Security alert: social engineering campaign targets technology industry employees - The GitHub Blog

2023/07/19 7 users Security Alert

GitHub has identified a low-volume social engineering campaign that targets the personal accounts of employees of technology firms, using a combination of repository invitations and malicious npm package dependencies. Many of these targeted accounts are connected to the blockchain, cryptocurrency... 続きを読む

Branch Deploy Action: GitHub Actions でブランチデプロイと IssueOps を試す - kakakakakku blog

2023/07/18 5 users デプロイ戦略 プルリクエスト GitHub Actions

The GitHub Blog の記事 Enabling branch deployments through IssueOps with GitHub Actions を読んで「branch deployments（ブランチデプロイ）」というデプロイ戦略を知った💡 プルリクエストを main ブランチにマージしてから本番環境にデプロイするのではなく，プルリクエストを直接本番環境にデプロイして，動作確... 続きを読む

Introducing passwordless authentication on GitHub.com | The GitHub Blog

2023/07/12 13 users

Most security breaches are not the product of exotic zero-day attacks but rather involve lower-cost attacks like social engineering, credential theft or leakage, and other avenues that provide attackers with a broad range of access to victim accounts and the resources they have access to. In fact... 続きを読む

GitHub CLI project command is now generally available! | The GitHub Blog

2023/07/11 8 users Generally available

Effective planning and tracking is essential for developer teams of all shapes and sizes. Last year, we announced the general availability of GitHub Projects, connecting your planning directly to the work your teams are doing in GitHub. Today, we’re making GitHub Projects faster and more powerful... 続きを読む

Introduction to SELinux | The GitHub Blog

2023/07/05 9 users

At GitHub Security Lab, our main mission is helping secure the open source software we all rely on. While securing applications themselves is important, one of the best ways developers and system administrators can ensure the security of their systems is to create multiple layers of privilege. Li... 続きを読む

New tool to secure your GitHub Actions | The GitHub Blog

2023/06/26 6 users

We are excited to release a public beta of actions-permissions, a tool which monitors your GitHub Actions workflows and recommends the minimum permissions required to run them. Every GitHub workflow receives a temporary repository access token (GITHUB_TOKEN). These tokens originally had a very br... 続きを読む

How to use GitHub Copilot: Prompts, tips, and use cases | The GitHub Blog

2023/06/20 153 users Tips GitHub Copilot

Generative AI coding tools are transforming the way developers approach daily coding tasks. From documenting our codebases to generating unit tests, these tools are helping to accelerate our workflows. However, just like with any emerging tech, there’s always a learning curve. As a result, develo... 続きを読む

Applying GitOps principles to your operations | The GitHub Blog

2023/06/03 7 users

DevOps practices have helped demonstrate the value in bringing teams together to accelerate value for end-users. This typically includes automating build and release processes and bringing quality checks directly into the workflow. Fundamentally, these processes depend on some source of the truth... 続きを読む

How GitHub Copilot is getting better at understanding your code | The GitHub Blog

2023/05/18 11 users

To make working with GitHub Copilot feel like a meeting of the minds between developers and the pair programmer, GitHub’s machine learning experts have been busy researching, developing, and testing new capabilities—and many are focused on improving the AI pair programmer’s contextual understandi... 続きを読む

Inside GitHub: Working with the LLMs behind GitHub Copilot | The GitHub Blog

2023/05/17 11 users

The first time that engineers at GitHub worked with one of OpenAI’s large language models (LLM), they were equal parts excited and astonished. Alireza Goudarzi, a senior researcher of machine learning at GitHub recounts, “As a theoretical AI researcher, my job has been to take apart deep learning... 続きを読む

How I used GitHub Copilot to build a browser extension | The GitHub Blog

2023/05/12 5 users

For the first time ever, I built a browser extension and did it with the help of GitHub Copilot. Here’s how. I’ve built a rock, paper, scissors game with GitHub Copilot but never a browser extension. As a developer advocate at GitHub, I decided to put GitHub Copilot to the test, including its upc... 続きを読む

How companies are boosting productivity with generative AI | The GitHub Blog

2023/05/10 11 users

Is your company using generative AI yet? While it’s still in its infancy, generative AI coding tools are already changing the way developers and companies build software. Generative AI can boost developer and business productivity by automating tasks, improving communication and collaboration, an... 続きを読む

Push protection is generally available, and free for all public repositories | The GitHub Blog

