kayla: A college student and open source ambassador
- Keeping secrets out of public repositories
- Customizing and fine-tuning LLMs: What you need to know
- How we’re using GitHub Projects to standardize our workflows and stay aligned
- GitHub Copilot Enterprise is now generally available
- Highlights from Git 2.44
- How AI code generation works
- Insider newsletter digest: Cook up a controller with GitHub Copilot
- Repo-jacking explained: How it works and how to protect your GitHub projects
- Empowering all developers to build without barriers
- Build code security skills with the GitHub Secure Code Game
- GitHub Availability Report: January 2024
- Powering advancements of AI in the open: Apply now to GitHub Accelerator
- Get started with v4 of GitHub Actions Artifacts
- The architecture of SAST tools: An explainer for developers
- Copilot in GitHub Support is now available!
- AppSec is harder than you think. Here’s how AI can help.
- Release Radar · January 2024 Edition
January 2024
- Do you know if all your repositories have up-to-date dependencies?
- GitHub Fund 2024 and beyond: Looking to the future
- A guide to open source for the social sector
- Yes, good DevEx increases productivity. Here is the data.
- How to get in the flow while coding (and why it’s important)
- 10 unexpected ways to use GitHub Copilot
- Game Bytes · January 2024
- Insider newsletter digest: Build from anywhere
- New data and visualizations highlight the resilience of international developer collaboration
- GitHub Availability Report: December 2023
- GitHub-hosted runners: Double the power for open source
- A developer’s second brain: Reducing complexity through partnership with AI
- Rotating credentials for GitHub.com and new GHES patches
- Empowering Uruguay’s future workforce with AI
- Game Off 2023 results 🏆
- GitHub Certifications are generally available
- GitHub and the Ekoparty 2023 Capture the Flag
- Frenemies to friends: Developers and security tools
- 5 ways to make your DevSecOps strategy developer-friendly
- Our move to generated SDKs
2023 274
December 2023
- GitHub Copilot Chat now generally available for organizations and individuals
- GitHub’s top blog posts of 2023
- From migration tools to updates to Enterprise Managed Users, what’s new in GitHub Enterprise
- Release Radar · End of 2023 Edition
- Scaling vulnerability management across thousands of services and more than 150 million findings
- GitHub Availability Report: November 2023
- Securing our home labs: Frigate code review
- Default setup now includes scheduled scans and supports all languages covered by CodeQL
- From macOS runners to secure deployments, what’s new from GitHub Actions
- GitHub Innovation Graph Q2 2023 Data Release
- Cueing up a calculator: an introduction to exploit development on Linux
- How we’re experimenting with LLMs to evolve GitHub Copilot
- GitHub Enterprise Server 3.11 is now generally available
- Addressing post-quantum cryptography with CodeQL
- The ultimate gifts for the developer in your life this holiday season
November 2023
- Insider newsletter digest: How to use GitHub Copilot
- Securing our home labs: Home Assistant code review
- For Good First Issue: Introducing a new way to contribute
- Highlights from Git 2.43
- Security best practices for authors of GitHub Actions
- Universe’s key takeaway: Innovate better with AI-powered workflows on a single, unified platform
- GitHub Availability Report: October 2023
- Celebrating the GitHub Awards 2023 recipients 🎉
- Universe 2023: Copilot transforms GitHub into the AI-powered developer platform
- Octoverse: The state of open source and rise of AI in 2023
- Introducing AI-powered application security testing with GitHub Advanced Security
- Leveraging AI to empower all developers at GitHub Universe 2023
- Celebrating the first round of GitHub Accelerator and what’s next
- GitHub Game Off 2023 theme announcement
- Diversity, inclusion, and belonging at GitHub in 2023
October 2023
- Introducing the GitHub transparency center
- Release Radar · Hacktoberfest 2023 Edition
- The architecture of today’s LLM applications
- Hackable Halloween games MMXXIII
- Demystifying LLMs: How they can do things they weren’t trained to do
- Developers are the first group to adopt AI at work. Here’s why that matters.
