GitHubVerified account

Threat modeling isn’t one size fits all, but there are a few best practices we’ve learned along the way. Check out our approach to threat modeling at GitHub—and share your own! #GitHubThreatModelinghttps://github.blog/2020-09-02-how-we-threat-model …

Introducing the GitHub Stars program. We're excited to share and recognize those who go above and beyond in inspiring all of us, educating the people around them and sharing their knowledge and passion. And we want you to know about them too!https://github.co/3bpwXjV 

How do you really know what’s in your software? Join us and the Nutanix team for a step-by-step guide to securing your code (and its dependencies) with Dependabot and the GitHub dependency graph. RSVP for next week 10 September 11PT.https://github.co/2YQRV5T 

Check out our Availability Report for August with updates on our status page refresh and how we're improving the reliability of our systems:https://github.blog/2020-09-02-github-availability-report-august-2020/ …

A software supply chain is anything that goes into, or affects your code, from development, through your CI/CD pipeline, until it gets deployed into production. How should you protect yourself from malicious code in your supply chain?https://github.blog/2020-09-02-secure-at-every-step-what-is-software-supply-chain-security-and-why-does-it-matter/ …

Evan @youyuxi You set out to solve a problem, and built the @vuejs community. Read more about Evan’s journey to build Vue at The ReadME Project.https://github.com/readme/evan-you 

This U.S. election season GitHub is encouraging our employees and developers in the U.S. to register, vote, and help run elections. Here are some resourceshttps://github.blog/2020-09-01-ready-to-vote-in-the-u-s-2020-elections/ …

GitHub Container Registry introduces easy sharing across organizations, fine-grained permissions, and free, anonymous downloads for public container imageshttps://github.blog/2020-09-01-introducing-github-container-registry/ …

"With GitHub, we’re proactively identifying vulnerabilities and fixing them part of the build process." See how Emirates National Bank of Dubai transformed digital banking with built-in security, CI/CD, and more.https://github.com/customer-stories/emirates-nbd …

Last year the Adacats, GitHub’s employee resource group for marginalized genders, started a mentorship program. We’re sharing insights (and some fun stories) for anyone interested in starting a program of their own.https://github.blog/2020-08-26-adacats-mentorship-program/ …

Issy @IssyL0 Long is one of 25 @machomebrew maintainers, but with millions of users and package downloads each year, Issy stresses the importance of staying patient and taking breaks. Read Issy’s story at The ReadME Project:https://github.com/readme/issy-long …

Have you submitted to the DEV hackathon yet? Check out the PR Title Checker, a GitHub Action that helps maintainers validate contributions by checking if titles conform to the contribution guidelines. #DEVCommunity.https://dev.to/thehanimo/check-if-pr-titles-follow-contribution-guidelines-42o4 …

No one likes waiting. GitHub Action Hero Keirron Stach built discord-dispatch-deploy to get pre-released games on Discord and in the hands of alpha testers faster. Read all about it athttps://github.blog/2020-08-21-github-action-hero-keirron-stach/ …

DevSecOps is about securing software from day one, but what does that look like in practice? Learn how to fix vulnerabilities as you code—using pull requests and GitHub code scanning.https://github.blog/2020-08-27-secure-at-every-step-putting-devsecops-into-practice-with-code-scanning/ …

Being an open source maintainer comes with a lot of ownership and responsibility. Jordan balances work, life, and his commitments to the open source community, while maintaining the greatest respect to all users. Read his story at The ReadME Projecthttps://github.com/readme/jordan-harband …