2023/05/09 11 users

At GitHub, we believe that by empowering developers with intuitive security built into their workflows, we can, together, shift security from reactive to proactive. Since the beta release of secret scanning’s push protection feature for GitHub Advanced Security users in April 2022, developers usi... 続きを読む

Announcing GitHub Actions Deployment Protection Rules, now in public beta | The GitHub Blog

2023/04/20 5 users

Powered by GitHub Apps, Deployment Protection Rules bring additional control to your GitHub Actions CI/CD workflows. Deployment Protection Rules allow you, your team, and your organization to employ the management mechanisms that meet your needs and standards, to ensure you’re delivering high qua... 続きを読む

What developers need to know about generative AI | The GitHub Blog

2023/04/08 15 users chatgpt DALL-E

By now, you’ve heard of generative artificial intelligence (AI) tools like ChatGPT, DALL-E, and GitHub Copilot, among others. They’re gaining widespread interest thanks to the fact that they allow anyone to create content from email subject lines to code functions to artwork in a matter of moment... 続きを読む

Building GitHub with Ruby and Rails | The GitHub Blog

2023/04/06 27 users Ruby and Rails

Since the beginning, GitHub.com has been a Ruby on Rails monolith. Today, the application is nearly two million lines of code and more than 1,000 engineers collaborate on it daily. We deploy as often as 20 times a day, and nearly every week one of those deploys is a Rails upgrade. Upgrading Rails... 続きを読む

Announcing the GitHub Actions extension for VS Code | The GitHub Blog

2023/03/29 8 users Announcing the

Today, we’re excited to announce the release of the public beta of the official GitHub Actions VS Code extension. The extension provides support for authoring and editing workflows and helps you manage workflow runs without leaving your IDE. The extension was originally started as a community pro... 続きを読む

We updated our RSA SSH host key | The GitHub Blog

2023/03/24 134 users

At approximately 05:00 UTC on March 24, out of an abundance of caution, we replaced our RSA SSH host key used to secure Git operations for GitHub.com. We did this to protect our users from any chance of an adversary impersonating GitHub or eavesdropping on their Git operations over SSH. This key ... 続きを読む

GitHub Copilot X: The AI-powered developer experience | The GitHub Blog

2023/03/22 73 users GitHub Copilot X

At GitHub, our mission has always been to innovate ahead of the curve and give developers everything they need to be happier and more productive in a world powered by software. When we began experimenting with large language models several years ago, it quickly became clear that generative AI rep... 続きを読む

GitHub Security Lab audited DataHub: Here's what they found | The GitHub Blog

2023/03/04 5 users Here's what

At GitHub, we really care about open source security and love to help maintainers to secure their code. That is indeed the mission of the GitHub Security Lab. As users of open source software (OSS), we also love to contribute back to the community by helping improve the security posture of the OS... 続きを読む

Responsible AI pair programming with GitHub Copilot | The GitHub Blog

2023/02/23 7 users GitHub Copilot

GitHub Copilot is like something out of a sci-fi movie—an AI pair programmer that seems capable of reading your mind as you code. GitHub Copilot uses OpenAI Codex, trained on billions of lines of public code, to suggest code and even entire functions in real-time in a developer’s integrated devel... 続きを読む

Git security vulnerabilities announced | The GitHub Blog

2023/02/15 9 users

Today, the Git project released new versions to address a pair of security vulnerabilities, (CVE-2023-22490 and CVE-2023-23946) that affect versions 2.39.1 and older. These affect Git’s local clone optimization, as well as git apply, respectively. CVE-2023-22490 When cloning a repository, Git sel... 続きを読む

GitHub Copilot for Business is now available | The GitHub Blog

2023/02/14 15 users

First previewed in partnership with OpenAI in 2021, GitHub Copilot is the world’s first at-scale AI developer tool. Sitting within the editor as a simple extension, GitHub Copilot draws context from a developer’s code to suggest new lines, entire functions, tests, and even complex algorithms. Sin... 続きを読む

The technology behind GitHub’s new code search | The GitHub Blog

2023/02/06 12 users

From launching our technology preview of the new and improved code search experience a year ago, to the public beta we released at GitHub Universe last November, there’s been a flurry of innovation and dramatic changes to some of the core GitHub product experiences around how we, as developers, f... 続きを読む

Git security vulnerabilities announced | The GitHub Blog

2023/01/18 11 users

Today, the Git project released new versions to address a pair of security vulnerabilities, CVE-2022-41903, and CVE-2022-23521, that affect versions 2.39 and older. Git for Windows was also patched to address an additional, Windows-specific issue known as CVE-2022-41953. The first two vulnerabili... 続きを読む