- 5 tips for making your GitHub profile page accessible
- Cybersecurity spotlight on bug bounty researcher @Ammar Askar
- How to gain insight into your project contributors
- ICYMI: improved C++ vulnerability coverage and CodeQL support for Lombok
- Your curated GitHub Universe agenda: AI, ethics, and productivity
- The clock is ticking: Atlassian’s support for Bitbucket Server ends on February 15, 2024
- Getting RCE in Chrome with incomplete object initialization in the Maglev compiler
- js13kGames 2023 winners 🏆
- Ensuring the next generation of open source leaders are truly “all in”
- GitHub Availability Report: September 2023
- Enforcing code reliability by requiring workflows with GitHub repository rules
- Research: Quantifying GitHub Copilot’s impact on code quality
- Coordinated Disclosure: 1-Click RCE on GNOME (CVE-2023-43641)
- Prompting GitHub Copilot Chat to become your personal AI assistant for accessibility
- Skilling African developers through All In Africa
- A developer’s guide to open source LLMs and generative AI
- Introducing secret scanning validity checks for major cloud services
- Sponsors is expanding
- 3 strategies to expand your threat model and secure your supply chain
- Cybersecurity spotlight on bug bounty researcher @inspector-ambitious
- Introducing the new, Apple silicon powered M1 macOS larger runner for GitHub Actions
September 2023
- Game Bytes · September 2023
- GitHub Learning Pathways: Learn from the best
- How I used GitHub Copilot Chat to build a ReactJS gallery prototype
- Your ultimate guide to the GitHub Universe ‘23 agenda
- Getting RCE in Chrome with incorrect side effect in the JIT compiler
- Calling all teachers! Learn how to build new commands on the GitHub Classroom CLI
- The GitHub Security Lab’s journey to disclosing 500 CVEs in open source projects
- Passkeys are generally available
- Announcing the GitHub Innovation Graph
- GitHub Copilot Chat beta now available for all individuals
- Introducing Learning Paths on Global Campus
- Announcing general availability of GitHub Advanced Security for Azure DevOps
- Switching from Bitbucket Server and Bamboo to GitHub just got easier
- Introducing auto-triage rules for Dependabot
- GitHub Availability Report: August 2023
- Apply now for GitHub Universe 2023 micro-mentoring
- CodeQL team uses AI to power vulnerability detection in code
- How to build an enterprise LLM application: Lessons from GitHub Copilot
- Getting started with edge computing
August 2023
- Why Rust is the most admired language among developers
- GitHub Enterprise Server 3.10 is now generally available
- 10 things you didn’t know you could do with GitHub Projects
- Game Bytes · August 2023
- A faster way to manage version updates with Dependabot
- Unleashing GitHub Codespaces templates to ignite your development
- AI-powered impact: GitHub Social Impact’s year ahead
- Highlights from Git 2.42
- mTLS: When certificate authentication is done wrong
- Build for today, transform for tomorrow at GitHub Universe 2023
- Release Radar · July 2023 Edition
- Hardening repositories against credential theft
- Nine years of the GitHub Security Bug Bounty program
- Enhanced push protection features for developers and organizations
- GitHub Availability Report: July 2023
- How to secure GitHub Actions workflows: 4 tips to handle untrusted input and tighten permissions
- A guide to designing and shipping AI developer tools
- A checklist and guide to get your repository collaboration-ready
- Introducing code referencing for GitHub Copilot
- Best practices for organizations and teams using GitHub Enterprise Cloud
July 2023
- Smarter, more efficient coding: GitHub Copilot goes beyond Codex with improved AI model
- Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform
- How to get AI regulation right for open source
- Game Bytes · July 2023
- How to build a GPT-3 App with Nextjs, React, and GitHub Copilot
- How to responsibly adopt GitHub Copilot with the GitHub Copilot Trust Center
- GitHub Repository Rules are now generally available
- GitHub Copilot Chat beta now available for every organization
- Metrics for issues, pull requests, and discussions
- Security alert: social engineering campaign targets technology industry employees
- A developer’s guide to prompt engineering and LLMs
- Release Radar · Spring 2023 Edition
- (De)coding conventions
- Moving from a product to a service mindset
- GitHub Availability Report: June 2023
- No cyber resilience without open source sustainability
- GitHub merge queue is generally available
- Introducing passwordless authentication on GitHub.com
- GitHub CLI project command is now generally available!
- Demonstrating end-to-end traceability with pull requests
- Keeping up with big shifts in tech
- GitHub achieves ISO/IEC 27701:2019, 27018:2019, and CSA STAR certifications
- Introduction to SELinux
- Leading your platform migration with developer experience
June 2023
- Game Bytes · June 2023
- GitHub Enterprise Server 3.9 is now generally available
- The economic impact of the AI-powered developer lifecycle and lessons from GitHub Copilot
- How to identify and fix overly powerful GitHub Actions permissions using workflow monitoring
- Open Source challenge results from Gamedev.js Jam 2023
- Bridging code and community
- How to write better prompts for GitHub Copilot
- Developers need the right to challenge junk patents
- Exploring GitHub with the redesigned navigation, now in public beta
- CodeQL zero to hero part 2: Getting started with CodeQL
- GitHub Availability Report: May 2023
- Survey reveals AI’s impact on the developer experience
- GitHub’s revamped VIP Bug Bounty Program
- Make your GitHub projects more accessible with accessibility-alt-text-bot
- Cloud migration made easy: introducing GitHub Enterprise Importer
- Maintainer Month 2023: How the community gathered to spread some maintainer love
- Developer experience: What is it and why should you care?
- Announcing the All In CHAOSS DEI Badging pilot initiative
- Swift support brings broader mobile application security to GitHub Advanced Security
- Announcing the Stale Repos Action
- Applying GitOps principles to your operations
- Elevating open source contributors to open source maintainers
- Highlights from Git 2.41
May 2023
- The 2023 Open Source Program Office (OSPO) Survey is live!
- Rooting with root cause: finding a variant of a Project Zero bug
- How to automate a Microsoft Power Platform deployment using GitHub Actions
- Kelsey Hightower on leadership in open source and the future of Kubernetes
- Announcing the public preview of GitHub Advanced Security for Azure DevOps
- 9 tips to go from attendee to speaker at a tech conference
- GitHub celebrates developers with disabilities on Global Accessibility Awareness Day
- Inside GitHub: Working with the LLMs behind GitHub Copilot
- How GitHub Copilot is getting better at understanding your code
- Addressing GitHub’s recent availability issues
- This month on The ReadME Podcast: Balancing openness and control
- How I used GitHub Copilot to build a browser extension
- Navigation and search improvements for accessibility
- Revolutionize your open source workflows: the top 3 reasons why GitHub Codespaces is a must-have for maintainers
- Game Bytes · May 2023
- How companies are boosting productivity with generative AI
- What is ReDoS, and how do you fix it?
