Actions are coming to your Repositories on GitHub mobile! Find all of your repository's workflows in one convenient place 📱 ⬇️ Download for iOS and Android: github.com/mobile

read image description

ALT

158

GitHub Retweeted

GitHub Security Lab

@GHSecurityLab

Fixing ReDoS vulnerabilities can be tricky, but fear not - we've got a 4-step process that'll save the day. Check out our latest blog below.

github.blog

How to fix a ReDoS | The GitHub Blog

Code scanning detects ReDoS vulnerabilities automatically, but fixing them isn’t always easy. This blog post describes a 4-step strategy for fixing ReDoS bugs.

GitHub

@github

Are you ready for it? githubuniverse.com

read image description

ALT

473

GitHub

@github

You can now protect secrets from being committed to code for free on public repositories with the public beta release of secret scanning push protection.

github.blog

Push protection is generally available, and free for all public repositories | The GitHub Blog

Announcing the general availability of push protection–a feature that proactively prevents secret leaks in your public and private repositories.

315

GitHub

@github

10h

With the right tools, it's not difficult to facilitate team retrospectives that allow everyone to actively participate. Here are some collaboration tips from the GitHub Accessibility team.

github.blog

How we work: inclusive retrospectives for the GitHub Accessibility leadership team | The GitHub Blog

Learn about tools and processes the GitHub Accessibility leadership team uses for retrospectives that fully engage every team member.

GitHub

@github

May 8

Silos block collaboration and innovation in organizations 😭. But open source communities work... Asynchronously 🛠️ Openly 🔓 Remotely 💻 At global-scale 🌎 What if your internal engineering teams could reuse those same practices? 🤔

github.blog

Building a culture of innovation in your business with GitHub | The GitHub Blog

Consider the typical software development practices in an organization. Projects are commonly closed, and causes friction across engineering teams. But open source communities work asynchronously,...

GitHub

@github

May 8

GitHub code search puts the world’s code at your fingertips. 🔎 Let’s take a look at what you can do with it.

github.blog

GitHub code search is generally available | The GitHub Blog

The world’s code is now at your fingertips.

176

GitHub

@github

May 8

Every student and teacher deserves the same access to GitHub Education offerings. We’ve enlisted GitHub’s Accessibility team to help identify areas for improving inclusivity. 🌎

github.blog

Building a more inclusive GitHub Global Campus | The GitHub Blog

Every student and teacher deserves the same access to GitHub Education offerings. We’ve enlisted GitHub’s Accessibility team to help identify areas for improving inclusivity.

118

GitHub

@github

May 7

⚡️Care to tap into this productivity power?

@jpomfret

shares all her tips and tricks:

github.com

Improve productivity through incremental automation

Small enhancements to daily workflows can have an outsized impact on the amount of available space in our day.

102

💪 Luckily, the rapid release of new functionality and tooling is de rigueur in the automation industry, which means powerful options abound.

🧠Instead,

suggests we think much smaller to solve common day-to-day problems and find more time in our days.

💡We can reclaim lost hours and accomplish a few more things on our to-do list through the automation of mundane tasks—but we’re not talking about large-scale, enterprise-grade projects.

The secret to finding more hours in your day is right in front of you. A thread. 🧵

407

LGTM. Ship it! Works on my computer 👍 What's your go-to phrase for approving pull requests?

213

128

937

Nice post from

showing how to use /slash commands allowing you to easily create Markdown like tables, task lists, code blocks, and more ⚡ dev.to/keracudmore/gi

GIF

read image description

ALT

GitHub

@github

May 5

Get a bird's eye view of your application security stack with code scanning's tool status page so you can quickly confirm everything is working ✅ and troubleshoot any security tool in your toolbox 🛠️.

github.blog

Manage your application security stack effectively with the tool status page | The GitHub Blog

Code scanning’s tool status gives you a bird's eye view of your application security stack, allowing you to quickly confirm everything is working, or troubleshoot any tool in your application...

GitHub

@github

May 5

Busywork is a barrier between us and what we want to achieve. The point is: boilerplate sucks. Watch

@ashtom

put AI to work and see how you can start shattering these barriers with GitHub Copilot X.

github.blog

Web Summit Rio 2023: Building an app in 18 minutes with GitHub Copilot X | The GitHub Blog

GitHub CEO Thomas Domke demonstrated the power of GitHub Copilot X live on stage.

