Home - The GitHub Blog

How to request a change to a CVE record

Learn how to identify which CVE Numbering Authority is responsible for the record, how to contact them, and what to include with your suggestion.

Application security

Found means fixed: Reduce security debt at scale with GitHub security campaigns

Starting today, security campaigns are generally available for all GitHub Advanced Security and GitHub Code Security customers—helping organizations take control of their security debt and manage risk by unlocking collaboration between developers and security teams.

Git

Git turns 20: A Q&A with Linus Torvalds

To celebrate two decades of Git, we sat down with Linus Torvalds—the creator of Git and Linux—to discuss how it forever changed software development.

News & insights

Vibe coding with GitHub Copilot: Agent mode and MCP support rolling out to all VS Code users

In celebration of MSFT’s 50th anniversary, we’re rolling out Agent Mode with MCP support to all VS Code users. We are also announcing the new GitHub Copilot Pro+ plan w/ premium requests, the general availability of models from Anthropic, Google, and OpenAI, next edit suggestions for code completions & the Copilot code review agent.

Latest

View all

Application security

Localhost dangers: CORS and DNS rebinding

What is CORS and how can a CORS misconfiguration lead to security issues? In this blog post, we’ll describe some common CORS issues as well as how you can find and fix them.

Application security

GitHub found 39M secret leaks in 2024. Here’s what we’re doing to help

Every minute, GitHub blocks several secrets with push protection—but secret leaks still remain one of the most common causes of security incidents. Learn how GitHub is making it easier to protect yourself from exposed secrets, including today’s launches of standalone Secret Protection, org-wide scanning, and better access for teams of all sizes.

AI & ML

GitHub for Beginners: How to get LLMs to do what you want

Learn how to write effective prompts and troubleshoot results in this installment of our GitHub for Beginners series.

View all

Changelog

View all changes

Copilot Chat now supports pasting links

April 9, 2025

GitHub Actions hosted runner fleet now includes 96 vCPU larger runner

April 9, 2025

Dependabot version updates now support Helm

April 9, 2025

Evolving GitHub Issues and Projects

April 9, 2025

View all changes

Engineering

How engineers can use one-on-ones with their manager to accelerate career growth

Go beyond status updates and use these meetings to surface challenges, solve problems, and drive impact.

IssueOps: Automate CI/CD (and more!) with GitHub Issues and Actions

A look into building IssueOps workflows on GitHub to do everything from CI/CD to handling approvals and more.

Finding leaked passwords with AI: How we built Copilot secret scanning

Passwords are notoriously difficult to detect with conventional programming approaches. AI can help us find passwords better because it understands context. This blog post will explore the technical challenges we faced with building the feature and the novel and creative ways we solved them.

How to debug code with GitHub Copilot

GitHub Copilot can streamline your debugging process by troubleshooting in your IDE, analyzing pull requests, and more, helping you tackle issues faster and more robustly.

How GitHub uses CodeQL to secure GitHub

How GitHub’s Product Security Engineering team manages our CodeQL implementation at scale and how you can, too.

Spotlight

View GitHub on YouTube

Two decades of Git: A conversation with creator Linus Torvalds

Twenty years ago, Linus Torvalds created the basis for Git in just 10 days, forever changing how developers collaborate on code. In this candid interview, Linus Torvalds discusses Git’s unexpected journey.