- Push protection is generally available, and free for all public repositories
- GitHub code search is generally available
- Building a culture of innovation in your business with GitHub
- Building a more inclusive GitHub Global Campus
- Web Summit Rio 2023: Building an app in 18 minutes with GitHub Copilot X
- Manage your application security stack effectively with the tool status page
- All In for Students 2023 cohort: our biggest group of open source leaders yet!
- GitHub Availability Report: April 2023
- More than meets the pull request: maintainers talk contributions
- Dependabot relieves alert fatigue from npm devDependencies
April 2023
- This month on The ReadME Podcast: exploring the fusion of technology and progress
- CLI tricks every developer should know
- Git security vulnerabilities announced
- Gearing up for Maintainer Month this May!
- Shaping the GitHub of the future as COO
- Announcing GitHub Actions Deployment Protection Rules, now in public beta
- Private vulnerability reporting now generally available
- Introducing npm package provenance
- GitHub joins industry commitment to curb cyber mercenaries
- Multi-repository enablement: effortlessly scale code scanning across your repositories
- 3 benefits of migrating and consolidating your source code
- How generative AI is changing the way developers work
- Ensuring compliance in developer workflows
- GitHub Accelerator: our first cohort and what’s next
- Introducing the newest GitHub Shop collection
- Generative AI-enabled compliance for software development
- How enabling developers can help drive financial inclusion
- What developers need to know about generative AI
- Game Bytes · April 2023
- Pwning Pixel 6 with a leftover patch
- Bring your enterprise together with enterprise accounts for all
- GitHub Availability Report: March 2023
- Building organization-wide governance and re-use for CI/CD and automation with GitHub Actions
- What’s new with GitHub Sponsors
- Level up monitoring and reporting for your enterprise
- Calling all open source maintainers
March 2023
- CodeQL zero to hero part 1: The fundamentals of static analysis for vulnerability research
- Improvements to CodeQL’s data flow library for C++
- Introducing self-service SBOMs
- GitHub Galaxy 2023: Empower developer teams with a new developer experience
- Announcing the GitHub Actions extension for VS Code
- We updated our RSA SSH host key
- Build a secure code mindset with the GitHub Secure Code Game
- GitHub Copilot X: The AI-powered developer experience
- Partnering with EU policymakers to ensure the Cyber Resilience Act works for developers
- Godot 4.0 Release Party 🎉
- GitHub celebrates the ingenuity of developers with disabilities in new video series
- Highlights from Git 2.40
- An open source project to empower OSPOs everywhere
- Introducing Activating Developers and the new Digital Public Goods Open Source Community Manager Program
- Introducing GitHub vulnerability management integrations for security professionals
- Don’t leave developers behind in the Section 230 debate
- How GitHub accelerates development for embedded systems
- Raising the bar for software security: GitHub 2FA begins March 13
- Multi-repository variant analysis: a powerful new way to perform security research across GitHub
- Application security orchestration with GitHub Advanced Security
- GitHub Galaxy 2023: your guide to building a more flexible and productive software development cycle
- GitHub Enterprise Server 3.8 is now generally available
- File editing on GitHub Mobile keeps leveling up
- Unleash your potential with GitHub Octernships: a path to a thriving tech career
- How to automate your dev environment with dev containers and GitHub Codespaces
- Release Radar · February 2023 Edition
- GitHub Security Lab audited DataHub: Here’s what they found
- GitHub Desktop 3.2: Preview your pull request
- See you at SCaLE! 🐧
- Why Python keeps growing, explained
- GitHub Availability Report: February 2023
- GitHub Actions Importer is now generally available
- GitHub Actions: Introducing faster GitHub-hosted x64 macOS runners
February 2023
- How to build a consistent workflow for development and operations teams
- 10 things you didn’t know you could do with GitHub Codespaces
- Secret scanning alerts are now available (and free) for all public repositories
- 3 ways to meet compliance needs without slowing down agility
- Measuring government policy on open source with a new dataset
- The code that wasn’t there: Reading memory on an Android device by accident
- A beginner’s guide to learning to code with GitHub Codespaces
- Responsible AI pair programming with GitHub Copilot
- Update on the future stability of source code archives and hashes
- ICYMI: CodeQL enhancements
- 2022 Transparency Report
- Git security vulnerabilities announced
- GitHub Copilot now has a better AI model and new capabilities
- GitHub Copilot for Business is now available
- Yout amicus: fighting for developers’ right to innovate
- Release Radar, Festive Edition · December 2022 – January 2023
- How to mitigate OWASP vulnerabilities while staying in the flow
- Ludum Dare 52 staff picks 🕹
- Europe’s chance to be a leader in the age of AI
- Announcing the launch of the All In for Maintainers DEI Resource Hub
- Open source’s impact on the world’s 100 million developers
- GitHub Availability Report: January 2023
January 2023
- Skilling for the future: How GitHub is advancing diversity, equity, and inclusion within open source communities
- Action needed for GitHub Desktop and Atom users
- Bypassing OGNL sandboxes for fun and charities
- Setting the foundations for compliance
- 100 million developers and counting
- Introducing the GitHub Bug Bounty swag store
- Pwning the all Google phone with a non-Google bug
- Unpacking the value of open source and code collaboration
- Sunsetting Subversion support
- Bringing GitHub Actions to GitHub Mobile
- Unlocking security updates for transitive dependencies with npm
- Remediation made simple: Introducing new validity checks for GitHub tokens
- Dependabot alerts are now visible to more developers
- Git security vulnerabilities announced
- 3 common DevOps antipatterns and cloud native strategies that can help
- Game Off 2022 winners 🏆
- New GitHub CLI extension tools
- A smarter, quieter Dependabot
- Passwordless deployments to the cloud
- Introducing required workflows and configuration variables to GitHub Actions
- GitHub Discussions just got better with Category Forms!