GitHub

@github

May 5

This week, we look back on how

@codewithanthony

maintains over 70 open source projects—including pre-commit and babi—and connects with his community through teaching online on the ReadME Project.

github.com

Learning by doing, from Python to Twitch

Creator of pre-commit (and 70+ other projects), @codewithanthony found a modern classroom in Twitch, engaging and learning with and from the community. Get his full story, now on The ReadME Project:

We're celebrating Maintainer Month with a spotlight on the Maintainers behind some of your favorite projects!

Hey Copilot, can you plz make my snake game prettier? 🐍 #WebSummitRio

337

New to GitHub Actions? We built an actions playground to help you get started! 🕺 Go to this link to start learning: gh.io/actionsplaygro

160

May the source be with you. Go check out this classic animated ASCII art in your terminal: github.com/gabe565/ascii-

GIF

read image description

ALT

352

GitHub

@github

May 4

May the forks be with you. Always.

966

5,689

GitHub

@github

May 4

Join us all month long for Maintainer May! Go to maintainermonth.github.com to see all planned events and create your schedule.

In the latest The ReadME Project Q&A,

gets advice from

, and

about considering contributions to your project and what code—and noncode—contributions are most valuable now. This and more on the blog.

github.blog

More than meets the pull request: maintainers talk contributions | The GitHub Blog

Whether feature request, bug fix, or whatever else, there’s more to contributions than meets the eye.

Tell us how you approach different types of contributions to your project.

The CLI is a powerful tool for developers—especially if you prefer the keyboard over GUI interfaces. 💻 Learn some tips, tricks, and tools for mastering the command line in this blog post by

@itsthatladydev

github.blog

CLI tricks every developer should know | The GitHub Blog

Learn some tips, tricks, and tools for mastering the command line from GitHub’s own developers.

GitHub

@github

May 3

"It isn't that developers need to strive to be 10x, it's that every developer deserves to be made 10 times more productive. With AI at every step, we will realize the 10X developer." -Thomas

"The point is: Boilerplate sucks. It is just the barrier between us and what we want to achieve." -Thomas

"Like all of you, like every developer, my energy, my creativity every day is finite. And all the distractions of life – from the personal to the professional – beginning in the morning gradually zaps my creative energy." -Thomas

Today,

takes the stage at Web Summit Rio where he will attempt to build an app in 18 minutes with Copilot X. You can watch it live! rio.websummit.com

read image description

ALT

141

Need some help getting in the zone? This CLI for

@freecodecamp

’s Code Radio streams music for coding 24/7 🎵 github.com/JasonWei512/co

0:36

32.8K views

124

544

GitHub

@github

May 2

Alerts on false positives? Dismissed. 👋 Thanks to a new alert rules engine and a rich set of complex, contextual alert metadata, Dependabot can now detect and auto-dismiss up to 15% of npm alerts as false positives.

github.blog

Dependabot relieves alert fatigue from npm devDependencies | The GitHub Blog

A new alert rules engine for Dependabot leverages alert metadata to identify and auto-dismiss up to 15% of alerts as false positives.

GitHub

@github

May 2

We’re celebrating Maintainer Month w/ our friends

@linuxfoundation

: bit.ly/3VkQZTt. Join us for the #MaintainerMonth Happy Hour @ Open Source Summit NA, May 8 at 5:30 PM PDT Register for #OSSummit: hubs.la/Q01MLhtN0 Register for Happy Hour gh.io/ossna

GitHub

@github

May 2

Happy #MaintainerMonth! Open at Microsoft is celebrating with a new episode on the Windows Package Manager Community repository. They'll teach you how to contribute, demo wingetcreate & YAML Create, and even throw in some bug reporting tips.

youtube.com

Contributing to Windows Package Manager

In this episode of Open at Microsoft we discuss how to contribute packages to the Windows Package Manager Community repository. Both wingetcreate and YAML C...

GitHub

@github

May 2

Generative AI tools like GitHub Copilot for Business are changing the game in software by enabling engineering teams to focus on important (more enjoyable) work. See how it works in our upcoming webinar on May 11!