… It means investing in the people who maintain it, giving them the tools they need to succeed, and standing with them as the ecosystem evolves rapidly in the AI era. Open source maintainers deserve better support and security, and we’re listening and investing. …
… Why agentic AI security matters right now The timing is not a coincidence. AI agents have moved from research prototypes to production tools at remarkable speed, and the security community is racing to keep up. …
… Jun.09 Release Dependabot version updates now support the Deno ecosystem supply chain security Jun.09 Retired Upcoming breaking changes for npm v12 supply chain security May.26 Release Dependabot version updates now support the sbt ecosystem supply chain security May.22 Release Staged publishing an…
… AI & ML Hack the AI agent: Build agentic AI security skills with the GitHub Secure Code Game Learn to find and exploit real-world agentic AI vulnerabilities through five progressive challenges in this free, open source game that over 10,000 developers have already used to sharpen their security ski… …
… We welcome AI in security research We want to be explicit about this: we have no problem with researchers using AI tools. AI is a force multiplier, and we expect it to play an increasing role in security research. …
… May.12 Improvement CodeQL 2.25.4 adds Swift 6.3.1 support, improvements to C and Java, and more application security May.08 Improvement CodeQL 2.25.3 adds Swift 6.3 support application security May.05 Release Secret scanning with GitHub MCP Server is now generally available application security May…
… Jun.11 Improvement AI usage report updates enterprise management tools Jun.10 Improvement Enterprises can now create up to 500 cost centers account management enterprise management tools Jun.10 Improvement Incremental analysis for Go, C/C++, and CodeQL CLI application security Jun.10 Improvement De…
… Jun.11 Improvement AI usage report updates enterprise management tools Jun.10 Improvement Enterprises can now create up to 500 cost centers account management enterprise management tools Jun.10 Improvement Incremental analysis for Go, C/C++, and CodeQL CLI application security Jun.10 Improvement De…
… May.29 Improvement Copilot usage metrics API adds cohorts for AI adoption account management copilot enterprise management tools May.28 Release Hard budget limits now available for GitHub Advanced Security application security May.28 Improvement CodeQL 2.25.5 improves query accuracy for GitHub Acti…
… Jun.10 Improvement Incremental analysis for Go, C/C++, and CodeQL CLI application security Jun.10 Improvement Dedicated security review command now available in Copilot CLI application security client apps copilot Jun.09 Release Periodic code scanning of inactive repositories application security e…