GitHub Actions: Early April 2026 updates - GitHub Changelog
… To get started, configure custom properties on your repositories and reference them in your cloud provider’s OIDC trust policy. …
… To get started, configure custom properties on your repositories and reference them in your cloud provider’s OIDC trust policy. …
… What’s changing Starting May 20, 2026 , Copilot usage metrics report download links—returned by the Copilot Usage Metrics API —will use the new domain copilot-reports.github.com instead of the current copilot-reports- .b01.azurefd.net pattern. github.com GHEC customers: Current New Report download … …
… What’s changed Starting today, Copilot usage metrics report download links, which are returned by the Copilot Usage Metrics API , use the new domain copilot-reports.github.com instead of the previous copilot-reports- .b01.azurefd.net pattern. github.com GHEC customers: Previous New Report download … …
… Roughly 75–80% of the time, reported issues correspond to something we already know about from internal audits. Instead of creating duplicates, we find the existing internal audit issue and add a customer-reported label. …
… Start building Start building Customer stories Meet the companies and engineering teams that build with GitHub. …
… With scoped secrets: Secrets are bound directly to trusted workflows Callers don’t automatically pass credentials Trust boundaries are explicit Permission model changes for Action Secrets We’re separating code contributions from credential management. …
… Start building Start building Customer stories Meet the companies and engineering teams that build with GitHub. …
Back to changelog CodeQL is the static analysis engine behind GitHub code scanning , which finds and remediates security issues in your code. …
… Trust and compliance : Slash commands enhance trust by making every Copilot action explicit and traceable. …