good morning
Mike Hanley
@_mph4
Chief Security Officer and SVP Engineering (prev. , , ) alum. Tweets are my own.
Ann Arbor, MIJoined August 2015
Mike Hanley’s Tweets
My talk showcasing the excellent work of and telling the story about how big things start small... is live! youtube.com/watch?v=4NuK41
We're up to some really cool things building the future of software development. And the talk has 4 separate live demos! 🚀✨
2
10
43
We had a blast at this year's first-ever hybrid #GitHubUniverse, we hope you did too. Here's a little snapshot of what went on. What was your favorite part?
read image description
ALT
read image description
ALT
read image description
ALT
read image description
ALT
12
25
179
Quote Tweet
@GitHub Universe has been a great reminder to me how privileged I am to work at GitHub and lead our incredibly talented design org... #githubuniverse2022
Show this thread
GIF
read image description
ALT
9
Want to learn how security has changed as organizations move from remote to hybrid work models? Join this chat with GitHub CSO and SVP of Engineering, , and a panel of CISOs.
7
12
Show this thread
is on the Main Stage talking about how GitHub uses GitHub to build GitHub, joined by our very own of covering security and CodeQL! #GitHubUniverse
2
5
26
GitHub processes more than 4.3 billion API requests per day, with peaks at well past 100,000 RPS. 📈
4
13
105
In about two hours, GitHub CSO & SVP of Engineering takes the stage to talk about how builds GitHub. Turn in online 👉 githubuniverse.com/events/detail/
2
7
. ... prbot is ridiculous insane.
CoPilot is inside your PRs... it's straight up suggests what code changes you should do, and gives you a PR that you can review, pull and see if it.. just worked.
#GitHubUniverse 🤯
16
89
773
'Hey, GitHub!' is an experiment from the GitHub Next team that aims to reduce the need for a keyboard by enabling voice-based interaction with GitHub Copilot. Sign up now to join the waitlist:
11
102
193
Show this thread
Curious how GitHub builds GitHub on GitHub?
What about how many commits in our internal repos over the last year?
How many API requests do we process per day?
We'll cover these, and more, tomorrow at my GitHub Universe talk - see you there!
2
11
GitHub Universe was amazing today, and I hope you enjoyed seeing all the amazing things our team has been working on - all built around making things delightful for developers. Read on to see more about what we're shipping today!
2
21
153
1,037
Today, we're excited to launch code search - a new way to search and navigate code.
We’re introducing a brand new search and code navigation view and they are jam packed with new features. Here are some I’m excited about.... 🧵 1/6
read image description
ALT
100
1,180
7,525
Show this thread
good morning
19
5
143
Using this iOS app icon as part of getting hyped for GitHub Universe next week!
Quote Tweet
GitHub Universe is right around the corner and that means I've been working on a new alternative iOS app icon, Diffraction 
shipping today 
Show this thread
4
2
Anyone who is departing Twitter or Stripe, please DM me if you would like to work on Elastic Search and broadly on our search infrastructure at GitHub!
9
224
762
Show this thread
We are looking for staff engineers who are interested to work on Object Storage at GitHub. If you are interested, please apply! 👇
5
35
130
Next week, I'll be giving a look behind the scenes at how GitHub builds GitHub on GitHub. (That's a lot of GitHub!) I'll include some stats and stories we haven't previously shared with the world. I hope you'll tune in! Check it out at GitHub Universe!
3
3
10
My #copilot team is recruiting for a research study, Nov 7-18. Each 1-hour interview will help shape our roadmap – particularly new features intended to help devs find similarities between code fragments.
github.surveymonkey.com/r/generativeAI
4
49
55
Four years in, not only is GitHub still GitHub -- we're more developer first than ever & we're still pushing the boundaries of what we believe is possible🏋️
8
10
80
good morning 🏴☠️
10
5
82
"So what would you say you do here?" I promise I do work (not just saying that for the record). Other times, I accept BLATANTLY RUDE challenges from my team to prove my craftpertise. cc/
19
11
211
Actions is now available on GitHub Mobile. You can view workflow run details and manage your pull request checks such as re-running a single job or an entire workflow run on the go!
github.blog/changelog/2022
37
133
686
Midwest is best.
Quote Tweet
Ann Arrbor is both #1 and one of the few on the list that isn't a suburb.
fortune.com/well/ranking/b
Show this thread
12
4
GitHub has learned of a phishing campaign targeting GitHub users by impersonating CircleCI to harvest user credentials and two-factor codes. Read more about our response and how to protect your accounts from phishing attacks.
39
95
140
Big news out today from about its plans to incorporate into npm.
This news makes Sigstore one of the fastest adopted open source technologies in history.
Good story by & on the importance:
5
25
64
“People say, ‘Didn’t we already have this?’ That gap where there’s the code and then there's the package—most people just don’t believe you or are terrified.” Dramatic supply chain updates from
19
50
Really loving all the excitement about and today. Thanks for interviewing and I on it today!
4
26
Extremely excited about this. The npm team has been collaborating with GitHub's package security team for months putting together an RFC to improve the audibility and trust of npm packages using SigStore and trusted build infrastructure
3
66
210
Show this thread
More info here, no repos compromised / accounts. Were all cloned repositories:
Quote Tweet
GitHub is investigating the Tweet published Wed, Aug. 3, 2022:
* No repositories were compromised
* Malicious code was posted to cloned repositories, not the repositories themselves
* The clones were quarantined and there was no evident compromise of GitHub or maintainer accounts
3
8
32
Show this thread
With all the speculation going around - GitHub is publishing updates and the facts here!
Quote Tweet
GitHub is investigating the Tweet published Wed, Aug. 3, 2022:
* No repositories were compromised
* Malicious code was posted to cloned repositories, not the repositories themselves
* The clones were quarantined and there was no evident compromise of GitHub or maintainer accounts
1
4
27
GitHub is investigating the Tweet published Wed, Aug. 3, 2022:
* No repositories were compromised
* Malicious code was posted to cloned repositories, not the repositories themselves
* The clones were quarantined and there was no evident compromise of GitHub or maintainer accounts
15
784
2,297
🐰🐇🐰🐇 New month means it's time for our latest GitHub Security Bug Bounty report! July bug bounty stats:
✅Closed 146 reports
💰Awarded $4,200 in bounties
👫101 hackers participated in our program
1
4
17
It's been an amazing first 18 months at and I'm thrilled to be expanding my role to lead both Engineering and Security! We're hiring - github.com/about/careers
6
12
102