- Default setup: A new way to enable GitHub code scanning
- GitHub Availability Report: December 2022
2022 277
December 2022
- GitHub and the Ekoparty 2022 Capture the Flag
- GitHub’s top 10 blog posts of 2022
- GitHub Gives 2022: Creating positive, lasting contributions in our communities
- Increase developer productivity, save time on developer onboarding, and drive ROI in 2023
- Not just flightless birds: How EMUs secure and scale identity and access management for your GitHub Enterprise
- [Video] How has open source changed in the last 10 years?
- Release Radar · November 2022 Edition
- Leaked a secret? Check your GitHub alerts…for free
- GitHub Advanced Security customers can now push protect their custom patterns
- Raising the bar for software security: next steps for GitHub.com 2FA
- Highlights from Git 2.39
- Release Radar · October 2022 Edition
- Git Commit Uruguay: Lowering barriers to make software development more inclusive and diverse
- Hello from GitHub’s new Chief Product Officer
- GitHub Copilot is generally available for businesses
- GitHub Availability Report: November 2022
- New npm features for secure publishing and safe consumption
- ICYMI: A look back at GitHub Universe 2022
- GitHub, accessibility, and the disability divide
- Introducing Mona Sans and Hubot Sans
- How empowering developers helps teams ship secure software faster
- An enterprise account is coming to all Enterprise customers
November 2022
- To infinity and beyond: enabling the future of GitHub’s REST API with API versioning
- Exciting new GitHub features powering machine learning
- Octoverse 2022: 10 years of tracking open source
- The power of GitHub in the palm of your hand
- A better way to search, navigate, and understand code on GitHub
- The journey of your work has never been clearer
- Introducing GitHub Actions Importer
- What’s new with Codespaces from GitHub Universe 2022
- Todas as novidades do GitHub Universe 2022
- An open source economy–built by developers, for developers
- Everything new from GitHub Universe 2022
- Understanding the social impact of open source technologies
- The changing nature of governmental policies around open source
- Why more companies are investing in open source program offices
- The importance of improving supply chain security in open source
- Bringing greater financial sustainability to open source communities
- GitHub Enterprise Server 3.7 is now generally available
- Advocating for developers to the US Copyright Office
- GitHub partners with Arm to revolutionize Internet of Things software development with GitHub Actions
- GitHub Availability Report: October 2022
- Game Off 2022 theme announcement
- Preview: referencing public code in GitHub Copilot
- All In for Students: expanding the next generation of open source leaders
October 2022
- Creating a more inclusive security research field
- 13 tiny, terrific, and terrifying games to hack, slay, and play this Halloween 🧛🏻♀️
- Cybersecurity spotlight on bug bounty researcher @ahacker1
- Release Radar · September 2022 Edition
- Choose your own GitHub Universe 2022 adventure
- What we learned from the Security Lab’s Community Office Hours
- Diversity, inclusion, and belonging at GitHub in 2022
- 3 strategies for consolidating your toolkit and boosting productivity
- Why we’re excited about the Sigstore general availability
- Build a game this November with Game Off 2022
- Git Merge 2022 – that’s a wrap! 🎬
- Unboxing fork improvements
- Improving navigation for GitHub Actions
- Git security vulnerabilities announced
- Introducing fine-grained personal access tokens for GitHub
- GitHub at the 77th United Nations General Assembly
- 5 tips for embedding security into your workflows
- OSI’s Deep Dive is an essential discussion on the future of AI and open source
- Introducing GitHub Advanced Security SIEM integrations for security professionals
- The Story of Scalar
- The GitHub Universe 2022 agenda is live
- View GitHub code scanning findings directly in VS Code and GitHub Codespaces
- On the go with GitHub Projects on GitHub Mobile (public beta)
- Developers are now included in the WIPO Global Innovation Index
- GitHub’s supply chain security features now support Dart
- JS13K 2022 winners 🏆
- Detect secrets in your code more accurately with dry runs for custom patterns now available in GitHub Advanced Security
- GitHub Availability Report: September 2022
- Working on a creative project? Unleash your originality and start to tinker with the Aspiring Creatives Experience
- Two ways you can experience GitHub Universe
- Expand your open source contributions during Hacktoberfest 2022
- Highlights from Git 2.38
September 2022
- GitHub supports internet freedom and global availability in Iran
- After the offer: staying in tech long-term
- Best practices on rolling out code scanning at enterprise scale
- Meet the GitHub Campus Experts selected for the fall 2022 MLH Fellowship Cohort, powered by GitHub
- GitHub for Startups is generally available
- Security alert: new phishing campaign targets GitHub users
- Applications for micro-mentoring at GitHub Universe 2022 are now live
- The ReadME Project: Built for you!
- Why we signed the Copenhagen Pledge on Tech for Democracy
- Transform your software engineering practices with GitHub Enterprise
- “If you don’t make it beautiful, it’s for sure doomed”: putting the Vault in GitHub’s Arctic Code Vault
- 5 steps to convince your boss to send you to GitHub Universe
- 5 tips for prioritizing Dependabot alerts
- 8 things you didn’t know you could do with GitHub Copilot
- Join GitHub at the Grace Hopper Celebration 2022
- Gear-up and unlock the newest GitHub Global Campus features
- SCA vs SAST: what are they and which one is right for you?
