Search

github.blog › security

Making secret scanning more trustworthy: Reducing false positives at scale

…triaging and less time fixing real issues. Over time, this slows down remediation and reduces confidence in the system. To address this challenge, GitHub collaborated with Microsoft Security & AI’s Agents Offense…

Jun 11, 2026 · Mariko Wakabayashi

github.blog › ai-and-ml › github-copilot

Unlocking the full power of Copilot code review: Master your instructions files

…AI & ML Agent pull requests are everywhere. Here’s how to review them. A practical guide to reviewing agent-generated pull requests: what to look for, where issues hide, and how to…

Nov 14, 2025 · Ria Gopu

github.blog › changelog

Manage agent skills with GitHub CLI - GitHub Changelog

…the agentskills.io spec and checks remote settings like tag protection, secret scanning, and code scanning. These settings are not required, but strongly recommended to improve the supply chain security of your…

Apr 16, 2026 · Allison

github.blog › changelog

Notice about upcoming new format for GitHub App installation tokens - GitHub Changelog

…via REST API application security Jun.23 Release Copilot CLI: New terminal interface is generally available client apps copilot Jun.22 Improvement New features and Claude as agent provider preview in JetBrains…

Apr 24, 2026 · Allison

github.blog › ai-and-ml

The developer role is evolving. Here’s how to stay ahead.

…AI & ML Agent pull requests are everywhere. Here’s how to review them. A practical guide to reviewing agent-generated pull requests: what to look for, where issues hide, and how to…

Oct 6, 2025 · Gwen Davis

github.blog › ai-and-ml › github-copilot

Building AI-powered GitHub issue triage with the Copilot SDK

…AI & ML Agent pull requests are everywhere. Here’s how to review them. A practical guide to reviewing agent-generated pull requests: what to look for, where issues hide, and how to…

Mar 24, 2026 · Andrea Griffiths

github.blog › security › supply-chain-security

Investing in the people shaping open source and securing the future together

…Looking ahead, GitHub will continue investing in tools like pull request controls, while also ensuring AI is a force multiplier for maintainers from issue triage, pull request reviews, security vulnerability identification, and…

Mar 17, 2026 · Kevin Crosby

github.blog › changelog

CodeQL 2.25.2 adds Kotlin 2.3.20 support and other updates - GitHub Changelog

Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. We’ve recently released CodeQL 2.25.2 , which brings…

Apr 15, 2026 · Allison

github.blog › ai-and-ml › github-copilot

A cheat sheet to slash commands in GitHub Copilot CLI

…AI & ML Agent pull requests are everywhere. Here’s how to review them. A practical guide to reviewing agent-generated pull requests: what to look for, where issues hide, and how to…

Jan 21, 2026 · Jacklyn Carroll

github.blog › security › supply-chain-security

A year of open source vulnerability trends: CVEs, advisories, and malware

…AI & ML Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game Learn to find and exploit real-world agentic AI vulnerabilities through five progressive challenges in…

Mar 26, 2026 · Jonathan Evans