Explore GitHub’s top blogs of 2024, featuring new tools, AI breakthroughs, and tips to level up your developer game.

Explore how GitHub Advanced Security can help address several of the OWASP Top 10 vulnerabilities

An exposed GitHub token could have been used to launch a supply chain attack on GitHub CodeQL, resulting in source code exposure and repository tampering of CodeQL users.

Adding the applications secrets to it's repository - add_repo_secrets.py

Update: The date for closing down the Ubuntu 20 image has changed to April 15. The following post has been updated to reflect this change. Ubuntu-latest upcoming breaking changes We…

These nine open source MCP projects provide new frameworks, tools, and assistants to unlock AI-native workflows, agentic tooling, and innovation.

Break large changes into small, reviewable, stacked pull requests with first-class GitHub support.

Learn how you can structure your enterprise to get the most value out of GitHub and provide the best experience for your developers!

Will Jason Statham save us?

I recommend turning Dependabot off and replacing it with a pair of scheduled GitHub Actions, one running govulncheck, and the other running CI against the latest version of your dependencies.

Upgrade from a local MCP Docker image to GitHub’s hosted server and automate pull requests, continuous integration, and security triage in minutes.

Microsoft is bringing GitHub into its AI engineering team. It’s part of an AI shakeup, following the GitHub CEO resigning.

I am stepping down as GitHub CEO to build my next adventure. GitHub is thriving and has a bright future ahead.

Come and join 150M developers on GitHub that can now code with Copilot for free in VS Code.