- GitHub Copilot now available for teachers
- Research: open source software in India, Kenya, Egypt, and Mexico
- GitHub Availability Report: August 2022
- Research: quantifying GitHub Copilot’s impact on developer productivity and happiness
- Join us for OctogatosConf 2022
- Contributing to open source at GitHub
- Release Radar · August 2022 Edition
- Git’s database internals V: scalability
- GitHub Actions: introducing the new, larger GitHub-hosted runners beta
- Git’s database internals IV: distributed synchronization
August 2022
- What you can expect at GitHub Universe 2022: cloud, security, community, and AI
- Git’s database internals III: file history queries
- Git’s database internals II: commit history queries
- Git’s database internals I: packed object store
- 3 ways every company can get started with an open-source software strategy
- Keeping your skillset fresh as a developer
- Introducing Trilogy: a new database adapter for Ruby on Rails
- Open Source Monthly: August 2022 Edition
- The full lineup for Git Merge 2022 revealed
- GitHub Discussions is now available on GitHub Enterprise Server
- GitHub Enterprise Server 3.6 is now generally available
- 2022 Transparency Report: January to June
- The next step for LGTM.com: GitHub code scanning!
- GitHub Pages now uses Actions by default
- Dependabot now alerts for vulnerable GitHub Actions
- New request for comments on improving npm security with Sigstore is now open
- All GitHub Enterprise users now have access to the security overview
- Release Radar · July 2022 Edition
- 5 simple things you can do with GitHub Packages to level up your workflows
- GitHub Availability Report: July 2022
- Streamline virtual hackathon events with the new Hackathon in the Cloud Experience
July 2022
- Marketing for maintainers: Promote your project to users and contributors
- GitHub Sponsors available in 30 new regions
- Release Radar · June 2022 Edition
- Corrupting memory without memory corruption
- Planning next to your code – GitHub Projects is now generally available
- Launching GitHub Community: Powered by GitHub Discussions
- Introducing even more security enhancements to npm
- Tips & tricks for using GitHub Projects for personal productivity
- Here’s how academic research is shaping GitHub Discussions
- 6 strategic ways to level up your CI/CD pipeline
- Open Source Monthly: July 2022 Edition
- Research: How GitHub Copilot helps improve developer productivity
- Top tips for creating a healthy and sustainable open source community
- GitHub Availability Report: June 2022
- Managing a game dev community with GitHub Actions
- Extend your dependency information in the GitHub Dependency Graph with new GitHub Actions
June 2022
- Write Better Commits, Build Better Projects
- What to do when your open source project becomes a community?
- Announcing the summer 2022 MLH Fellowship GitHub Contributors
- The Chromium super (inline cache) type confusion
- Improving Git protocol security on GitHub Enterprise Server
- GitHub Advisory Database now supports Erlang and Elixir packages!
- Highlights from Git 2.37
- Thank you to our maintainers
- What’s new in Codespaces for Organizations
- GitHub Copilot is generally available to all developers
- GitHub enables the development of functional safety applications by adding support for coding standards AUTOSAR C++ and CERT C++
- Creating a more comprehensive dependency graph with build time detection
- Release Radar · May 2022 Edition
- The Android kernel mitigations obstacle race
- Git Merge 2022
- Prebuilding codespaces is generally available
- GitHub now publishes malware advisories in the GitHub Advisory Database
- Accelerating GitHub theme creation with color tooling
- How can the United States build its Open Source Software policy?
- Open Source Monthly: June 2022 Edition
- Implementing a robust digital identity
- Dependabot Updates hit GA in GHES
- Introducing Entitlements: GitHub’s open source Identity and Access Management solution
- Introducing Achievements: recognizing the many stages of a developer’s coding journey
- Sunsetting Atom
- Start your open source journey with Community Exchange
- One developer’s journey bringing Dependabot to GitHub Enterprise Server
- Introducing GitHub Skills
- GitHub brings supply chain security features to the Rust community
- A beginner’s guide to CI/CD and automation on GitHub
- Making technical interviews better for everyone
- What’s new in security and user management for GitHub Enterprise
- GitHub All In: Our first student cohort and what’s next
- GitHub Team or Free? How to choose the right plan
- Welcome to Maintainer Month 2022! 🎉
- GitHub Availability Report: May 2022
- Connecting to a private network from GitHub-hosted Actions runners
- GitHub Sponsors launches in Brazil
May 2022
- GitHub Enterprise Server 3.5 is now generally available
- Top games + source code from Gamedev.js Jam 2022
- npm security update: Attack campaign using stolen OAuth tokens
- Improved REST API documentation
- GitHub Sponsors launches in India
- Eight years of the GitHub Security Bug Bounty program
- Release Radar · April 2022 Edition
- Action needed by GitHub Connect customers using GHES 3.1 and older to adopt new authentication token format updates
- Math support in Markdown
- Securing and delivering high-quality code with innersource metrics
- How to measure innersource across your organization
- GitHub Achieves ISO/IEC 27001:2013 Certification!
