GitHub had 20,000+ secret scanning alerts across 15,000 repositories. Here's how we separated signal from noise, built remediation workflows, and reached inbox zero in nine months.The post How GitHub used secret scanning to reach inbox zero appeared first on The GitHub Blog.

These six free settings will not make your project unhackable. Nothing will. What they will do is close the easy doors. Turn these on, and your project will be meaningfully harder to attack than it was before.The post 6 security settings every GitHub maintainer should enable this week appeared first on The GitHub Blog.

Explore how the Open Source Program Office uses GitHub’s new license compliance product to manage open source dependencies at scale.The post How GitHub maintains compliance for open source dependencies appeared first on The GitHub Blog.

The open source Git project just released Git 2.55. Here is GitHub’s look at some of the most interesting features and changes introduced since last time.The post Highlights from Git 2.55 appeared first on The GitHub Blog.

The GitHub Advisory Database is processing more vulnerability reports than ever before. Here's what's driving the surge, how we're responding, and how the community can help.The post Inside the Advisory Database and what happens when vulnerability volume breaks records appeared first on The GitHub Blog.

GitHub joined the United Nations Development Programme in Ghana to explore how open source governance can support one of West Africa's most ambitious digital reform efforts. The post GitHub and UNDP team up to advance development priorities in Ghana with open source appeared first on The GitHub Blog.

How GitHub's culture and benefits helped me be the best version of myself.The post Transitioning as a Hubber appeared first on The GitHub Blog.

Explore how the GitHub Copilot agentic harness delivers strong results across multiple benchmarks and leading token efficiency, while maintaining flexibility to choose among more than 20 models.The post Evaluating performance and efficiency of the GitHub Copilot agentic harness across models and tasks appeared first on The GitHub Blog.

Explore how my day as a senior leader looks now that I use 40 automations to help, and learn more about some of my favorites.The post I automated my job (and it made me a better leader) appeared first on The GitHub Blog.

We’re calling for targeted amendments to resolve conflicts with open source licensing and align with international transparency frameworks while preserving regulatory intent.The post GitHub joins coalition advocating for fixes to California AI Transparency Act to protect open source appeared first on The GitHub Blog.