Login
Israel-Hamas Conflict
Protestors
Military
Donald Trump
World Cup
Social Media
Soccer
Formula 1
Baseball
Cricket
Immigration
Cryptocurrency
Artificial Intelligence
institutional access

You are connecting from
Lake Geneva Public Library,
please login or register to take advantage of your institution's Ground News Plan.

The GitHub Blog image

News from The GitHub Blog

Information about The GitHub Blog

Where is The GitHub Blog located?The GitHub Blog's Website

Media Bias Ratings

Do you diasgree?
Edit bias
Learn more about Media Bias Ratings.

Factuality

Learn more about  Factuality Ratings

Reveal Factuality Ratings by upgrading to a Premium account.

Tap Upgrade to explore subscription options to meet all your reading needs.

Ownership

Learn more about  Ownership categories

Reveal Ownership Data by upgrading to a Vantage account.

Tap Upgrade to explore subscription options to meet all your reading needs.

Top The GitHub Blog News

Technical Debt: A Hidden Barrier to Digital Business Growth
Software

Technical Debt: A Hidden Barrier to Digital Business Growth

Technical debt is one of the most overlooked threats in digital businesses, yet it silently undermines long-term growth. Debt is often a common and sometimes unavoidable aspect of software development, arising both intentionally and unintentionally as teams strive to meet deadlines and deliver features quickly. Often hidden beneath rushed development cycles and quick fixes, technical […]See the Story
How GitHub engineers tackle platform problems
San Francisco, California · San Francisco

How GitHub engineers tackle platform problems

In my spare time I enjoy building Gundam models, which are model kits to build iconic mechas from the Gundam universe. You might be wondering what this has to do with software engineering. Product engineers can be seen as the engineers who take these kits and build the Gundam itself. They are able to utilize all pieces and build a working product that is fun to collect or even play with! Platform engineers, on the other hand, supply the tools ne…Read Article
New Study Reveals Vulnerable Code Pattern Putting GitHub Projects at Risk of Path Traversal Attacks
Software · San Francisco

New Study Reveals Vulnerable Code Pattern Putting GitHub Projects at Risk of Path Traversal Attacks

A comprehensive research study has identified a widespread path traversal vulnerability (CWE-22) affecting 1,756 open-source GitHub projects, some of which are highly influential in the software ecosystem. The vulnerability, present in a commonly used Node.js code pattern for creating static HTTP file servers, enables attackers to access files outside of restricted locations, potentially compromising confidentiality […] The post New Study Reveal…See the Story

Assigning and completing issues with coding agent in GitHub Copilot

You’ve used GitHub Copilot to help you write code in your IDE. Now, imagine assigning Copilot an issue, just like you would a teammate—and getting a fully tested pull request in return.  That’s the power of the new coding agent in GitHub Copilot. Built directly into GitHub, this agent starts working as soon as you assign it a GitHub Issue or prompt it in VS Code. Keeping you firmly in the pilot’s seat, the coding agent builds pull requests based…San Francisco, California · San FranciscoRead Article

How to create issues and pull requests in record time on GitHub

Software development has always started with a conversation: What problem are we solving, why does it matter, and what does “finished” look like? On GitHub, that conversation crystallizes in an issue. No matter what tools you’re using or who you’re working with, a well-designed issue still sets the agenda for pull requests (PR), reviews, tests, and deploys. That principle hasn’t changed—but how we get from idea to issue to PR is changing fast, w…San Francisco, California · San FranciscoRead Article

DNS rebinding attacks explained: The lookup is coming from inside the house!

My colleague Kevin Stubbs mentioned the topic of DNS rebinding attacks in a  previous blog post. No worries if you haven’t read it yet though—in this article, we’ll walk you through the concept of DNS rebinding from scratch, demystify how it works, and explore why it’s a serious browser-based security issue. We’ll start by revisiting the same-origin policy, a fundamental part of web security, and show how DNS rebinding bypasses it. You’ll see re…Read Article

4 trends shaping open source funding—and what they mean for maintainers

From solo projects to major frameworks, open source maintainers are doing the work of many, for many—oftentimes without guaranteed funding. Thankfully, programs like GitHub Sponsors can make a critical difference in the long-term health of a project. But what makes an open source project attractive to sponsors?  We asked a few internal experts to analyze eight funded open source projects on GitHub. We then used that information to identify patte…San Francisco, California · San FranciscoRead Article

Inside GitHub: How we hardened our SAML implementation

For over a decade, GitHub has offered enterprise authentication using SAML (Security Assertion Markup Language), starting with our 2.0.0 release of GitHub Enterprise Server in November 2014. SAML single sign-on (SSO) allows enterprises to integrate their existing identity providers with a broad range of GitHub products, extend conditional access policies, and bring enterprise organization management to GitHub. To ship this feature, we had to bui…San Francisco, California · San FranciscoRead Article

GitHub for Beginners: Test-driven development (TDD) with GitHub Copilot

Welcome to the next episode in our GitHub for Beginners series, where we’re diving into the world of GitHub Copilot. We’re now on our seventh episode, and we’ve covered quite a lot of ground. You can check out all our previous episodes on our blog or as videos. Today we’re going to dive into the world of testing, a much needed but historically tedious part of the development process. This is especially true as our codebase becomes larger and mor…San Francisco, California · San FranciscoRead Article

Bypassing MTE with CVE-2025-0072

See how a vulnerability in the Arm Mali GPU can be exploited to gain kernel code execution even when Memory Tagging Extension (MTE) is enabled.Read Article

Agent mode 101: All about GitHub Copilot’s powerful mode

Last month, we released agent mode as a step toward building GitHub Copilot into a system that not only works with you, but works for you. When you give it a natural-language prompt, Copilot’s agent mode works to execute it on your behalf, automating processes and workflows that would otherwise take a lot of time and giving you space to focus on higher-level problem solving.​  For those who are newer to coding, agent mode can be a useful synchro…San Francisco, California · San FranciscoRead Article

Breaking News Topics Related to The GitHub Blog

California, United States

California, United States

Artificial Intelligence

Artificial Intelligence

San Francisco, California

San Francisco, California

Microsoft

Microsoft

Technology

Technology

San Francisco County

San Francisco County

United States

United States

Software

Software

News
For You
SearchBlindspotLocal