- Graduation is here! Celebrate the Class of 2022, and join GitHub on June 11 🎓
- Open Source Monthly – May 2022 Edition
- Enhanced 2FA experience for your npm account
- Supercharging GitHub Actions with Job Summaries
- Prepare for next semester with GitHub Global Campus and Codespaces
- Today’s most common security vulnerabilities explained
- 20 of our favorite games + source code from Ludum Dare 50
- The ReadME Project Q&A: What you need to know about teaching technical skills
- GitHub Availability Report: April 2022
- Software security starts with the developer: Securing developer accounts with 2FA
- Being friendly: Strategies for friendly fork management
April 2022
- Bringing code navigation to communities
- Best practices to keep your projects secure on GitHub
- GitHub Desktop 3.0 brings better integration for your pull requests
- Being friendly: Friendly forks 101
- Celebrating 40 years of ZX Spectrum ❤️ 💛 💚 💙
- Why you shouldn’t fear requesting a CVE for your open source project
- 5 simple things every developer can do to ship more secure code
- Your guide to GitHub InFocus: Improving the way software development teams work in 2022
- Organization profiles leading the way
- Codespaces for multi-repository and monorepo scenarios
- Sharing security expertise through CodeQL packs (Part I)
- Highlights from Git 2.36
- Security alert: Attack campaign involving stolen OAuth user tokens issued to two third-party integrators
- Git security vulnerability announced
- What’s new in GitHub Discussions: Organization Discussions, polls, and more
- Release Radar · March 2022 Edition
- Git Credential Manager: authentication for everyone
- Achieving SLSA 3 Compliance with GitHub Actions and Sigstore for Go modules
- GitHub Availability Report: March 2022
- Prevent the introduction of known vulnerabilities into your code
- How Dependabot empowers you to keep your projects secure
- Proactively prevent secret leaks with GitHub Advanced Security secret scanning
March 2022
- How GitHub does take home technical interviews
- GitHub Copilot now available for Visual Studio 2022
- Career tips for beginner developers
- How to secure your end-to-end supply chain on GitHub
- Unlock all the GitHub secrets within .Tech Domains newest experience: Break The Code 2!
- An update on recent service disruptions
- GitHub Actions: secure self-hosted runners by limiting them to specific workflows
- Improving your GitHub feed
- Introducing the GHES repository cache
- Start working on GitHub Issues faster
- Validate all the things: improve your security with input validation!
- Release Radar · February 2022 Edition
- Save time with partial re-runs in GitHub Actions
- Improved management for GitHub Enterprise owners
- GitHub Availability Report: February 2022
- Our response to the war in Ukraine
February 2022
- A new way to understand your GitHub-hosted runner capacity
- Codespaces for the largest repositories just got faster
- Get started with ease using security workflows!
- GitHub Advisory Database now open to community contributions
- Code scanning finds more vulnerabilities using machine learning
- Leveraging machine learning to find security vulnerabilities
- How to make the most out of a mentoring relationship
- Encoding and escaping untrusted data to prevent injection attacks
- GitHub Enterprise Server 3.4 is generally available
- The GitHub Stars in our eyes ⭐️
- Announcing the 2022 MLH Fellowship Cohort, powered by GitHub
- Include diagrams in your Markdown files with Mermaid
- Getting started with project planning on GitHub
- How to start using reusable workflows with GitHub Actions
- Coordinated vulnerability disclosure (CVD) for open source projects
- Improving the developer experience for Dependabot alerts
- Release Radar · January 2022 Edition
- GitHub Availability Report: January 2022
- How to build a CI/CD pipeline with GitHub Actions in four simple steps
- New sponsors-only repositories, custom amounts, and more
- Code scanning and Ruby: turning source code into a queryable database
- Top-100 npm package maintainers now require 2FA, and additional security-focused improvements to npm
January 2022
- Dependency graph now supports GitHub Actions
- 2021 Transparency Report
- Thinking beyond SQL injection: OWASP tips for secure database access
- Get ready for Campus TV Season 2: 🌱 New Beginnings
- Secure your GitHub account with GitHub Mobile 2FA
- Highlights from Git 2.35
- Release Radar · December 2021 Edition
- Open source creates value, but how do you measure it?
- Reducing security risk in open source software with GitHub Actions and OpenSSF Scorecards V4
- How open source is supporting NASA’s new eyes in space
- Top-rated entries from Game Off 2021
- How five open source communities are using GitHub Discussions
- The Open Source Software Security Summit: securing the world’s code together
- GitHub Availability Report: December 2021
- How the community powers GitHub Advanced Security with CodeQL queries
2021 225
December 2021
- GitHub’s top 10 blog posts of 2021
- Fuzzing sockets: Apache HTTP, Part 3: Results
- How GitHub contributed to the Santa Clara Principles update
- How to leverage security frameworks and libraries for secure code
- Getting started with GitHub Actions just got easier!
- 5 automations every developer should be running
- Using GitHub’s security features to help identify Log4j exposure in your codebase
- How to define security requirements for your OSS project
- Getting root on Ubuntu through wishful thinking
- GitHub’s response to Log4j vulnerability CVE-2021-44228
- What’s new from GitHub Changelog? November 2021 recap
- GitHub at the UN Internet Governance Forum
- Introducing stack graphs
- Precise code navigation for Python, and code navigation in pull requests
- GitHub Enterprise Server 3.3 is generally available
- Enrolling all npm publishers in enhanced login verification and next steps for two-factor authentication enforcement
- Write more secure code with the OWASP Top 10 Proactive Controls
- Safeguard your containers with new container signing capability in GitHub Actions
- Release Radar · November 2021 Edition
- GitHub Availability Report: November 2021
- GitHub Externships: enabling India’s next generation of developers
November 2021
- 5 DevOps tips to speed up your developer workflow
- GitHub Actions: reusable workflows is generally available
- Secure deployments with OpenID Connect & GitHub Actions now generally available
- Blue-teaming for Exiv2: how to squash bugs by enrolling in OSS-Fuzz
- The Copyright Office expands your security research rights
- Accelerate security adoption in your organization
- In case you missed it, GitHub Education at Universe 2021!
- What’s new from GitHub Changelog? October 2021 recap
- 7 advanced workflow automation features with GitHub Actions
- Fall of the machines: Exploiting the Qualcomm NPU (neural processing unit) kernel driver
- GitHub’s developer-first approach to content moderation
- GraphQL global ID migration update
- Blue-teaming for Exiv2: adding custom CodeQL queries to code scanning
- The 2021 State of the Octoverse
- GitHub’s commitment to npm ecosystem security
- Highlights from Git 2.34
- Release Radar · October 2021 Edition
- Highlights from GitHub’s security roadmap at Universe 2021
- 7 unique software collaboration features in GitHub Discussions
- Make your monorepo feel small with Git’s sparse index
- GitHub Enterprise Server 3.3 enhances CI/CD and adds a new security manager role
- Blue-teaming for Exiv2: three rules of bug fixing for better OSS security
- GitHub Availability Report: October 2021
- 10 GitHub Actions resources to bookmark from the basics to CI/CD
- Building the next phase of GitHub, together
- Thank you, GitHub
- Blue-teaming for Exiv2: creating a security advisory process
- Game Off 2021 theme announcement
- Cybersecurity spotlight on bug bounty researcher @yvvdwf
- GitHub keeps getting better for open source maintainers
October 2021
- 13 short and scary games plus source to play (or hack) this Halloween 🎃
- Everything new from Universe 2021
- A peek inside some of the top games from Ludum Dare 49
- GitHub Actions for security and compliance
- GitHub Marketplace welcomes its 10,000th action
- Diversity, inclusion, and belonging at GitHub in 2021
- What’s new from GitHub Changelog? September 2021 recap
- Chrome in-the-wild bug analysis: CVE-2021-37975
- Meet the GitHub Universe hosts, and start building your schedule
- 💾 Save the date for GitHub Game Off 2021
- Student developer resources you won’t find in the classroom
- Apply now for GitHub Universe 2021 micro-mentoring
- GitHub security update: revoking weakly-generated SSH keys
- Release Radar · September 2021 Edition
- GitHub’s guide to Hacktoberfest 2021
- GitHub Advisory Database now powers npm audit
- GitHub Availability Report: September 2021
- 13 tiny and terrific entries from the js13kGames competition
- A new public beta of GitHub Releases: How we’re improving the release experience
- Cybersecurity spotlight on bug bounty researchers @chen-robert and @ginkoid
September 2021
- Enterprise managed users are now generally available for GitHub Enterprise Cloud
- The fugitive in Java: Escaping to Java to escape the Chrome sandbox
- GitHub Enterprise Server 3.2 is now generally available
- Revised enterprise DPA with new standard contractual clauses
- Chrome in-the-wild bug analysis: CVE-2021-30632
- Announcing npm’s new access token format
- GitHub Advisory Database now supports Rust
- Apache Dubbo: All roads lead to RCE
- Audit log streaming is now in public beta
- The ReadME Project: A look back at the community stories that shape us
- What’s new from GitHub Changelog? August 2021 Recap
- Announcing recipients of the GitHub Open Source Grants and GitHub Sponsors now open in India
- GitHub Enterprise Server 3.2 brings new color modes and added security capabilities
- An analysis on developer-security researcher interactions in the vulnerability disclosure process
- GitHub security update: Vulnerabilities in tar and @npmcli/arborist
- Increasing developer happiness with GitHub code scanning
- Release Radar · August 2021 Edition
- Introducing the MLH Fellowship: GitHub Externship Track
- GitHub Availability Report: August 2021
- Improving Git protocol security on GitHub
- Introducing GitHub Global Campus
August 2021
- Vague infringement allegations considered harmful
- Request for proposals: Defining standardized GitHub metrics
- 30 free and open source Linux games – part 3
- 30 free and open source Linux games – part 2
- 2021 Transparency Report: January to June
- 30 free and open source Linux games – part 1
- GitHub CLI 2.0 includes extensions!
- The npm registry is deprecating TLS 1.0 and TLS 1.1
- Enhanced support for citations on GitHub
- GitHub Discussions is out of beta
- Highlights from Git 2.33
- Securing your GitHub account with two-factor authentication
- What’s new from GitHub Changelog? July 2021 Recap
- Seamless teaching and learning through GitHub Classroom and Visual Studio Code
- August 2021 Campus Experts applications are open!
- Release Radar · Mid-year 2021 Edition
- GitHub Availability Report: July 2021
July 2021
- 15+ new code scanning integrations with open source security tools
- Standing up for developers: the GitHub Developer Rights Fellowship at Stanford Law School
- Minimum Viable Governance: lightweight community structure to grow your FOSS projects
- GitHub brings supply chain security features to the Go community
- Student leaders are taking GitHub Campus TV to the next level
- What’s new from GitHub Changelog? June 2021 Recap
- Adding support for cross-cluster associations to Rails 7
- GitHub Availability Report: June 2021
June 2021
- GitHub Copilot research recitation
- Introducing GitHub Copilot: your AI pair programmer
- Seven years of the GitHub Security Bug Bounty program
- Run online campus events with your favorite tools at no cost with the new GitHub Virtual Event Kit
- Introducing the new GitHub Issues
- A framework for building Open Graph images
- GitHub Packages Container registry is generally available
- GitHub Desktop 2.9 includes squashing, reordering, amending, and more!
- Blacktocats turn five
- What’s new from GitHub Changelog? May 2021 Recap
- Privilege escalation with polkit: How to get root on Linux with a seven-year-old bug
- Securing the open source supply chain by scanning for package registry credentials
- Updates to our policies regarding exploits, malware, and vulnerability research
- Release Radar · May 2021 Edition
- GitHub Enterprise Server 3.1 is now generally available
- GitHub Availability Report: May 2021
- Github Social Impact: How we’re driving change with social sector organizations
May 2021
- Octoverse Spotlight 2021: The Good Day Project—Personal analytics to make your work days better
- Ludum Dare 48 staff picks
- GitHub Artifact Exporter open source release
- Headphones on, volume up: Introducing The ReadME Podcast
- Video uploads now available across GitHub
- Join GitHub on June 5 to celebrate the Class of 2021
- Release Radar · April 2021 Edition
- GitHub Enterprise Server 3.1 available as a release candidate
- GitHub Availability Report: April 2021
April 2021
- Goodbye Dependabot Preview, hello Dependabot!
- A call for feedback on our policies around exploits and malware
- Scaling monorepo maintenance
- GitHub Desktop supports hiding whitespace, expanding diffs, and creating repository aliases
- GitHub Actions update: Helping maintainers combat bad actors
- Environmental sustainability at GitHub
- New and simplified Enterprise and Partner Terms
- Open source goes to Mars 🚀
- Work with GitHub Actions in your terminal with GitHub CLI
- Implementing least privilege for secrets in GitHub Actions
- Release Radar · March 2021 Edition
- Safe harbors for software collaboration, part 2
- GitHub Availability Report: March 2021
- Supreme Court sides with developers in Google v. Oracle
- Announcing the Global Maintainer Summit
March 2021
- Fuzzing sockets: Apache HTTP, Part 2: Custom Interceptors
- Introducing new push notifications, scheduling, releases and more on GitHub Mobile
- GitHub Desktop now supports cherry-picking
- GitHub Advanced Security: Introducing security overview beta and general availability of secret scanning for private repositories
- Women’s History Month spotlight: Honoring women developers
- GitHub India: Celebrating a community connected by code
- Introducing the GitHub Education Stream Team!
- One day short of a full chain: Real world exploit chains explained
- One day short of a full chain: Part 3 – Chrome renderer RCE
- Solving the innersource discovery problem
- GitHub Capture the Flag results
- Open innovation will be the winning strategy for digital sovereignty and human progress in the new decade
- How we found and fixed a rare race condition in our session handling
- What’s up with these new not-open source licenses?
- Using GitHub code scanning and CodeQL to detect traces of Solorigate and other backdoors
- One day short of a full chain: Part 1 – Android Kernel arbitrary code execution
- Improving large monorepo performance on GitHub
- One day short of a full chain: Part 2 – Chrome sandbox escape
- FUD chills: GitHub stands with security researchers on DMCA Section 1201
- Highlights from Git 2.31
- Dependabot ❤️s private dependencies
- How MLOps can drive governance for machine learning: A conversation with Algorithmia
- Measuring enterprise developer productivity
- GitHub Discussions now available for private repositories
- Git clone vulnerability announced
- GitHub security update: A bug related to handling of authenticated sessions
- This week at GitHub InFocus: Code security and DevSecOps
- Release Radar · February 2021 Edition
- 4 things you didn’t know you could do with GitHub Actions
- GitHub Availability Report: February 2021
- Octoverse spotlight: Exploring the people and stories behind GitHub data
- GitHub Security Lab Capture the Flag: A call to hacktion
- Fuzzing sockets: Apache HTTP, Part 1: Mutations
- Your guide to DevOps automation and CI/CD at GitHub InFocus
February 2021
- The little bug that couldn’t: Securing OpenSSL
- 2020 Transparency Report
- Hello from GitHub’s new Chief Security Officer
- Black History Month Spotlight: Honoring Black creators, activists, and community builders
- Let’s talk about tech internships
- Dr. Bernice King on how technology can transform the Black economy
- Open source in the 5G stack
- Your guide to Developer Experience Week at GitHub InFocus
- MLH Fellowship, powered by GitHub, welcomes American Express and Adobe to the Summer 2021 Program
- Introducing GitHub Campus TV!
- GitHub Enterprise Server 3.0 is now generally available
- Avoiding npm substitution attacks
- How we designed and wrote the narrative for our homepage
- New global ID format coming to GraphQL
- Using CWE and CVSS scores to get more context on a security advisory
- Release Radar · January 2021 Edition
- Extending GitOps to reliability-as-code with GitHub and StackPulse
- GitHub reduces Marketplace transaction fees, revamps Technology Partner Program
- Fighting for developers: GitHub policy 2020 in review
- Deployment reliability at GitHub
- GitHub Availability Report: January 2021
- What’s next for DevOps: Q&A with Lightstep CEO Ben Sigelman
- npm 7 is now generally available!
- February 2021 GitHub Campus Experts applications are open
January 2021
- The Social Sector is Contributing to the Broader OSS Ecosystem
- Improving how we deploy GitHub
- Level up your code with TwilioQuest
- The best of Changelog • 2020 Edition
- Update on an employee matter
- GitHub Enterprise Server 3.0 available as a release candidate!
- GitHub security features: highlights from 2020
- GitHub Availability Report: December 2020
- Advancing developer freedom: GitHub is fully available in Iran